Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/B14aPniP7sinwUBZVmp0L6Ef4VM.roa
File: B14aPniP7sinwUBZVmp0L6Ef4VM.roa (raw, json)
Hash identifier: U4bkJLHdzYqEEiPS9sedlfBz/M73WTehKDa0nQmo4u4=
Subject key identifier: 07:5E:1A:3E:78:8F:EE:C8:A7:C1:40:59:56:6A:74:2F:A1:1F:E1:53
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/B14aPniP7sinwUBZVmp0L6Ef4VM.roa
Signing time: Thu 15 Sep 2022 02:48:06 +0000
ROA not before: Thu 15 Sep 2022 02:48:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 198949
IP address blocks: 210.242.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=075E1A3E788FEEC8A7C14059566A742FA11FE153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b0:e7:66:59:fb:c8:1f:7c:08:4c:a6:f7:05:
5d:18:55:42:a1:e0:98:f8:64:fd:e0:f5:8e:30:4f:
52:77:35:9b:bc:4c:7a:6a:2b:fd:38:01:2a:dd:f5:
50:ed:5b:54:23:27:57:91:55:8b:34:a4:3f:9c:84:
63:32:bb:25:fc:77:25:89:26:56:28:cb:e4:ca:0e:
8d:77:76:32:79:56:57:d4:86:42:76:8b:76:89:5f:
d7:b9:66:8f:2e:8d:d1:70:89:28:a5:5c:c5:2f:08:
f1:4d:0f:f2:62:fa:d9:ef:a0:70:55:11:a1:42:02:
42:b6:0c:2d:66:e0:77:a7:22:46:42:73:da:03:29:
0d:af:07:41:6d:c3:e9:7b:18:56:58:57:4e:61:8b:
c8:e4:1f:a8:13:7e:19:f7:f6:c9:12:96:69:cf:e2:
de:c3:43:d4:a3:b6:74:34:61:73:68:7f:bb:39:2d:
b0:8e:7e:e5:4b:e5:81:c2:b3:71:a1:03:6f:56:53:
9e:22:33:60:3c:dd:cc:81:47:95:ca:4f:a1:c4:10:
cd:a2:a8:06:27:5b:be:f5:c9:ef:8e:9d:42:31:20:
24:be:20:19:89:dd:fa:a3:82:a6:bf:c9:50:79:cc:
1d:bf:85:4a:83:c0:c8:f4:d6:5a:ad:ba:55:77:c9:
31:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5E:1A:3E:78:8F:EE:C8:A7:C1:40:59:56:6A:74:2F:A1:1F:E1:53
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/B14aPniP7sinwUBZVmp0L6Ef4VM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.242.123.0/24
Signature Algorithm: sha256WithRSAEncryption
92:15:fb:79:c5:e9:dd:11:cc:74:6c:d4:a4:23:49:69:4f:09:
57:c4:82:a3:d1:19:bb:1b:cf:cb:fc:5a:26:59:aa:47:e0:e1:
b0:26:4b:84:83:47:f3:66:d6:07:f4:59:e1:f5:d8:61:c4:b3:
ab:98:7e:33:a5:24:31:47:3c:89:00:79:91:b8:03:75:a7:08:
a0:26:f5:c3:01:dc:79:57:c7:41:70:a0:0b:e9:d5:eb:87:1a:
2d:72:bc:95:49:37:45:6c:d6:94:e0:7a:f1:50:8d:b4:d1:03:
1d:01:25:d6:64:53:94:16:fc:db:f3:92:5b:09:82:14:4d:3f:
e1:e0:1c:d8:7d:6d:04:67:5b:94:27:9e:2d:0f:a3:5b:8a:ef:
cc:c0:63:65:2c:a8:ea:fc:a5:76:e5:fb:77:fe:b4:ee:57:a7:
34:2f:47:9f:92:c7:a1:62:0e:9f:1b:b7:fb:96:ef:ed:2b:a0:
a7:2f:63:11:d6:ac:c3:d9:ae:b9:0d:8c:84:3d:44:99:07:75:
20:f2:2f:00:3b:e0:2f:00:03:b5:50:29:a9:8f:81:f1:cb:58:
cf:50:b4:8b:c3:d0:7d:2e:f7:75:e9:43:ba:02:88:df:3c:cf:
47:bf:23:f3:bf:2f:6d:51:b8:aa:e1:c3:c3:b3:32:e8:ac:d8:
e3:c6:97:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:14 2023 by rpki-client on console-fra.rpki-client.org