Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/RyEAnT20aro7nn8sFkhVd7AQZTM.roa
File: RyEAnT20aro7nn8sFkhVd7AQZTM.roa (raw, json)
Hash identifier: SbCLX/Zwmn/vG9/cNHR/+q4YUbKmNR1ArY0ZPnof23k=
Subject key identifier: 47:21:00:9D:3D:B4:6A:BA:3B:9E:7F:2C:16:48:55:77:B0:10:65:33
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0E03
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/RyEAnT20aro7nn8sFkhVd7AQZTM.roa
Signing time: Thu 29 Dec 2022 09:32:08 +0000
ROA not before: Thu 29 Dec 2022 09:32:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 10085
IP address blocks: 203.163.194.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3587 (0xe03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4721009D3DB46ABA3B9E7F2C16485577B0106533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:01:14:28:28:4a:2e:7c:e9:e1:d2:00:e6:b1:
7c:88:ca:fb:7d:05:d5:93:08:84:78:5f:66:1c:a6:
90:90:8c:3c:4c:4d:79:2b:e4:b2:87:7e:e1:96:a8:
3d:3f:29:c0:7d:98:59:24:c7:f1:55:11:f8:9b:4a:
fb:b5:4c:55:77:f3:9f:01:8f:57:39:b3:1c:68:5e:
3b:08:3d:57:1e:e8:88:03:88:fd:2c:3f:cc:ae:d8:
4f:80:39:84:9e:fb:74:61:3a:cd:b7:e2:7a:be:22:
ce:94:b9:4a:78:14:da:e4:fc:52:2b:e8:6e:33:8c:
aa:23:9a:53:33:4b:7b:4e:f3:8e:0e:78:ac:91:35:
5a:4e:5b:01:72:3e:99:5d:1b:7b:8a:51:44:41:be:
46:63:07:29:2a:a6:24:bb:55:0e:25:b4:fc:99:3a:
b5:da:4a:4f:6b:6e:56:da:fc:8a:3a:ef:bb:27:01:
06:5f:e2:80:eb:77:91:75:79:e3:28:30:60:6b:91:
68:86:e5:6c:ba:aa:a7:5e:e5:98:cd:d7:de:7f:69:
57:73:e5:1c:88:fa:67:01:08:47:33:f1:df:ca:f5:
a9:92:bb:6f:81:d7:24:b1:db:44:4c:12:e4:31:e4:
b7:86:5b:d0:e3:79:b2:a4:dd:b2:70:e0:94:15:b0:
29:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:21:00:9D:3D:B4:6A:BA:3B:9E:7F:2C:16:48:55:77:B0:10:65:33
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/RyEAnT20aro7nn8sFkhVd7AQZTM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.163.194.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:5e:83:79:1a:f1:93:5f:52:d0:73:63:d9:31:0c:ad:2a:dc:
9c:01:4d:aa:1a:63:16:12:b7:de:cd:26:37:76:ed:b4:b7:fd:
ae:d1:af:fa:3b:e6:76:5a:66:ac:7d:b9:6b:fe:68:19:30:86:
13:b1:96:eb:7b:e4:4c:52:c6:ae:6b:48:6c:18:59:4c:79:ae:
72:a3:6e:ff:f8:b8:c0:c0:b4:af:e4:20:2e:54:86:3e:da:b2:
84:10:eb:cc:be:7d:b7:fc:60:be:4b:ea:44:1b:bf:47:46:32:
2a:ba:48:25:4c:a5:02:75:0e:ec:d0:30:5b:3d:10:90:bf:7b:
37:6b:5d:70:e6:3f:48:17:2a:64:09:90:e1:86:32:9f:f2:36:
e2:07:7d:13:b3:54:e8:a2:fd:3b:b1:18:dd:84:a7:0c:7b:0a:
06:69:76:67:ea:ac:03:90:de:8b:d0:2a:f2:2c:70:f6:2d:8f:
1b:57:59:03:e4:52:0d:13:be:33:30:2e:63:ca:6c:8d:c4:6a:
3c:70:ef:99:1d:16:47:e6:12:68:cf:b7:b4:b5:4a:97:2c:18:
3d:56:bd:cb:0a:4b:35:3f:68:03:d0:65:01:6b:c5:35:eb:83:
bc:3e:ee:21:af:10:5b:fd:b1:e8:24:00:4f:4e:8f:be:41:f7:
75:45:b6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:03:14 2023 by rpki-client on console-fra.rpki-client.org