Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/t2bczSRlUqZ4F3BLMQRgA20haWA.roa
File: t2bczSRlUqZ4F3BLMQRgA20haWA.roa (raw, json)
Hash identifier: O3lxlFlFTwqv3T8638CQg2Z8/BZZGD1RbyIjzDSWSeg=
Subject key identifier: B7:66:DC:CD:24:65:52:A6:78:17:70:4B:31:04:60:03:6D:21:69:60
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0E66
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/t2bczSRlUqZ4F3BLMQRgA20haWA.roa
Signing time: Thu 23 Mar 2023 01:12:41 +0000
ROA not before: Thu 23 Mar 2023 01:12:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 63199
IP address blocks: 150.116.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3686 (0xe66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Mar 23 01:12:41 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B766DCCD246552A67817704B310460036D216960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:f7:7a:af:cc:79:49:80:28:0a:5f:a4:16:
4e:ce:3d:93:58:48:ec:12:6c:53:59:21:38:2f:77:
1b:47:e7:2a:b9:fa:22:26:2c:2f:62:23:1b:e2:c3:
3a:8d:4a:3c:1a:68:09:6c:15:54:ec:17:19:6e:e3:
97:7e:74:ca:1d:9a:b8:70:6e:e4:a8:1b:fc:89:90:
fc:c1:f9:d5:74:d3:30:62:a5:c1:01:bd:6c:ac:67:
8e:6b:1c:10:0a:b0:da:bb:d6:d2:19:6e:f6:0c:7e:
49:46:7c:93:c0:3c:4f:f9:99:47:5b:ea:4f:ca:7c:
2e:42:3d:f3:ec:7e:b2:df:75:43:98:2f:4d:f3:e3:
78:f0:50:f2:2b:d1:16:eb:6d:04:20:c2:15:df:a5:
80:16:54:b2:7b:d9:49:1d:32:dd:14:5e:e7:e2:14:
d6:cc:14:85:8a:d4:8d:2e:0e:e6:a3:a6:10:99:7a:
48:41:b1:2c:30:06:96:da:44:55:c2:05:ba:d3:5e:
c7:0d:d7:98:6c:55:ad:71:40:5a:cb:cd:b5:73:49:
04:ce:96:9f:cc:ff:b1:91:29:ae:18:78:96:ad:16:
0a:ba:3f:cf:cd:53:e5:bd:da:16:37:33:1b:92:f2:
30:42:8b:ef:11:7f:86:b4:42:27:25:0e:5f:fd:f1:
51:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:66:DC:CD:24:65:52:A6:78:17:70:4B:31:04:60:03:6D:21:69:60
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/t2bczSRlUqZ4F3BLMQRgA20haWA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.5.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b3:5e:6e:4e:f1:85:ef:11:72:18:80:de:32:bb:b1:6b:72:
00:dd:49:a3:8d:94:80:30:75:52:a1:f6:58:43:39:71:ac:11:
da:a0:b0:d9:38:f5:c3:a9:41:f3:28:f4:7c:1e:c0:a2:b2:95:
82:83:7b:b9:14:9b:c0:5c:19:e9:e5:76:82:76:fb:e5:9b:fe:
a2:34:15:ad:30:5b:c1:5f:f1:74:66:4e:91:1f:19:5d:fb:bb:
5a:88:87:8b:2f:2c:13:74:f2:9c:9b:10:1d:c2:33:83:15:d8:
a6:b9:8e:83:6c:92:75:22:87:02:21:d0:06:f0:a6:e3:93:10:
8b:ed:f9:be:4d:40:78:60:87:34:ca:78:75:20:3b:2c:02:0f:
fa:f4:b4:90:4a:d6:ef:0e:fb:33:4b:46:c8:91:4f:4b:63:f4:
ed:60:31:cd:51:64:ba:e3:13:e2:ff:4c:5b:07:43:cb:71:88:
32:53:ad:5e:cd:8c:8d:dc:12:47:75:bc:e8:73:f3:fc:cd:43:
c6:f8:9a:34:85:d0:63:80:d6:5f:4e:db:5d:f6:ad:dc:a6:aa:
c5:a8:6f:82:d5:6e:7e:be:bf:81:6a:34:95:7a:f6:e3:67:68:
fd:16:40:81:a4:0b:e7:06:60:67:2f:11:60:dc:5e:9e:ca:af:
7e:4c:03:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:03:15 2023 by rpki-client on console-fra.rpki-client.org