Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/W081eF9Be8fhj6gD_aUIK4Q87KE.roa
File: W081eF9Be8fhj6gD_aUIK4Q87KE.roa (raw, json)
Hash identifier: MyTdfOff7QfINsEHNwrzq9/i7NfVDK1tqJJATlOFuX0=
Subject key identifier: 5B:4F:35:78:5F:41:7B:C7:E1:8F:A8:03:FD:A5:08:2B:84:3C:EC:A1
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/W081eF9Be8fhj6gD_aUIK4Q87KE.roa
Signing time: Thu 15 Sep 2022 02:48:34 +0000
ROA not before: Thu 15 Sep 2022 02:48:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 3462
IP address blocks: 210.71.128.0/17 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5B4F35785F417BC7E18FA803FDA5082B843CECA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e1:46:e2:d6:79:dc:1f:01:55:d2:b4:5b:de:
b6:19:f5:b4:8f:cd:fa:b6:00:bb:d6:10:0a:2e:b5:
18:76:5e:b8:dd:30:c0:c3:3f:82:84:49:e8:84:69:
f5:8e:83:a7:a1:e0:9a:92:b3:64:fc:65:f0:7d:3d:
2a:67:b9:c6:e6:4e:8b:74:f1:e0:0f:f5:0b:eb:9c:
18:5e:0f:33:ba:df:2b:e5:1f:04:a4:37:f5:6d:47:
52:1f:32:1d:45:bf:7f:63:dc:c1:fc:95:d1:5c:80:
d6:86:7b:b8:5a:14:07:70:3e:69:79:e0:7c:64:f3:
f7:ec:ea:95:a0:fd:22:9a:f2:4f:98:7a:7f:82:08:
ca:9a:c9:98:ca:d8:da:1a:c2:c2:1a:8d:57:41:e4:
c9:bf:95:f8:9d:65:2f:0f:6e:f9:04:b8:df:b5:40:
52:bf:f5:59:ee:b5:88:cd:af:33:27:04:d3:e5:e0:
21:9c:45:fe:bd:6a:9d:8b:94:6b:1e:96:28:4c:92:
4b:0b:27:c8:7e:79:08:58:02:9e:08:b7:d7:80:fb:
6e:25:7d:4c:07:8c:7c:6d:7f:19:bd:b7:3d:48:70:
0b:fa:a8:8d:f6:19:6e:f6:47:65:9d:2e:50:a3:0a:
3a:72:74:20:02:45:b3:90:04:41:f0:0f:38:a2:92:
ce:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4F:35:78:5F:41:7B:C7:E1:8F:A8:03:FD:A5:08:2B:84:3C:EC:A1
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/W081eF9Be8fhj6gD_aUIK4Q87KE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.71.128.0/17
Signature Algorithm: sha256WithRSAEncryption
74:b4:0d:4a:06:54:2d:d0:cc:0e:ac:8b:10:b8:0d:07:7d:1f:
55:22:b0:1d:6a:37:40:7b:ac:31:d4:ec:40:1a:41:93:eb:a7:
4f:8b:47:e7:86:61:07:a2:db:13:36:11:93:8c:3c:63:53:42:
4f:f1:85:a7:ec:ed:47:be:37:58:81:19:ed:dd:d1:26:45:58:
67:eb:4c:d3:3c:ab:b4:1b:7d:ab:90:05:86:43:ce:16:83:47:
cb:0f:1e:bb:8d:d5:b6:a6:8c:db:b4:96:08:10:ad:b6:09:67:
92:0f:47:4b:b5:31:2f:d0:88:8c:7f:e0:78:2e:bb:3d:5e:5d:
49:b6:0f:bf:a1:96:75:9a:49:22:2b:90:b9:9d:65:5c:1a:ca:
35:12:71:6b:3f:4e:8f:27:3c:db:d2:e4:b0:ac:dc:e0:58:62:
16:e3:77:76:63:b4:b5:97:3f:32:f3:a6:7b:5b:70:51:ce:62:
4b:6a:11:b7:10:5d:e1:b7:22:85:62:61:e1:aa:94:5a:a4:67:
4d:a0:ba:c6:a2:ed:f5:13:16:9e:10:dc:c7:77:23:16:08:41:
4e:95:c5:84:0e:d4:4c:49:1f:db:8a:f2:c7:3c:02:87:44:24:
9d:39:62:02:0b:41:8e:a7:57:38:a6:77:3e:42:33:de:56:a2:
09:b6:0a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:15 2023 by rpki-client on console-fra.rpki-client.org