Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/Mmqc40q9_G1OxH_YkmX6JUg9dwE.roa
File: Mmqc40q9_G1OxH_YkmX6JUg9dwE.roa (raw, json)
Hash identifier: CFY1VdV5sDql8FwzSn8TJ1NyFVz9Pnq0DdfSMy1wYW0=
Subject key identifier: 32:6A:9C:E3:4A:BD:FC:6D:4E:C4:7F:D8:92:65:FA:25:48:3D:77:01
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Mmqc40q9_G1OxH_YkmX6JUg9dwE.roa
Signing time: Thu 15 Sep 2022 02:48:07 +0000
ROA not before: Thu 15 Sep 2022 02:48:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 3462
IP address blocks: 202.39.0.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=326A9CE34ABDFC6D4EC47FD89265FA25483D7701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:b0:4f:f7:4d:41:3a:f0:18:36:c0:dd:5e:
3b:eb:f0:48:15:14:c8:ec:4e:1d:9d:99:44:73:ed:
93:9d:1b:9c:3d:c5:cc:2f:d0:9f:82:6d:66:60:3a:
ca:c3:8a:d5:57:91:68:9e:ec:80:bc:d3:69:53:0a:
f9:ef:ef:c5:36:ad:1b:d0:57:1f:8a:c6:0a:2e:ba:
a8:c5:81:6d:c6:cd:4f:c7:e6:eb:d5:c6:0b:6e:3f:
0a:64:1b:70:f0:70:05:32:e2:ca:23:e8:ef:21:11:
81:73:cf:96:df:70:b6:89:83:61:bd:88:24:45:ce:
25:1f:c0:5f:00:b6:72:91:a6:73:26:4d:c0:5f:04:
38:c9:0b:61:78:43:4f:c6:03:9b:8c:a7:dd:ab:df:
d3:36:41:22:2d:8a:a3:8e:70:74:97:8e:c6:7c:14:
c1:f7:15:ba:0f:49:cc:cc:f2:00:f6:0f:83:7e:13:
89:35:49:7b:4a:1c:8a:2d:aa:7a:a8:b9:e6:9e:e6:
91:f8:32:b5:7e:45:76:98:1f:d5:40:2b:8a:eb:37:
69:2a:88:52:92:63:b9:6e:27:56:db:43:22:4b:c3:
76:a3:59:03:1a:b8:e1:28:35:67:7b:96:b4:5d:b7:
57:05:5a:8a:10:9d:0e:9d:7a:d7:e0:17:eb:08:7d:
a1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6A:9C:E3:4A:BD:FC:6D:4E:C4:7F:D8:92:65:FA:25:48:3D:77:01
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/Mmqc40q9_G1OxH_YkmX6JUg9dwE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.39.0.0/18
Signature Algorithm: sha256WithRSAEncryption
78:8f:80:16:45:02:ed:48:71:cb:a1:39:f9:58:b9:ca:1f:72:
62:7a:46:c4:0d:07:fb:0f:5f:50:3a:60:fc:33:66:4f:a6:89:
66:71:89:ab:bc:14:69:ef:07:49:b3:1c:c2:cb:86:bc:12:a1:
69:e4:9f:12:92:a5:07:56:1b:85:d8:f7:2a:5f:0b:c5:32:9c:
29:99:dc:ae:29:57:ab:33:67:fd:5f:3a:4f:45:23:36:76:6f:
c1:60:6f:6d:4b:45:01:8f:e8:43:59:33:95:58:e7:24:36:fb:
b8:88:cf:86:3e:69:06:a2:50:f1:52:e1:a8:31:d1:04:7e:4b:
50:3b:e7:3e:6d:ae:15:7b:69:8f:77:b3:c7:14:dc:33:90:47:
c6:51:f1:a3:ee:f9:f1:1c:f2:48:e1:7a:77:0b:6a:89:48:82:
76:e4:de:72:3f:f8:ee:59:f3:47:cc:f3:23:42:ae:c3:b0:a2:
e5:ea:08:2f:ca:eb:d7:33:b2:94:8c:5d:e5:9e:d7:8c:71:d5:
5f:b4:3f:ee:fa:df:d7:20:87:9a:d1:4e:60:98:c9:53:17:e2:
3e:4f:92:38:59:c9:bf:c9:35:73:3a:50:a9:cd:c0:c3:b1:6a:
e5:59:76:ba:ba:0f:21:5f:d2:de:6d:44:4a:21:69:ef:d0:6c:
fc:72:bb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:15 2023 by rpki-client on console-fra.rpki-client.org