Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GTBC/0mtLuT5iHw1BQKVpmKqtHUURQ78.roa
File: 0mtLuT5iHw1BQKVpmKqtHUURQ78.roa (raw, json)
Hash identifier: F4EQ4E6tT9pZ5Vyn7KwbGwjc/SVXoH4myXVfqJ1sciw=
Subject key identifier: D2:6B:4B:B9:3E:62:1F:0D:41:40:A5:69:98:AA:AD:1D:45:11:43:BF
Certificate issuer: /CN=DBA793D0FFE611AC397F197570E19785046EE739
Certificate serial: 0A35
Authority key identifier: DB:A7:93:D0:FF:E6:11:AC:39:7F:19:75:70:E1:97:85:04:6E:E7:39
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/26eT0P_mEaw5fxl1cOGXhQRu5zk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/0mtLuT5iHw1BQKVpmKqtHUURQ78.roa
Signing time: Thu 15 Sep 2022 02:46:43 +0000
ROA not before: Thu 15 Sep 2022 02:46:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18413
IP address blocks: 61.67.0.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2613 (0xa35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBA793D0FFE611AC397F197570E19785046EE739
Validity
Not Before: Sep 15 02:46:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D26B4BB93E621F0D4140A56998AAAD1D451143BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:65:62:4f:78:64:00:0d:92:af:72:ad:73:a1:
a0:a3:33:fb:a1:06:05:60:85:88:7c:11:dc:4a:27:
7b:f2:7f:9d:fd:85:dc:00:f6:d7:f8:98:fa:6f:77:
09:5d:0f:a8:6d:ee:be:8e:81:e8:5d:0d:de:ed:26:
32:63:07:92:64:08:e9:02:86:ad:b0:65:88:2a:e8:
56:da:c2:90:03:63:2d:eb:ed:93:2f:56:b3:34:d2:
8c:02:57:4c:6d:c1:31:14:3a:71:82:a1:3a:ab:4f:
80:79:5a:98:18:52:a9:66:6c:81:2c:fc:9a:cf:a4:
05:cb:bd:1e:e9:11:74:07:04:2d:4c:0b:73:64:12:
d1:e6:6f:ea:6c:40:33:ba:de:38:b4:f2:be:43:fa:
df:57:bc:4a:a6:e8:75:fd:7d:83:3e:3e:b9:5c:e1:
33:2a:f0:7d:60:fe:fb:87:f6:6d:18:33:7e:80:78:
49:67:9a:f6:a5:5b:79:3a:80:2c:68:f3:76:ba:af:
b5:39:b0:57:02:67:37:e2:9b:6b:6a:37:ac:9d:a9:
a3:6a:0f:68:b1:33:79:73:b3:47:de:2b:8f:a3:b5:
f0:14:94:15:3e:7a:2f:5a:97:93:9e:ee:26:ff:10:
a4:c9:48:e5:a7:93:a5:6d:dd:fc:be:4e:28:09:03:
12:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6B:4B:B9:3E:62:1F:0D:41:40:A5:69:98:AA:AD:1D:45:11:43:BF
X509v3 Authority Key Identifier:
keyid:DB:A7:93:D0:FF:E6:11:AC:39:7F:19:75:70:E1:97:85:04:6E:E7:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/26eT0P_mEaw5fxl1cOGXhQRu5zk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/26eT0P_mEaw5fxl1cOGXhQRu5zk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/0mtLuT5iHw1BQKVpmKqtHUURQ78.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.67.0.0/20
Signature Algorithm: sha256WithRSAEncryption
ad:b1:00:bb:6c:b6:77:56:f8:59:8b:8b:52:d2:a3:d4:91:9d:
50:5f:6f:7f:2e:81:2a:70:c3:cb:2c:f9:b2:94:da:5d:65:22:
f3:0d:8a:1c:22:ba:a4:af:6c:43:54:c6:59:42:76:b7:5b:6b:
ed:4b:74:13:0b:88:60:7c:ee:58:90:51:4c:b3:79:b1:0e:7e:
cd:09:c8:65:a0:d4:fa:28:77:a6:03:ed:46:9f:8a:37:a1:20:
6f:45:db:36:d8:69:aa:41:bc:b2:4b:fe:b2:14:a1:89:72:bb:
e3:c5:22:75:1e:d6:cf:c0:01:9b:db:2f:45:71:91:ce:a3:15:
8e:00:da:e1:e0:ea:9a:2c:00:16:56:c7:a9:81:93:56:ec:a1:
9e:0b:e0:3f:3f:b8:25:96:0d:cd:b1:b4:f5:df:e2:af:90:cc:
1e:2e:6e:58:d5:09:7c:7b:3a:f0:70:6d:c0:5b:7d:56:93:ea:
9a:20:20:d1:80:39:32:c0:9e:b3:f4:10:6e:2a:7a:b8:09:d7:
c1:ed:25:aa:f9:8a:45:aa:47:50:55:78:1b:3d:c3:64:37:c6:
6d:f9:91:fc:3b:86:d5:f1:27:55:59:55:43:87:e5:f4:9a:cb:
80:72:cd:ea:15:34:2e:bc:77:21:b0:2d:76:8f:d8:ef:9b:87:
a4:5a:0d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:40 2023 by rpki-client on console-ams.rpki-client.org