Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/GmwKAdrWu3Tkk4R57ztCmCoXWS0.roa
File: GmwKAdrWu3Tkk4R57ztCmCoXWS0.roa (raw, json)
Hash identifier: NM+Gu1SzFEB5wwTyTq0WDdKPWFuaU7elLfD2HD1zBUI=
Subject key identifier: 1A:6C:0A:01:DA:D6:BB:74:E4:93:84:79:EF:3B:42:98:2A:17:59:2D
Certificate issuer: /CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Certificate serial: 0B0C
Authority key identifier: 0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/GmwKAdrWu3Tkk4R57ztCmCoXWS0.roa
Signing time: Thu 23 Mar 2023 00:21:45 +0000
ROA not before: Thu 23 Mar 2023 00:21:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 198949
IP address blocks: 61.65.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2828 (0xb0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C78961642A04BE132708DB193D7BA916B2B67CB
Validity
Not Before: Mar 23 00:21:45 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1A6C0A01DAD6BB74E4938479EF3B42982A17592D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:ac:9c:b0:72:22:26:ea:fa:31:ab:98:fa:
85:81:8b:69:6b:92:23:1e:81:bf:86:13:8b:1e:3c:
cc:77:79:7b:cd:c6:e9:16:29:32:7c:bf:42:96:05:
9d:90:25:b3:dc:bb:7a:14:0a:4a:b6:83:55:08:ea:
78:98:eb:76:42:ed:58:9f:82:05:bd:99:53:f5:17:
02:90:4b:3e:c0:de:b6:73:4e:e5:07:f4:7d:51:ae:
19:b9:43:90:a8:1a:99:7a:f2:25:2d:bf:54:27:d2:
59:ea:ae:af:78:53:29:e2:43:6f:16:cb:c9:77:ae:
49:fb:fd:b5:63:4c:e7:d6:61:34:bc:97:db:8d:c0:
e7:83:91:9b:a7:27:ba:e4:39:41:7a:a6:a4:fc:5d:
b7:63:b4:40:cb:ac:aa:0e:74:89:09:f7:88:20:a3:
1d:05:b2:1b:cd:49:be:28:e9:7a:c5:05:9d:75:ef:
39:1d:65:0d:30:10:d0:69:2c:97:fc:f2:f1:51:fc:
ae:24:eb:3c:4d:06:5f:82:3e:40:ca:94:27:bf:0b:
2b:cb:44:df:89:e8:a0:6f:07:2e:66:4d:e6:39:99:
e0:6c:7a:f7:3f:88:0e:1b:9f:54:df:fd:e9:b4:49:
f1:48:25:0b:0f:8d:7e:6f:79:6a:49:1a:b0:42:33:
69:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:6C:0A:01:DA:D6:BB:74:E4:93:84:79:EF:3B:42:98:2A:17:59:2D
X509v3 Authority Key Identifier:
keyid:0C:78:96:16:42:A0:4B:E1:32:70:8D:B1:93:D7:BA:91:6B:2B:67:CB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/DHiWFkKgS-EycI2xk9e6kWsrZ8s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DHiWFkKgS-EycI2xk9e6kWsrZ8s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DONGFONG/GmwKAdrWu3Tkk4R57ztCmCoXWS0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.65.238.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:43:23:8a:39:bb:10:e2:35:f5:83:46:5a:b5:17:fd:ca:57:
a3:bd:4d:3b:81:3e:b5:b6:63:32:c5:bd:44:3e:6b:33:06:76:
d4:e5:9b:ef:c9:f6:31:26:c3:2e:c4:f9:73:7e:b6:08:0d:3d:
ff:79:f7:45:a3:70:75:ff:b6:0c:3f:10:7a:ae:25:f9:bf:b2:
52:e2:cd:76:d3:9d:77:16:c1:15:94:08:11:80:a8:0e:a1:48:
56:2c:f8:f0:cd:34:ba:de:7f:a6:b4:77:ea:0c:6a:07:7f:de:
65:e2:d0:65:d4:32:13:b3:43:79:c8:1d:c9:63:c8:e6:ba:3a:
bc:c4:21:39:19:80:be:f6:1a:0d:87:9c:75:ef:6c:93:73:72:
2c:70:c5:00:18:02:db:f3:d9:bb:c6:f1:04:e4:7e:f2:13:f4:
95:4f:9a:64:5c:49:00:85:a1:2f:fc:98:86:e9:87:b9:f7:63:
f4:e5:40:aa:25:36:bf:9c:dd:66:d0:4c:25:7f:e5:4a:6a:77:
fb:c8:a7:f9:4e:ff:8f:1e:41:76:9f:13:1d:16:75:e7:c8:67:
ec:1e:73:c9:57:3f:32:c0:93:c7:a1:79:9f:53:ec:93:f5:cc:
51:79:3d:81:b3:4a:22:62:98:3d:3e:b7:a2:c7:88:90:37:ac:
a6:a7:40:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:03:15 2023 by rpki-client on console-fra.rpki-client.org