Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/_D3qTb2WRYKVEId4Y8DEPFOZZSA.roa
File: _D3qTb2WRYKVEId4Y8DEPFOZZSA.roa (raw, json)
Hash identifier: zTCT8pGhswAv5MsiNvi0FSqH/yKn4r/YYN4QoqeaYKI=
Subject key identifier: FC:3D:EA:4D:BD:96:45:82:95:10:87:78:63:C0:C4:3C:53:99:65:20
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DEA
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/_D3qTb2WRYKVEId4Y8DEPFOZZSA.roa
Signing time: Thu 29 Dec 2022 09:32:01 +0000
ROA not before: Thu 29 Dec 2022 09:32:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17408
IP address blocks: 113.21.80.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3562 (0xdea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FC3DEA4DBD9645829510877863C0C43C53996520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d5:09:d5:7a:6f:88:51:ea:bb:18:65:ed:31:
c2:84:b3:2d:16:fb:36:fd:42:6e:ce:00:0f:0f:90:
8d:85:37:1d:c6:9c:b3:c5:d7:a0:f7:f0:bb:70:6d:
ab:37:63:e6:76:98:61:65:ed:e1:af:78:21:54:10:
18:80:40:3c:e2:c1:70:fe:1a:b0:e9:8f:82:46:7a:
05:13:32:88:89:14:99:3c:f5:f1:14:06:52:49:72:
ca:d8:1a:4e:7b:f4:18:4b:67:9f:d5:e5:31:02:58:
fa:4b:ae:e6:83:d6:e4:bd:e7:be:e6:8b:94:61:fd:
da:a2:1b:00:f2:bf:ee:ba:dd:3e:d3:93:c5:0a:b4:
81:bf:28:45:b7:56:97:81:94:4b:bc:00:b9:3e:66:
9f:61:7a:7e:ee:cd:2c:5f:a2:f3:ae:82:2d:49:54:
35:b1:0a:73:c5:1f:23:4e:0f:8b:4f:cb:90:b8:ab:
e5:94:70:05:b5:01:8d:ca:4d:ad:e7:90:42:e5:3d:
eb:2f:eb:b0:51:4d:c2:15:a9:14:20:75:ca:86:4d:
8e:40:96:ae:8e:9a:99:b0:e2:f0:d5:e4:34:06:18:
bd:76:0f:09:06:0e:20:ac:68:a8:6b:26:b7:9f:82:
59:ec:d7:1d:7b:5e:f6:0e:6c:0d:ce:b1:dc:37:ef:
8a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3D:EA:4D:BD:96:45:82:95:10:87:78:63:C0:C4:3C:53:99:65:20
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/_D3qTb2WRYKVEId4Y8DEPFOZZSA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.80.0/21
Signature Algorithm: sha256WithRSAEncryption
52:dc:d9:b5:72:37:9f:60:80:bd:80:d9:0d:1f:b2:bf:69:20:
25:d9:d9:1e:72:4e:76:be:f7:f3:3c:82:3a:e4:97:f5:28:04:
50:2e:b3:41:88:be:3d:5c:7b:f9:ce:19:bd:63:82:48:e8:ec:
d8:29:25:91:e8:a2:b8:e1:39:2d:d5:20:fa:26:aa:0f:36:f5:
a2:1c:cf:7c:db:43:aa:3d:67:96:35:31:ad:e4:5c:65:2d:2e:
82:1f:9e:c5:48:94:72:7f:09:27:f5:fd:fe:87:94:43:1a:95:
cb:97:bb:3c:f8:86:da:a0:c0:87:78:70:84:02:b0:4c:ec:e0:
62:f6:c8:81:cd:10:fc:cd:10:ea:f4:82:f6:8e:b6:99:6d:d1:
b1:ca:10:09:9c:3e:eb:a2:67:d8:7d:72:3f:f5:3f:29:8c:b1:
79:84:43:fb:80:93:02:f1:c3:ba:93:76:6d:12:6c:b1:e4:df:
bb:ac:7c:ec:b9:94:90:66:16:1c:2c:96:88:32:a1:04:7a:d1:
e7:e1:69:8c:6c:9b:39:db:8f:88:9e:6b:c4:72:ab:55:99:cb:
44:ae:79:e9:cf:d4:c6:04:d5:68:8f:1e:99:15:81:a3:18:9e:
5d:5b:3e:fb:64:47:97:b2:fe:61:e1:40:73:93:04:8a:ea:49:
a2:9c:5d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:03:14 2023 by rpki-client on console-fra.rpki-client.org