Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Gt5NAndO4dz-_H6ZQjHNTq_ncmA.roa
File: Gt5NAndO4dz-_H6ZQjHNTq_ncmA.roa (raw, json)
Hash identifier: BQX2UCJIk/pBu3EcoK1fsCuYGXsHdPLNN60h3WRg5Q4=
Subject key identifier: 1A:DE:4D:02:77:4E:E1:DC:FE:FC:7E:99:42:31:CD:4E:AF:E7:72:60
Certificate issuer: /CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
Certificate serial: 0B2C
Authority key identifier: 58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Gt5NAndO4dz-_H6ZQjHNTq_ncmA.roa
Signing time: Thu 15 Sep 2022 02:48:24 +0000
ROA not before: Thu 15 Sep 2022 02:48:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9680
IP address blocks: 168.95.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2860 (0xb2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5876E4B8DFAA224C019D246931FC3CD7A4FEED2A
Validity
Not Before: Sep 15 02:48:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1ADE4D02774EE1DCFEFC7E994231CD4EAFE77260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:17:2f:c4:7d:d7:72:b2:90:53:97:09:35:
16:f3:1e:d4:d2:f5:c8:1b:87:3d:76:b5:ca:63:c3:
48:91:1b:65:ad:48:65:d3:08:ce:d3:0e:9a:0e:98:
42:9b:be:00:da:0d:6f:1b:dd:6e:96:ee:b6:d7:a7:
05:66:6a:e2:98:b7:b0:1d:97:6a:11:62:d9:94:07:
48:77:b6:e9:55:64:c3:ff:32:dd:51:4a:b8:a3:6b:
13:b2:fe:8e:2c:74:9c:94:7d:d3:f0:b8:4e:38:85:
9e:19:ed:d7:b8:83:cf:e9:95:dc:aa:6c:8d:2e:b7:
a9:b8:d9:6b:43:98:34:05:4e:d6:50:7b:0c:bf:ca:
4e:54:b7:a4:82:db:a4:74:58:86:91:f1:fc:31:b2:
c3:48:9f:99:6a:4e:95:cf:24:46:c0:ff:56:6c:30:
dd:a7:bc:ad:ed:6e:84:d2:e3:5e:92:a0:73:0c:40:
57:fb:84:fe:2c:8c:ac:c0:5f:c0:a5:f4:86:64:c1:
d4:12:fe:b6:4b:50:dc:29:c1:fc:2e:10:2d:5a:57:
2f:97:04:5f:91:aa:80:aa:12:42:45:c9:77:b9:b1:
a6:5c:35:ac:78:f8:ad:ec:df:df:55:2f:b7:8b:e0:
38:ca:7a:66:ca:b0:a3:04:c8:3a:50:16:1c:b3:b1:
e8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DE:4D:02:77:4E:E1:DC:FE:FC:7E:99:42:31:CD:4E:AF:E7:72:60
X509v3 Authority Key Identifier:
keyid:58:76:E4:B8:DF:AA:22:4C:01:9D:24:69:31:FC:3C:D7:A4:FE:ED:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/WHbkuN-qIkwBnSRpMfw816T-7So.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WHbkuN-qIkwBnSRpMfw816T-7So.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Gt5NAndO4dz-_H6ZQjHNTq_ncmA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
168.95.246.0/24
Signature Algorithm: sha256WithRSAEncryption
15:0a:2d:56:5e:1e:bc:6c:23:18:b0:20:ae:c3:b8:44:cc:39:
b5:b9:1b:09:bd:56:ea:a7:14:2a:b9:38:35:f4:c0:bf:a0:3e:
06:28:ed:3b:41:dc:5a:d2:3c:8c:80:a5:52:5b:53:e9:a5:f8:
31:66:04:56:de:6d:f8:ec:0b:bc:af:21:9e:b5:c6:e9:66:ac:
99:02:dd:6a:5e:e7:ac:20:a0:40:31:11:58:bc:9b:16:a6:3e:
86:2d:fb:9c:d6:d2:75:94:1e:78:9a:e1:4a:7e:16:c8:39:7c:
4c:29:40:8f:c0:d7:36:18:98:2f:07:e0:67:d0:cb:5c:a7:2d:
ff:ae:2b:f6:d6:12:0b:68:fa:9c:a3:b7:60:20:bb:99:c1:f2:
7c:98:0a:33:22:5c:85:d4:dc:e8:d7:ef:0b:7f:7e:03:c3:06:
0c:43:6c:73:07:07:93:f7:0e:13:14:17:08:1d:a7:95:1b:b9:
48:c3:28:3c:19:58:bb:c7:59:37:6f:63:34:19:1b:75:75:2d:
7c:e2:fd:35:21:72:63:82:d9:28:ae:d2:b0:af:7d:9c:79:b8:
c4:37:79:bb:93:ee:4d:a5:b0:dd:4f:7b:91:d1:68:e4:3d:cf:
72:c8:b5:66:c8:03:86:18:c6:83:97:17:c2:99:78:15:4e:17:
f6:91:0d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:14 2023 by rpki-client on console-fra.rpki-client.org