Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/tSq7eWh5ANzOBllOAZgMOPC1Di8.roa
File: tSq7eWh5ANzOBllOAZgMOPC1Di8.roa (raw, json)
Hash identifier: NKUdgUcr9F576PyxDL6oE5nYDi51Auu23bk7rztUDc8=
Subject key identifier: B5:2A:BB:79:68:79:00:DC:CE:06:59:4E:01:98:0C:38:F0:B5:0E:2F
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DAC
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/tSq7eWh5ANzOBllOAZgMOPC1Di8.roa
Signing time: Thu 29 Dec 2022 06:57:56 +0000
ROA not before: Thu 29 Dec 2022 06:57:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131273
IP address blocks: 113.21.92.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3500 (0xdac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 06:57:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B52ABB79687900DCCE06594E01980C38F0B50E2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:11:c4:ef:93:99:7f:dd:fb:c5:ae:d8:68:
fc:0a:59:b8:d3:65:75:b6:88:ec:ae:7d:d3:4b:5f:
25:2d:90:2a:79:db:3a:87:ec:2f:8f:0a:b4:81:d5:
6e:6a:98:c4:c8:31:93:9c:f1:99:15:18:8a:cb:2e:
e5:c1:39:aa:47:c3:dd:0f:5f:2a:d1:d8:ef:9e:39:
c2:f2:f2:ef:77:4d:94:01:e3:1e:e9:8f:13:6f:11:
a4:a4:fd:5a:7d:d3:3e:58:da:81:ca:50:7b:1c:99:
d0:df:6c:ce:e1:bc:72:eb:5a:b4:36:8f:91:66:c7:
f5:bc:d6:b5:66:32:59:2d:2f:37:af:d1:30:8e:8e:
59:90:18:e2:96:01:29:c1:cb:60:17:67:96:f9:83:
ee:3a:e6:72:5c:ad:6d:37:7d:74:a2:9d:c8:ae:31:
e8:b8:15:28:f1:a8:a3:71:0f:83:3c:64:2c:f6:82:
85:f1:ae:7b:d9:21:2a:44:85:e4:ca:68:6b:75:19:
e7:cb:42:95:9e:fa:f0:69:5e:51:be:14:d5:cd:d5:
66:16:cf:c8:0d:e7:62:84:c3:e7:67:b4:cd:2e:01:
d6:0e:48:63:8f:e3:57:6b:d6:65:f9:5f:a7:e8:58:
9d:f3:68:2e:1f:c7:1a:bf:64:be:8e:3f:39:7e:5e:
20:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2A:BB:79:68:79:00:DC:CE:06:59:4E:01:98:0C:38:F0:B5:0E:2F
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/tSq7eWh5ANzOBllOAZgMOPC1Di8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.92.0/24
Signature Algorithm: sha256WithRSAEncryption
01:81:8f:29:b5:c4:e7:18:25:17:b1:74:18:b1:39:5b:76:8f:
72:86:b2:a5:3d:a4:5f:c5:12:f0:42:fd:15:f8:43:64:e6:c6:
02:42:fd:bd:13:44:a3:5a:6f:e9:6e:e0:47:0f:f8:84:82:8c:
3b:02:6d:15:60:d5:b2:d7:64:59:38:ec:83:77:f1:b8:0a:7f:
c1:bb:d5:b8:8e:6c:7f:30:f0:93:14:1a:25:e3:df:eb:94:93:
03:6b:dd:90:80:d9:69:31:14:c4:34:00:30:75:db:b8:18:e1:
00:f4:b8:8e:7c:d2:e4:17:4e:0d:f7:57:4b:57:2b:38:bf:42:
82:95:02:88:b9:4f:89:90:c3:49:df:5a:33:7e:90:72:e2:9a:
43:e8:d0:e0:36:26:df:1b:07:34:64:a9:75:fa:91:20:97:44:
da:2b:f4:44:b2:b5:e8:21:90:d1:8b:6b:34:79:c5:56:e9:bd:
ea:1c:0d:eb:b5:4e:0b:32:d1:d8:b2:4a:aa:ff:01:67:d0:3b:
12:40:09:49:70:c1:3a:7e:d6:2d:e1:6f:b9:ba:f4:7d:26:83:
f5:e0:9f:9e:60:76:5d:2b:73:a9:12:fb:9c:dd:6f:d6:65:5f:
cb:1a:de:28:9f:c8:64:0f:55:7b:3d:26:b2:e1:20:60:62:e1:
67:de:65:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:59 2023 by rpki-client on console-fra.rpki-client.org