Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/2IJPA2HcNXb2K6OE560smI4jJUM.roa
File: 2IJPA2HcNXb2K6OE560smI4jJUM.roa (raw, json)
Hash identifier: Tx2jI3LehZ2WVx+LX+92BJiHAuOqpejTkA1mmdf8Lho=
Subject key identifier: D8:82:4F:03:61:DC:35:76:F6:2B:A3:84:E7:AD:2C:98:8E:23:25:43
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0AB7
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/2IJPA2HcNXb2K6OE560smI4jJUM.roa
Signing time: Thu 15 Sep 2022 02:37:42 +0000
ROA not before: Thu 15 Sep 2022 02:37:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9584
IP address blocks: 113.21.184.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2743 (0xab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 15 02:37:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D8824F0361DC3576F62BA384E7AD2C988E232543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:82:21:55:13:cd:10:17:aa:f5:7d:84:99:
8b:25:28:d8:4c:d4:81:03:22:cf:03:52:09:62:81:
37:a8:d4:85:cf:b0:a6:92:75:63:07:62:8c:52:48:
ac:88:b8:7c:e4:0e:27:fd:7c:d3:d0:f4:03:52:a8:
c4:56:94:16:ce:88:b3:2e:21:67:f5:28:a2:02:ac:
fc:a0:b1:5d:63:6a:13:09:d8:ba:f7:d5:e1:86:0f:
f5:45:40:9e:c6:0f:f9:f9:65:89:e5:e2:c1:52:64:
e0:06:73:8d:4e:a1:96:c8:a4:db:d7:4d:02:cd:d6:
e3:bd:d8:13:7e:ad:5c:67:74:86:e5:52:16:e7:c9:
5f:3b:ec:5c:3c:e0:3d:9a:fc:67:cc:f5:70:fd:ca:
3c:0c:21:14:3a:e5:43:d7:e1:7a:00:1b:b7:8d:67:
c1:ba:21:14:39:57:fb:33:17:42:4a:6d:7b:8c:fa:
af:12:5d:94:68:f6:5e:3f:e7:43:44:64:22:03:b6:
f3:0f:5d:43:73:09:a5:9a:e6:0a:cc:13:d8:9e:2b:
ce:8f:b2:c7:29:63:96:02:d2:ac:ff:61:26:01:e8:
9b:6e:07:a1:8f:cd:f3:bf:71:ff:72:9b:1e:34:cc:
28:6a:a5:2f:f3:e9:ff:27:8d:f2:b1:10:bc:17:d7:
49:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:82:4F:03:61:DC:35:76:F6:2B:A3:84:E7:AD:2C:98:8E:23:25:43
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/2IJPA2HcNXb2K6OE560smI4jJUM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.184.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:65:81:55:f2:7e:f5:42:0e:2a:13:3d:33:ef:4d:1d:2b:d4:
d1:5e:08:89:50:0d:aa:f4:2b:b7:b5:f2:61:a7:19:b6:46:26:
10:d6:50:df:9c:79:b0:bb:d7:84:d8:00:4e:ed:49:7b:62:b2:
05:0a:68:c1:61:9c:67:80:0c:d6:d2:27:06:4b:a6:bf:01:e4:
36:58:ef:09:f7:29:86:f8:68:15:95:51:2e:39:ee:c0:b2:5a:
9d:f5:82:4e:3d:3b:a2:d7:50:f4:d0:fb:94:1b:47:27:ae:af:
29:40:3a:94:99:4a:b0:62:37:bd:8f:48:8c:4d:c2:12:fc:aa:
ed:ce:ae:b7:cd:b8:99:66:6b:81:8c:78:25:0a:6f:07:3d:51:
9e:96:8c:73:f2:0b:14:97:83:a0:31:78:bb:34:ee:d0:eb:02:
fa:74:59:a1:0a:7c:1e:4c:59:52:c0:f4:ab:30:e8:b4:98:1f:
ed:6a:02:22:bf:1e:20:03:6c:0c:f5:44:e3:3d:02:6b:ec:db:
c0:90:20:dc:d0:e6:12:cd:a1:0a:8f:8f:d5:38:58:88:85:5a:
cd:b2:a3:6e:f5:b7:c0:8b:ee:14:c9:ac:04:59:06:c3:82:48:
87:c6:4a:1a:70:cf:b6:98:1e:79:a4:ae:b6:3d:f5:7e:6b:45:
6c:fb:30:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:39 2023 by rpki-client on console-ams.rpki-client.org