Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/kXkQqyuN4-b-198KAmf9tlOmRvk.roa
File: kXkQqyuN4-b-198KAmf9tlOmRvk.roa (raw, json)
Hash identifier: 0z25lLLAA1HVLPD/kK51EBkFSgG7iUkNdooKfmptfjE=
Subject key identifier: 91:79:10:AB:2B:8D:E3:E6:FE:D7:DF:0A:02:67:FD:B6:53:A6:46:F9
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0AB7
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/kXkQqyuN4-b-198KAmf9tlOmRvk.roa
Signing time: Thu 15 Sep 2022 02:37:43 +0000
ROA not before: Thu 15 Sep 2022 02:37:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9244
IP address blocks: 61.56.64.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2743 (0xab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 15 02:37:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=917910AB2B8DE3E6FED7DF0A0267FDB653A646F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:f8:8d:93:fb:c2:25:88:71:1a:1d:78:6f:
97:f7:3d:fd:c4:61:9f:90:4e:9f:c9:44:f9:80:27:
23:e2:aa:95:2a:1b:cd:88:e9:ea:bc:d2:45:17:eb:
f7:c1:67:ff:ac:78:c2:b4:4c:e7:44:fe:69:d9:30:
4d:14:ec:8a:77:6f:1d:b4:7a:ce:5e:83:4e:b0:c1:
d9:1e:83:b9:94:37:a9:49:1d:ae:d9:19:df:26:6c:
2d:7e:1a:35:dc:d2:1f:c1:83:d4:23:62:e0:e8:d2:
81:6d:a0:2a:c1:5c:c7:6a:4b:eb:51:f6:cc:3a:7d:
ab:42:2e:7d:47:e8:a6:8e:21:30:51:8f:cf:a7:22:
15:3d:be:c7:57:31:46:d9:f4:55:c7:26:9c:3b:93:
44:de:88:d3:e8:a9:94:d2:81:b0:6d:83:93:6d:f8:
96:a8:f6:df:dc:45:d2:a4:5d:7e:5e:f0:e1:47:4f:
db:4c:ce:33:95:bc:28:d0:7a:32:39:5a:20:09:39:
ca:b6:2f:42:f5:87:2e:11:04:3e:45:bf:6c:57:66:
9a:5a:f2:d4:94:9d:3f:71:3c:50:d7:ca:2c:6d:1c:
92:92:a6:6e:e2:0f:1a:4d:cd:53:b6:ad:d5:f1:af:
d8:48:3a:22:ba:e5:7e:12:b3:26:6e:55:08:42:fc:
4f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:79:10:AB:2B:8D:E3:E6:FE:D7:DF:0A:02:67:FD:B6:53:A6:46:F9
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/kXkQqyuN4-b-198KAmf9tlOmRvk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.64.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:3b:f0:a2:52:49:bc:c7:31:8f:1d:f0:b5:03:26:93:b5:7c:
4f:7a:c8:f3:15:0c:69:c1:b4:a4:35:21:fe:5e:be:23:d8:c2:
3f:ba:38:3c:0f:6b:15:be:23:f1:7d:54:ab:52:c3:50:bd:3c:
6f:43:c9:28:63:81:5f:a9:58:48:53:c8:e7:ff:55:ab:48:77:
c3:e1:a8:88:d5:40:99:e3:c1:83:be:18:40:d7:b5:b0:93:4a:
db:82:fb:fe:c4:2a:33:3b:13:8f:43:02:14:ea:68:1e:45:b4:
6c:77:57:cf:3e:30:ed:9f:e6:f9:c2:a5:80:01:d2:c3:c1:d5:
57:e1:0b:74:8a:cd:64:00:18:2a:14:88:06:f5:77:3e:85:a4:
29:24:2a:9e:3e:55:da:5b:27:70:c0:6c:eb:02:87:2e:cc:26:
6d:e4:f9:e6:4d:b7:16:90:0e:a4:55:05:48:b7:ce:91:05:f6:
69:08:8f:81:57:4d:2b:9e:80:4a:e9:41:10:7f:a4:d7:c1:72:
d0:b6:66:38:4d:5a:15:6e:88:2c:81:e0:e4:e7:42:df:83:56:
5e:ce:82:92:d5:6c:1e:4e:33:8d:a3:38:77:d2:22:ab:db:a2:
fa:05:1b:dc:4d:e9:e9:85:95:63:36:b1:0d:ff:3e:fa:83:d7:
83:9a:87:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:03:15 2023 by rpki-client on console-fra.rpki-client.org