Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/exM_7j8lQQP_gLgFm2X9dvnUh6k.roa
File: exM_7j8lQQP_gLgFm2X9dvnUh6k.roa (raw, json)
Hash identifier: Mju92us849cv0SiSoTmMp7OgGfxP8DeYK/JkybJ9Yws=
Subject key identifier: 7B:13:3F:EE:3F:25:41:03:FF:80:B8:05:9B:65:FD:76:F9:D4:87:A9
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/exM_7j8lQQP_gLgFm2X9dvnUh6k.roa
Signing time: Thu 15 Sep 2022 02:48:43 +0000
ROA not before: Thu 15 Sep 2022 02:48:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 3462
IP address blocks: 211.75.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7B133FEE3F254103FF80B8059B65FD76F9D487A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:ae:a2:a9:6b:8a:f8:ad:ff:8d:41:8c:b9:
24:7c:a5:b2:be:99:81:7a:de:db:4e:e0:a9:36:31:
36:48:a6:cd:0b:47:82:86:61:17:22:6d:12:a3:42:
0a:b1:1e:37:e5:00:7a:83:c6:03:9e:8d:f0:c4:00:
68:f0:99:03:e6:2f:72:a5:09:e4:b0:7c:9e:25:d7:
60:18:23:3b:83:7c:76:f0:9d:41:bf:95:f0:98:5e:
f2:ea:74:77:00:95:67:05:93:08:86:d9:fd:d0:b3:
1a:49:e3:9a:0d:5e:4b:64:e9:a9:8f:26:78:fc:59:
1d:82:d5:99:4b:27:65:1a:df:a3:bf:79:e1:53:2b:
ca:c3:7c:d0:79:a9:b1:71:52:b7:38:cb:6b:5c:00:
28:76:dc:93:b9:25:7d:3e:5e:23:6a:e3:e2:d1:d1:
75:05:43:d8:d8:b0:d4:dc:20:57:d4:f6:16:f6:ee:
bc:1d:21:58:69:cd:48:5a:cb:01:20:87:5a:2d:17:
bf:c1:95:ae:89:f3:2e:fe:71:f6:3b:9c:63:1c:bf:
72:95:4b:d9:30:2e:d4:89:82:f7:4a:87:3e:c1:c8:
16:ef:55:80:12:f3:a7:60:c2:e6:b4:88:d1:44:5b:
5d:c3:14:dd:39:0d:71:1c:b5:31:2b:32:b5:b7:5c:
ab:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:13:3F:EE:3F:25:41:03:FF:80:B8:05:9B:65:FD:76:F9:D4:87:A9
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/exM_7j8lQQP_gLgFm2X9dvnUh6k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b6:cd:9a:df:92:39:87:73:e9:2d:5c:dc:0d:79:c9:d1:6f:ef:
6d:ee:7b:cb:34:03:15:21:a7:88:c4:9e:54:72:fb:45:f0:cf:
e4:d4:02:b7:84:84:cc:d1:07:49:0b:11:a7:9d:d2:7f:8a:40:
a5:98:fa:00:85:de:8b:5d:16:8d:3f:3a:57:c9:f5:b7:57:01:
ca:c4:e0:5e:f8:84:ce:ee:aa:fb:03:77:41:5b:6b:50:78:4c:
e9:5c:a4:50:8e:5e:e1:54:99:0e:7e:74:fe:c9:25:37:c4:66:
f5:8e:83:98:1b:a2:a9:85:28:8e:37:05:07:1e:23:6a:3d:94:
db:48:0f:59:ed:31:a9:46:59:4f:c1:70:fb:86:3a:53:5f:ef:
2e:1e:1f:8e:c2:57:1b:52:69:d2:29:ba:1e:1d:5a:34:6d:e5:
7a:f7:38:32:2f:81:fe:72:08:6a:48:f4:c6:c5:3e:ac:10:ed:
78:10:a9:d7:a8:2c:85:56:e0:61:17:ba:62:be:94:14:4e:fd:
fc:6a:e5:cc:f8:a9:e4:6a:1c:89:ae:15:6e:51:c6:35:56:ad:
f7:f7:a1:65:86:aa:40:8f:e4:fc:37:73:aa:13:c2:bd:70:7f:
d9:b9:61:d1:7c:fd:bf:29:0e:13:68:d7:97:2e:53:12:4b:ff:
fc:ba:1d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:15 2023 by rpki-client on console-fra.rpki-client.org