Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/eNPbFuxKT99lS3-KAMALO8BuDDE.roa
File: eNPbFuxKT99lS3-KAMALO8BuDDE.roa (raw, json)
Hash identifier: zeti9LK+8lfLh4m9+T0vtK2t3PdkQngQRsqcpGscA14=
Subject key identifier: 78:D3:DB:16:EC:4A:4F:DF:65:4B:7F:8A:00:C0:0B:3B:C0:6E:0C:31
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0AB7
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/eNPbFuxKT99lS3-KAMALO8BuDDE.roa
Signing time: Thu 15 Sep 2022 02:37:42 +0000
ROA not before: Thu 15 Sep 2022 02:37:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9244
IP address blocks: 61.56.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2743 (0xab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 15 02:37:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=78D3DB16EC4A4FDF654B7F8A00C00B3BC06E0C31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:e3:2e:f7:89:95:16:94:60:fa:0c:2a:fb:
7d:e3:68:b3:91:02:e8:43:0e:2c:5c:22:d7:85:9d:
ae:bb:6d:b2:d5:bb:c2:10:2c:1c:bd:f8:f6:aa:31:
2f:c0:33:7b:41:54:ec:6c:f0:61:13:e5:b0:4e:a9:
b7:c6:4f:28:8d:57:0c:fa:ad:43:2a:d6:1f:89:66:
87:cb:0e:ee:ec:ca:58:cf:c8:14:67:f2:04:53:65:
c5:fe:e3:c4:4d:10:10:e8:e2:9e:d5:23:17:90:13:
00:fb:90:96:b7:2f:f9:b3:fc:12:24:fa:a3:01:85:
a2:0a:f6:28:41:71:d6:6f:f6:5d:10:11:c7:68:9b:
80:99:63:34:9b:d1:73:8e:a7:41:7c:3a:cc:40:fa:
3e:20:63:16:05:69:71:24:41:22:13:d3:bf:65:74:
c6:e6:2f:50:66:2a:67:9d:b3:47:30:77:26:fb:5c:
87:55:99:fa:87:42:55:a9:bc:75:93:22:88:d9:3f:
ba:8b:a9:5e:38:41:f6:ea:a7:e5:71:dd:45:df:e3:
a1:9f:40:8f:05:32:1b:8a:7f:5d:65:38:9f:94:a1:
e2:e3:b4:d9:22:c3:1a:bb:6c:35:a9:c7:1a:18:3c:
f5:d0:6a:bd:97:f0:6e:4f:e6:e4:ec:a5:aa:ad:14:
0f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D3:DB:16:EC:4A:4F:DF:65:4B:7F:8A:00:C0:0B:3B:C0:6E:0C:31
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/eNPbFuxKT99lS3-KAMALO8BuDDE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.86.0/24
Signature Algorithm: sha256WithRSAEncryption
45:5e:1c:68:80:58:fc:16:7c:48:3d:fe:c4:7d:5d:38:3b:49:
88:3a:d0:3c:c5:a1:2c:6e:a7:8f:44:46:c8:03:c0:e8:dc:73:
6e:6d:f4:21:4a:96:8c:23:2a:ba:f8:54:9c:e2:0a:31:d4:78:
f8:2d:44:21:23:04:79:5c:09:59:ff:b0:d2:4b:c9:a4:f4:77:
f1:2f:d1:f9:06:6a:ca:0a:dc:74:60:e2:86:c5:50:c8:92:ea:
34:73:1e:24:54:ab:b9:ed:21:59:84:e9:00:7b:c2:98:b2:7d:
ac:83:d3:34:a0:b1:4b:80:16:a3:32:ee:89:54:48:9d:ee:58:
a4:d6:bc:7c:95:b1:9b:56:5b:ef:a9:3f:02:2b:47:00:f9:36:
18:4a:42:40:54:32:37:c2:12:14:8c:b1:a8:53:a8:e1:53:9c:
6d:32:21:d4:e9:62:95:c2:c5:50:77:24:08:cc:87:0e:ba:58:
ba:cc:5a:79:53:0a:1b:30:49:97:a5:9d:5b:30:18:c9:3a:68:
e3:34:22:00:eb:3f:b3:64:96:39:ab:5a:f0:da:20:22:8b:b0:
3e:7b:96:f6:90:2a:95:ee:74:c0:57:ea:ec:f9:78:f3:d2:7c:
c6:6c:a1:a9:0e:2c:f1:74:01:90:6f:d8:a5:dc:fd:de:fb:2c:
66:32:3c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:39 2023 by rpki-client on console-ams.rpki-client.org