Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/eGaY3crQXQIIJcPAobc8a079kV0.roa
File: eGaY3crQXQIIJcPAobc8a079kV0.roa (raw, json)
Hash identifier: iw6/TtBuV/dmEKDjH281g7+TvpCH/g7y6T8tRv9ClY8=
Subject key identifier: 78:66:98:DD:CA:D0:5D:02:08:25:C3:C0:A1:B7:3C:6B:4E:FD:91:5D
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/eGaY3crQXQIIJcPAobc8a079kV0.roa
Signing time: Thu 15 Sep 2022 02:48:25 +0000
ROA not before: Thu 15 Sep 2022 02:48:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 21859
IP address blocks: 210.61.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=786698DDCAD05D020825C3C0A1B73C6B4EFD915D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:84:6e:a3:ad:95:80:00:2b:4a:27:e7:85:e8:
da:00:2f:b0:34:7e:f2:84:35:89:32:4c:1e:0f:9f:
fb:59:03:df:eb:76:fe:ab:b9:ab:79:76:81:4b:4b:
ad:7c:bc:5b:2c:0f:d0:57:f8:4c:f5:fc:bf:f5:42:
15:d9:bc:0e:48:6f:a1:0f:ee:82:d4:c1:5e:3f:3d:
5f:21:d5:3b:79:23:8b:9f:fb:ec:e3:02:63:6a:cd:
27:f1:88:ce:56:c9:8e:86:70:39:3a:c9:3b:03:f7:
4f:15:c0:bb:ad:54:c3:bc:05:8f:50:0d:e6:ce:c4:
31:c4:7b:ca:3d:b8:3a:de:37:9d:04:bb:3c:f2:04:
a5:85:4a:41:9e:8e:29:ac:2e:42:20:b6:6d:56:3f:
fc:98:1a:0f:5e:5a:66:f3:13:19:0b:70:d0:ec:73:
2b:1d:5a:f0:e4:30:ce:e7:67:bc:5e:1b:63:4c:70:
e3:b1:61:10:5c:4e:4c:43:93:46:2e:58:a8:5a:42:
e1:82:b7:4c:d3:7d:b7:e8:33:7d:a3:c3:1b:b2:ec:
4c:f6:73:d1:01:aa:81:76:0f:93:b4:98:ea:f3:2f:
75:fb:d7:2c:3f:ad:79:91:aa:e4:13:2d:14:60:9c:
d0:3e:b8:c9:18:8b:eb:55:38:d0:7f:54:a7:7b:bc:
b2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:66:98:DD:CA:D0:5D:02:08:25:C3:C0:A1:B7:3C:6B:4E:FD:91:5D
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/eGaY3crQXQIIJcPAobc8a079kV0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.61.104.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f5:a8:33:ae:1a:c8:5b:c8:d5:be:a3:4c:1b:95:b5:84:bb:
28:18:6c:3f:d1:55:d9:52:98:7b:a2:8e:4f:f5:1c:16:49:7a:
77:88:ae:fb:11:f6:6e:3a:54:b5:d1:38:14:a0:e7:d9:38:45:
ac:0d:e6:23:83:03:c1:2a:22:b0:7d:f4:ea:94:b2:6a:4d:8c:
a0:d0:9c:e7:6d:e3:c2:e2:0b:aa:fa:36:31:c5:3f:87:78:bd:
6c:8c:84:6f:bb:0e:83:73:58:7c:ac:68:6f:96:83:57:64:21:
5c:a9:30:3f:4d:f1:42:94:25:55:8c:ec:38:72:30:0b:05:62:
a5:ef:3a:6c:33:20:98:fa:f0:c5:1b:d0:c4:66:84:af:42:d9:
a4:38:06:4c:2e:dc:e5:77:fa:0d:e1:ba:77:dc:43:ef:f4:76:
7e:fd:29:88:06:c8:ea:41:d1:34:92:fe:56:ac:0f:cc:ac:c0:
ed:b4:67:39:ce:30:c7:20:c8:07:8b:ea:e2:5b:a1:e0:55:14:
b9:cd:11:0f:14:e5:4f:5a:7b:23:7f:04:b7:0f:12:bd:bb:51:
7c:63:89:2c:37:9d:d5:35:f3:b3:89:79:75:4f:4c:82:19:6e:
b1:58:ac:41:81:9e:e0:97:77:74:55:c9:cc:ca:dc:b0:5a:82:
bc:3a:74:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:15 2023 by rpki-client on console-fra.rpki-client.org