Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/fjXoIgmJ7qL87Fhs4meCECGaK60.roa
File: fjXoIgmJ7qL87Fhs4meCECGaK60.roa (raw, json)
Hash identifier: k3zYmQ8bgLybeQuQCujGZziFL94OL4uD3TuLxqiU1N8=
Subject key identifier: 7E:35:E8:22:09:89:EE:A2:FC:EC:58:6C:E2:67:82:10:21:9A:2B:AD
Certificate issuer: /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial: 0A75
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/fjXoIgmJ7qL87Fhs4meCECGaK60.roa
Signing time: Thu 27 Oct 2022 06:32:38 +0000
ROA not before: Thu 27 Oct 2022 06:32:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 137263
IP address blocks: 43.224.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2677 (0xa75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Validity
Not Before: Oct 27 06:32:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7E35E8220989EEA2FCEC586CE2678210219A2BAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7c:5c:06:29:b8:b2:a8:bd:22:8e:49:bf:36:
03:b9:1f:3f:83:66:bb:00:4b:2a:70:df:09:d1:e2:
dd:2c:7a:c1:ce:09:26:5a:5a:d4:76:76:43:04:68:
8e:37:a3:a0:1b:f8:29:b2:54:a2:18:63:88:b5:e9:
2c:f2:aa:88:24:fc:ea:dd:c7:6a:25:c7:cc:54:ab:
ab:b5:8b:9e:89:83:fa:3f:f0:d5:e1:c9:4f:ef:4f:
7e:eb:93:ac:9d:9b:ad:cb:30:6b:17:12:dc:4d:fe:
16:fe:7f:3c:67:d3:5b:3a:52:68:10:d7:0e:1e:e5:
5e:05:32:38:4d:f5:95:0a:ae:5c:94:65:e8:3c:c0:
d1:88:a0:e1:fd:51:c7:be:4e:f9:bc:ab:5e:28:36:
54:cb:e1:1d:e8:b4:99:e3:49:bd:03:14:b5:40:4f:
e0:3f:cf:ee:4d:44:7e:22:b0:6f:93:f4:c7:4b:76:
8d:74:60:60:be:21:a2:fe:b5:df:3c:18:ff:3d:1c:
a9:ca:34:46:1a:dc:9d:12:98:b2:ff:3b:01:dc:b5:
31:4d:ff:73:ed:f2:53:24:57:05:81:56:94:ba:63:
f6:44:96:e5:0b:88:fd:36:a9:ed:f4:a5:d6:95:2e:
fd:5f:9b:c4:95:16:09:a8:83:ba:4b:8d:03:a7:18:
70:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:35:E8:22:09:89:EE:A2:FC:EC:58:6C:E2:67:82:10:21:9A:2B:AD
X509v3 Authority Key Identifier:
keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/fjXoIgmJ7qL87Fhs4meCECGaK60.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.22.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ca:1d:ef:17:05:ce:59:09:3e:15:94:65:95:db:2f:19:c6:
52:15:fb:f3:81:56:d3:ae:55:b7:2f:27:b1:cd:fb:4d:5f:6a:
de:9c:ca:8f:4c:85:63:80:46:dc:14:1f:69:64:bd:2e:6a:9f:
49:15:5c:22:f7:a2:e3:89:9c:a4:7a:bf:df:65:44:09:e1:1c:
fd:03:95:27:a0:dd:7e:2a:36:25:e0:90:77:9a:c6:a9:de:bf:
4a:a4:2f:87:8d:c1:70:95:61:9b:a7:e0:1d:53:11:20:b4:8d:
1e:b7:70:fe:d7:e3:69:bc:7e:6f:2f:23:d3:8a:d1:2d:67:96:
76:96:83:f7:d7:b6:f7:c4:6c:c6:1c:9c:33:87:50:bb:47:cc:
e8:71:15:92:91:f5:c6:05:0a:1c:9f:4e:cd:25:a2:f8:36:04:
71:75:79:a0:13:ab:c6:ca:5b:f9:0a:6e:94:5f:9c:0c:2c:88:
40:00:75:57:50:ed:3e:a6:1d:b9:29:54:07:8f:14:dd:5d:5e:
85:8a:b9:97:eb:54:6a:ae:24:85:c2:34:f3:cc:22:db:d3:b1:
e5:f7:20:37:2b:e6:58:32:00:43:3b:f2:7a:cd:95:f4:79:e4:
2b:60:02:ae:45:5d:e9:3f:b9:b0:01:e5:9c:48:ef:9a:1a:6b:
98:70:68:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:52 2023 by rpki-client on console-ams.rpki-client.org