Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/T3xrp2syEtrVTkR6o3rL3rCBhjI.roa
File: T3xrp2syEtrVTkR6o3rL3rCBhjI.roa (raw, json)
Hash identifier: JLr+Ze9iic24g14IULPPO577/5U1Oej+MMQnYHimPuI=
Subject key identifier: 4F:7C:6B:A7:6B:32:12:DA:D5:4E:44:7A:A3:7A:CB:DE:B0:81:86:32
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/T3xrp2syEtrVTkR6o3rL3rCBhjI.roa
Signing time: Thu 15 Sep 2022 02:48:29 +0000
ROA not before: Thu 15 Sep 2022 02:48:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 3462
IP address blocks: 114.24.0.0/14 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4F7C6BA76B3212DAD54E447AA37ACBDEB0818632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:2f:34:e0:13:52:e0:3a:db:d2:81:5c:9a:
4a:5f:92:c9:e3:be:ee:66:72:5a:23:88:ce:f4:45:
50:85:8e:02:3e:d1:5e:34:33:5a:26:c6:90:de:f0:
52:e2:7a:2a:f1:a3:54:ef:1f:94:d2:95:9e:c1:01:
bd:21:46:dd:17:9e:f8:d6:4a:ef:74:87:4f:d7:67:
a3:40:89:8a:76:12:e0:4c:68:c6:d1:a8:00:e3:1d:
90:6b:40:d2:27:08:92:ec:1c:53:f7:5d:a2:89:95:
c9:23:19:b2:d2:3c:8e:43:0a:0a:c5:20:73:55:55:
e3:c0:0a:94:da:0c:e0:f3:a8:91:97:2b:5d:14:68:
5e:97:0a:f5:ba:1b:66:7f:30:15:57:4b:7b:bc:98:
8e:21:93:98:02:d6:d4:ac:4c:42:97:38:4e:ac:c5:
58:ca:4e:15:24:aa:0b:19:27:4a:09:b6:f7:97:c5:
49:65:20:08:16:cf:62:83:03:e1:51:b3:72:4c:ae:
ee:52:e9:85:0c:ff:9d:a5:36:22:20:9c:c8:48:56:
46:8b:52:b2:f8:8e:f8:56:c7:0a:a8:7b:d9:3e:cd:
a9:dd:1b:2e:6b:ce:3c:82:15:da:b0:04:8b:eb:ff:
52:05:a8:1e:ed:8b:a1:f4:12:97:22:c2:be:73:bb:
58:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7C:6B:A7:6B:32:12:DA:D5:4E:44:7A:A3:7A:CB:DE:B0:81:86:32
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/T3xrp2syEtrVTkR6o3rL3rCBhjI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.24.0.0/14
Signature Algorithm: sha256WithRSAEncryption
52:19:5b:cd:a8:dc:8a:3a:02:8c:10:b2:6a:11:d7:6b:e7:d2:
63:bd:61:2e:f8:2e:04:50:e6:02:cc:cf:fc:c2:5a:e1:5c:ea:
ec:0a:92:87:48:10:98:b2:4a:ec:fb:07:b4:09:9f:f4:96:ae:
da:73:30:bd:c9:1a:60:8c:b6:08:4c:73:b0:a2:c0:ab:bd:43:
aa:6c:3a:7a:cf:d1:b7:50:48:43:2b:b2:8d:82:12:0b:ee:97:
46:ad:05:86:43:d7:2a:13:f4:1e:ac:ec:ab:50:4d:4e:6c:49:
39:d8:73:9e:c9:ae:66:22:7b:a4:5f:82:a3:5e:46:f9:68:ca:
3c:1b:54:a6:77:0b:38:53:c2:3d:78:84:7e:56:1a:5b:63:ee:
8d:e5:73:2a:f1:11:80:93:9b:c7:fb:a3:3b:16:31:1b:bb:90:
13:6f:05:c8:53:e2:8d:6d:8f:6f:c2:82:f7:77:11:71:b7:08:
f5:1a:89:b4:bc:36:ea:c6:36:4b:9f:cc:4e:ce:f3:82:22:27:
2a:4c:b2:56:cb:f4:86:5e:db:1e:d3:03:80:13:f1:34:98:81:
f1:86:b4:7f:3c:f2:9b:18:21:6d:af:84:11:02:1f:de:0f:db:
09:50:c6:aa:26:61:4c:cb:ec:27:f8:0a:f8:05:c3:e8:27:06:
ab:78:4a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:15 2023 by rpki-client on console-fra.rpki-client.org