Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/N1fjAQiVUqjMrue1MNgbUDcQnns.roa
File: N1fjAQiVUqjMrue1MNgbUDcQnns.roa (raw, json)
Hash identifier: pPOJt8g4W9CDHt/toaN8E8SGeq4I7ZkGrzmwijMls7E=
Subject key identifier: 37:57:E3:01:08:95:52:A8:CC:AE:E7:B5:30:D8:1B:50:37:10:9E:7B
Certificate issuer: /CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Certificate serial: 0A68
Authority key identifier: 38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/N1fjAQiVUqjMrue1MNgbUDcQnns.roa
Signing time: Thu 15 Sep 2022 02:47:52 +0000
ROA not before: Thu 15 Sep 2022 02:47:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131657
IP address blocks: 2403:9340::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2664 (0xa68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385713E359FCB9CAB12F20DB3FF190FCA81E323E
Validity
Not Before: Sep 15 02:47:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3757E301089552A8CCAEE7B530D81B5037109E7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:fc:1a:52:be:ed:e2:58:6f:07:ad:c6:ea:
c6:53:4f:23:d4:b1:f8:ec:80:19:12:ce:00:4b:d8:
a6:ba:25:08:64:c6:a4:33:d1:f4:db:8b:6f:47:fe:
9b:22:ed:88:e5:94:b0:28:75:af:8d:4d:5b:f7:6f:
fb:1d:24:85:ea:31:46:b3:00:13:86:40:73:3b:e0:
7f:0b:b5:68:0d:7b:7a:0a:9d:cd:35:3b:b3:17:e5:
0f:a1:94:c4:02:a9:d4:fb:ea:b8:7e:2d:b2:1f:03:
0b:19:e5:2f:ce:fd:5f:b8:e3:fa:e1:5d:9b:a2:ee:
6b:26:d0:2e:ef:4b:a2:0a:63:9d:0a:13:f4:cb:c1:
42:c2:a5:e5:34:bb:94:95:e7:fc:8a:2e:fc:e5:ab:
ce:29:14:06:70:fc:c4:38:23:28:17:b1:04:de:05:
87:fc:c8:ef:f1:ed:4a:22:14:64:31:01:75:ce:ad:
f0:c9:0a:af:00:06:78:4e:45:d4:b9:1c:9b:c5:c3:
c6:f8:44:95:92:2a:93:b5:d6:7c:ca:20:40:31:74:
7e:a7:b8:ed:bc:55:c8:66:cd:54:1b:0b:15:94:3f:
db:41:5b:b4:83:e6:26:4e:72:b4:44:b3:ed:5d:1c:
aa:08:59:ca:6d:28:0e:02:54:f0:0d:50:58:ad:1d:
9e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:57:E3:01:08:95:52:A8:CC:AE:E7:B5:30:D8:1B:50:37:10:9E:7B
X509v3 Authority Key Identifier:
keyid:38:57:13:E3:59:FC:B9:CA:B1:2F:20:DB:3F:F1:90:FC:A8:1E:32:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/OFcT41n8ucqxLyDbP_GQ_KgeMj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/OFcT41n8ucqxLyDbP_GQ_KgeMj4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HHRCOLTD/N1fjAQiVUqjMrue1MNgbUDcQnns.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2403:9340::/48
Signature Algorithm: sha256WithRSAEncryption
84:91:31:ae:27:88:bf:4c:a4:a5:79:e0:16:35:b7:8d:d4:91:
44:f3:04:c0:8f:12:dc:7f:15:13:c2:9e:c0:c9:f3:e1:d7:72:
72:88:96:cb:a6:32:00:3e:c9:38:88:a5:6d:e3:d3:aa:df:db:
17:25:d2:78:d8:84:c4:f7:b2:bd:cd:ff:3d:84:c9:ab:79:88:
26:80:77:14:e9:dd:49:81:5e:e7:41:bf:3b:94:2a:fa:79:2b:
c6:3f:29:a9:46:09:d6:aa:c4:5a:38:9c:a3:5c:72:c9:a2:ed:
f2:bf:50:fa:53:8b:88:51:d5:13:2c:99:29:86:d0:da:70:bf:
5d:24:4e:45:cd:c3:5e:4d:1e:26:66:91:d7:c9:b8:a1:13:2c:
21:2d:57:ad:db:6c:e5:22:23:51:68:5b:07:37:5c:a0:4c:ca:
b1:fc:cd:f4:08:a3:ac:d4:76:56:1c:13:91:2c:8d:af:f1:41:
61:a2:27:cd:3e:33:24:68:36:62:2a:69:52:70:30:e5:59:e7:
9e:6f:6e:ec:6b:cd:d1:b4:59:3a:1d:27:01:33:d8:7b:b6:f2:
fe:2f:2f:44:34:51:4e:a6:78:69:e5:41:a5:3e:0a:bd:c6:1d:
66:c5:8c:76:1b:4e:ff:ae:11:a8:d8:26:28:1e:be:30:3a:44:
4a:46:22:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:14 2023 by rpki-client on console-fra.rpki-client.org