Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/qYtD5hLEJK0qqtwwTP-_soFogXo.roa
File: qYtD5hLEJK0qqtwwTP-_soFogXo.roa (raw, json)
Hash identifier: 9g3GWNwRZhA7qURIgjTT/9TefzhZoBGMu1p2SPk8cxI=
Subject key identifier: A9:8B:43:E6:12:C4:24:AD:2A:AA:DC:30:4C:FF:BF:B2:81:68:81:7A
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0AB7
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/qYtD5hLEJK0qqtwwTP-_soFogXo.roa
Signing time: Thu 15 Sep 2022 02:37:40 +0000
ROA not before: Thu 15 Sep 2022 02:37:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9244
IP address blocks: 61.56.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2743 (0xab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 15 02:37:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A98B43E612C424AD2AAADC304CFFBFB28168817A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:af:f9:66:ed:fc:6c:1d:23:0d:83:5f:91:47:
7d:d6:2e:58:3a:d1:bc:a4:cb:25:b9:46:36:ef:c7:
18:35:46:d3:92:ea:56:04:1b:c8:ba:b0:a5:ee:38:
92:0b:07:6c:72:e5:ac:70:51:83:b2:15:d6:b4:39:
ac:08:5e:83:d4:7b:6e:2b:d7:d8:7f:21:0a:a9:55:
fe:40:e1:85:86:0a:e2:d3:f2:ca:ce:69:97:e3:da:
b6:53:01:5c:7e:ef:35:12:16:51:77:30:c9:2e:82:
8a:5b:7e:ab:e5:bb:ee:ef:7b:de:40:76:f4:1b:f1:
cd:b7:24:a5:c0:0b:d4:c2:99:ac:d4:da:5e:c3:e3:
46:f4:ae:5c:05:f8:d3:ee:9c:7e:20:c8:e9:ab:73:
38:25:59:20:b5:a0:a8:52:b2:03:36:e7:fd:6d:0b:
72:c5:ff:fd:1b:0b:56:e6:3a:9b:69:93:8c:14:20:
43:bd:51:ec:c9:d3:42:95:80:0b:00:bc:09:4c:67:
1a:91:3e:00:a5:14:87:bd:33:4f:0b:db:21:1e:f1:
99:3d:31:10:f4:fd:61:7c:97:be:6b:9c:4c:ee:81:
a7:1a:30:f3:5d:dd:d6:4d:c4:0f:d8:1d:a5:3a:2a:
1d:81:59:73:f8:56:2c:30:15:17:53:60:5c:8b:60:
84:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8B:43:E6:12:C4:24:AD:2A:AA:DC:30:4C:FF:BF:B2:81:68:81:7A
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/qYtD5hLEJK0qqtwwTP-_soFogXo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.84.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:41:03:3e:91:74:b1:c1:17:d8:54:73:fc:ac:c1:56:e4:a9:
6a:79:5e:b6:2c:14:b2:cb:bd:e1:70:e6:59:0b:1c:15:ac:09:
3c:9e:ba:7f:24:e4:d9:54:1b:e0:0f:18:85:6f:b6:68:1c:42:
11:a7:23:90:63:36:70:2b:5d:44:2f:d2:97:b1:5f:5f:a6:30:
49:1f:88:2b:cc:30:c6:5d:1e:03:e5:3e:78:ba:71:96:1e:bc:
27:a3:5d:e9:bc:22:9a:8b:41:31:77:73:09:09:5c:dd:1d:39:
64:64:e9:ce:0d:75:42:2d:1f:86:a8:3d:d7:4f:a2:ac:43:53:
38:f4:60:c9:89:2d:2d:05:e1:a7:9d:7d:cb:4c:23:71:15:68:
24:49:0e:69:8d:1c:ab:5b:3b:b8:df:d7:bc:e2:fd:67:76:8f:
72:06:75:e9:81:4c:eb:5c:a5:bd:c2:04:f8:c0:ce:5f:b9:c6:
9b:83:76:f4:c0:43:c8:b4:22:19:84:41:25:27:37:2c:a4:98:
e0:fe:18:e1:50:76:fa:0c:76:e1:23:94:a4:98:33:7b:48:35:
31:14:0c:d2:02:3f:1f:ff:c4:c1:28:d1:6f:c2:92:80:47:02:
55:24:c5:35:00:b2:1c:5e:0a:47:92:5e:50:84:66:cf:dd:5c:
f2:6e:eb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:03:15 2023 by rpki-client on console-fra.rpki-client.org