Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/0kLcWdVni0Gdm_OyWLvjZ_ylD44.roa
File: 0kLcWdVni0Gdm_OyWLvjZ_ylD44.roa (raw, json)
Hash identifier: ejw38Pr8knBtR0gE70ueFeClU+RZPAaIjUoOEE1I8RQ=
Subject key identifier: D2:42:DC:59:D5:67:8B:41:9D:9B:F3:B2:58:BB:E3:67:FC:A5:0F:8E
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/0kLcWdVni0Gdm_OyWLvjZ_ylD44.roa
Signing time: Thu 15 Sep 2022 02:48:02 +0000
ROA not before: Thu 15 Sep 2022 02:48:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 10126
IP address blocks: 220.128.64.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D242DC59D5678B419D9BF3B258BBE367FCA50F8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:76:b7:9f:3b:74:fb:8f:28:eb:89:32:d8:89:
ef:a6:92:5a:33:d1:85:62:46:80:43:b9:f6:f9:11:
33:ab:a3:04:eb:14:4f:33:6c:ed:de:cd:51:bf:a9:
59:ce:54:9d:f9:e0:57:7b:51:94:9d:35:44:92:ad:
0e:20:d6:2a:0f:23:b9:b5:d2:35:21:3b:a5:55:84:
42:58:4f:0d:82:09:81:bc:97:04:5a:0d:78:89:ca:
80:43:2b:22:dd:f4:86:15:1a:ac:cf:06:b6:be:f9:
d3:66:07:43:ed:15:c9:3e:c7:ca:41:a0:a7:bd:9e:
df:11:04:4a:4a:c0:8e:8d:9e:29:24:04:3c:60:4d:
e6:c2:23:af:d6:53:ef:52:70:6c:de:7a:d5:1f:07:
30:e5:cd:4f:fb:b2:4e:c0:d7:01:27:cd:95:cd:ca:
a5:e1:f5:2f:b4:65:5a:59:ba:a3:45:50:14:da:8f:
f6:68:dc:cf:cb:5f:00:b0:0c:ec:12:ac:db:cc:48:
3f:ad:02:77:f3:77:22:b6:b6:74:39:bd:fe:fd:8c:
ac:1b:40:f9:4f:4c:93:d5:15:64:49:eb:33:4e:48:
0f:85:5e:93:ee:50:b3:c7:39:fd:c7:26:8e:ff:aa:
80:f5:70:03:19:d2:90:c7:28:d4:8c:19:a6:4d:e0:
a3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:42:DC:59:D5:67:8B:41:9D:9B:F3:B2:58:BB:E3:67:FC:A5:0F:8E
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/0kLcWdVni0Gdm_OyWLvjZ_ylD44.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.64.0/20
Signature Algorithm: sha256WithRSAEncryption
93:f3:35:96:e0:08:8c:bc:42:e4:e2:2b:0f:72:b8:06:ba:95:
42:da:fa:b7:c3:c4:f0:42:8b:d2:ca:24:df:70:25:91:cd:e3:
b3:cb:e2:da:94:bc:16:5a:87:c2:b6:b5:e7:0d:43:9e:21:4c:
86:04:33:ac:5f:8b:ff:13:f2:84:af:90:9a:34:32:1a:c6:ff:
8e:86:18:ee:a6:e6:f3:48:a5:bc:32:53:79:b5:c5:da:26:47:
71:c5:41:07:b4:97:86:6c:d5:b5:11:57:37:e5:9b:12:83:2b:
dd:3c:91:3f:78:5d:68:e6:42:91:50:6d:d7:50:49:fa:be:22:
74:0b:f6:b3:82:28:13:09:5a:b8:08:d8:40:b3:82:61:63:1d:
bf:cc:66:f8:c9:38:4f:8a:39:12:6a:7e:f7:a7:1a:da:05:c9:
fb:a5:ab:f4:a3:1f:db:8b:8c:9b:a7:ab:47:62:1b:9d:b2:e5:
8f:50:28:cc:09:2f:f5:5a:49:99:77:47:9c:4f:34:e5:1d:a9:
1c:6f:57:b9:8c:20:01:9c:f1:83:14:00:6c:f7:12:e7:c9:56:
dd:53:43:11:32:35:41:32:2a:21:85:a7:67:48:ac:98:38:69:
e3:65:b0:6b:d3:91:a2:6f:46:ee:b1:6b:a3:a0:3a:56:7e:e6:
ff:a1:86:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:14 2023 by rpki-client on console-fra.rpki-client.org