Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/OjXqs_Jsyki6TszX_rzNBQK9HGY.roa
File: OjXqs_Jsyki6TszX_rzNBQK9HGY.roa (raw, json)
Hash identifier: +N4PeNjiU8QtsoShmuZJO1lx4mha8uDlDs8ieZ1gNcQ=
Subject key identifier: 3A:35:EA:B3:F2:6C:CA:48:BA:4E:CC:D7:FE:BC:CD:05:02:BD:1C:66
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/OjXqs_Jsyki6TszX_rzNBQK9HGY.roa
Signing time: Thu 15 Sep 2022 02:48:31 +0000
ROA not before: Thu 15 Sep 2022 02:48:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 3462
IP address blocks: 210.62.248.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3A35EAB3F26CCA48BA4ECCD7FEBCCD0502BD1C66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:d8:46:9d:f1:63:cd:c4:7b:b8:99:b3:4b:
6a:6b:f8:58:ef:a9:78:50:8e:28:68:8d:6d:96:b1:
34:7b:bb:0b:16:ba:ce:ee:35:c2:4d:5a:d6:8a:d3:
b2:3d:fa:29:47:0c:05:53:14:a2:b4:ca:c1:17:62:
d2:bd:73:18:c6:c6:5f:35:ec:7a:5b:25:0d:11:46:
46:3a:cd:8b:6e:ff:41:01:cd:82:b5:87:a1:6f:76:
f0:68:10:7f:31:72:a5:b5:36:70:06:1f:98:9c:e9:
06:85:a6:85:8c:fd:03:3d:60:9a:2d:8a:4e:41:bb:
04:10:96:cb:53:79:f3:5b:28:f6:f5:66:aa:8c:44:
e9:30:51:fe:13:dd:c2:96:2d:09:64:ec:16:a0:5e:
c1:44:ea:6a:09:90:5c:1d:e1:02:61:3a:6c:01:13:
e2:55:fa:53:c6:0b:d1:19:4b:45:25:03:9f:4f:99:
f8:7a:8c:70:e9:5c:0e:3c:f1:93:c0:cf:f2:7a:f2:
d9:5e:9c:79:25:9c:73:54:8f:be:6e:ac:b4:1d:4b:
83:3c:a6:d6:55:d1:6b:35:ea:6a:ff:2c:80:18:e1:
78:29:23:05:68:48:8c:7a:77:e4:8c:9c:08:b4:68:
5a:46:57:32:a9:07:d9:26:c7:51:7a:e7:d0:03:72:
01:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:35:EA:B3:F2:6C:CA:48:BA:4E:CC:D7:FE:BC:CD:05:02:BD:1C:66
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/OjXqs_Jsyki6TszX_rzNBQK9HGY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.62.248.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:9f:a7:0f:41:23:13:50:07:36:09:9b:2d:f5:56:fd:2f:22:
6e:86:2a:9e:00:40:4f:c8:dc:c6:b3:c7:65:1d:27:51:c1:79:
87:70:a1:ef:19:6d:58:98:a3:79:a4:09:29:19:8e:44:8e:23:
b2:0e:34:d8:0e:6e:cb:b3:0c:b6:c3:2a:5f:c8:ad:8d:40:8c:
9c:39:e0:49:b3:88:4d:dc:74:ba:04:ea:ac:d7:e7:b9:68:1b:
c2:43:ad:1b:ff:16:c8:c3:c3:86:b0:8b:4f:36:42:c8:9e:bf:
56:0b:d5:d0:94:42:80:7f:e6:b6:6b:80:85:6c:e9:b8:f6:8a:
1c:b1:00:a5:9a:da:1d:dd:53:aa:d6:ea:6c:9b:d8:4a:8e:83:
b8:18:4b:3b:bc:07:b7:e2:40:cb:2f:7b:fa:f9:2a:97:de:9c:
24:e1:27:88:c7:4b:be:3f:ab:e4:5f:db:1f:a3:92:ab:38:1b:
97:e1:5a:9f:43:3a:be:4c:c7:7d:14:8f:13:22:08:64:c3:86:
3d:57:ad:e8:85:84:ac:63:eb:ca:d9:3f:7d:99:b9:ee:ee:47:
73:37:80:de:d5:dc:c4:2c:55:ab:95:e6:b8:56:07:5c:93:c1:
00:dc:40:ef:e9:3b:ee:ff:23:e0:ad:0a:1f:29:a2:93:32:15:
fd:63:c0:ee
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMjA5MTUw
MjQ4MzFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDNBMzVFQUIzRjI2Q0NB
NDhCQTRFQ0NEN0ZFQkNDRDA1MDJCRDFDNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIpdhGnfFjzcR7uJmzS2pr+FjvqXhQjihojW2WsTR7uwsWus7u
NcJNWtaK07I9+ilHDAVTFKK0ysEXYtK9cxjGxl817HpbJQ0RRkY6zYtu/0EBzYK1
h6FvdvBoEH8xcqW1NnAGH5ic6QaFpoWM/QM9YJotik5BuwQQlstTefNbKPb1ZqqM
ROkwUf4T3cKWLQlk7BagXsFE6moJkFwd4QJhOmwBE+JV+lPGC9EZS0UlA59Pmfh6
jHDpXA488ZPAz/J68tlenHklnHNUj75urLQdS4M8ptZV0Ws16mr/LIAY4XgpIwVo
SIx6d+SMnAi0aFpGVzKpB9kmx1F659ADcgEjAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUOjXqs/Jsyki6TszX/rzNBQK9HGYwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9Palhxc19Kc3lraTZUc3pYX3J6
TkJRSzlIR1kucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0j74
MA0GCSqGSIb3DQEBCwUAA4IBAQBOn6cPQSMTUAc2CZst9Vb9LyJuhiqeAEBPyNzG
s8dlHSdRwXmHcKHvGW1YmKN5pAkpGY5EjiOyDjTYDm7Lswy2wypfyK2NQIycOeBJ
s4hN3HS6BOqs1+e5aBvCQ60b/xbIw8OGsItPNkLInr9WC9XQlEKAf+a2a4CFbOm4
9oocsQClmtod3VOq1upsm9hKjoO4GEs7vAe34kDLL3v6+SqX3pwk4SeIx0u+P6vk
X9sfo5KrOBuX4VqfQzq+TMd9FI8TIghkw4Y9V63ohYSsY+vK2T99mbnu7kdzN4De
1dzELFWrlea4Vgdck8EA3EDv6Tvu/yPgrQofKaKTMhX9Y8Du
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:15 2023 by rpki-client on console-fra.rpki-client.org