Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GTBC/8-5aKf4FJHXQNhg04B3OrU9AYyw.roa
File: 8-5aKf4FJHXQNhg04B3OrU9AYyw.roa (raw, json)
Hash identifier: QPuQyIRyu5cbfCG1VQ0GltX8mqRGPN0izjAuBpDA2ZI=
Subject key identifier: F3:EE:5A:29:FE:05:24:75:D0:36:18:34:E0:1D:CE:AD:4F:40:63:2C
Certificate issuer: /CN=DBA793D0FFE611AC397F197570E19785046EE739
Certificate serial: 0A35
Authority key identifier: DB:A7:93:D0:FF:E6:11:AC:39:7F:19:75:70:E1:97:85:04:6E:E7:39
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/26eT0P_mEaw5fxl1cOGXhQRu5zk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/8-5aKf4FJHXQNhg04B3OrU9AYyw.roa
Signing time: Thu 15 Sep 2022 02:46:44 +0000
ROA not before: Thu 15 Sep 2022 02:46:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18413
IP address blocks: 61.65.192.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2613 (0xa35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBA793D0FFE611AC397F197570E19785046EE739
Validity
Not Before: Sep 15 02:46:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F3EE5A29FE052475D0361834E01DCEAD4F40632C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:e9:9b:f0:8c:6d:7d:c0:34:1b:67:6c:f7:
4e:bf:18:5f:40:4f:96:77:97:6e:00:2c:59:3b:11:
d2:10:d5:87:12:f3:bd:25:fb:58:f9:66:52:59:b4:
4e:40:ad:19:c1:90:10:5d:ed:9a:ba:0a:d9:86:0d:
3e:05:ff:bc:80:1e:41:11:59:6c:d8:d9:db:a1:83:
be:55:d8:8e:4e:42:71:12:3e:f4:00:a4:27:6d:6d:
da:88:0f:f6:ee:f9:ab:ae:aa:a5:e5:7b:f9:98:c9:
ab:b4:42:53:a6:aa:dc:54:f7:03:23:05:14:81:ea:
fb:2d:a0:77:a8:a3:3c:df:d1:d8:74:e0:ef:42:35:
48:41:2e:7f:75:2f:54:1d:f0:87:0c:98:96:aa:74:
2c:2f:df:0c:d0:36:13:47:16:91:00:44:eb:5e:7f:
76:c2:ce:03:0a:7e:a7:41:b9:5f:d1:20:98:8e:67:
1c:48:77:5b:ab:98:3c:fe:ac:67:cf:6c:44:00:d9:
e1:d0:af:36:9c:29:02:22:e4:fd:4a:ee:a2:b8:ac:
98:78:c3:38:6c:54:14:f3:e5:84:78:d5:5b:65:d5:
6a:88:6b:58:f5:08:7d:d2:8d:fc:02:6f:db:e5:b4:
b5:59:d1:9f:77:96:00:e6:80:ab:78:80:e5:fe:16:
10:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EE:5A:29:FE:05:24:75:D0:36:18:34:E0:1D:CE:AD:4F:40:63:2C
X509v3 Authority Key Identifier:
keyid:DB:A7:93:D0:FF:E6:11:AC:39:7F:19:75:70:E1:97:85:04:6E:E7:39
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/26eT0P_mEaw5fxl1cOGXhQRu5zk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/26eT0P_mEaw5fxl1cOGXhQRu5zk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GTBC/8-5aKf4FJHXQNhg04B3OrU9AYyw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.65.192.0/19
Signature Algorithm: sha256WithRSAEncryption
85:68:59:7a:92:b0:32:9d:09:2f:af:11:29:3f:03:8e:1e:a3:
1f:5b:05:ec:b7:6d:a5:09:6b:ac:3f:93:ed:a4:ff:6a:cf:e9:
c8:74:2a:32:d7:52:74:79:23:46:ef:1f:c6:ca:05:43:7c:0f:
54:06:e0:ea:6b:a8:28:0f:9e:8a:6e:af:1c:57:12:d8:92:8d:
b3:23:b6:ec:a2:78:33:8c:c2:a3:9b:40:f2:1d:7c:1b:08:16:
92:8a:4d:9c:a0:2d:59:72:b8:f8:1c:17:ee:6d:df:38:04:8d:
e8:f6:50:30:b9:d1:67:99:6a:cc:02:23:82:4a:f0:53:53:af:
04:89:c1:a9:ec:2d:e8:b0:4b:8e:c6:56:c5:c9:91:58:a0:0c:
f3:81:ab:24:e6:d1:0b:96:82:87:9d:31:7b:a4:8e:24:37:40:
01:b9:5b:0d:21:9b:2f:22:76:c9:51:05:74:b4:e7:4a:83:fb:
82:a7:06:1e:a8:ff:89:65:89:ac:ec:fb:ec:2f:90:f9:9b:23:
8b:21:de:bb:a1:86:fa:7a:87:68:bc:c0:47:2d:66:ba:2c:70:
27:af:a1:7d:a9:3d:9c:17:f7:02:f2:44:a0:df:a0:d2:1b:96:
98:bb:6e:5b:3c:14:fc:c8:0f:ef:d6:10:c8:ac:98:c3:64:0a:
1e:bd:75:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:14 2023 by rpki-client on console-fra.rpki-client.org