Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/jtCSBP-wLyV3w90UOeLsaVQ8XZA.roa
File: jtCSBP-wLyV3w90UOeLsaVQ8XZA.roa (raw, json)
Hash identifier: glZGIAHPtjHNm479YTBEjnd1QgBmbbSWmcCzVRmI3oc=
Subject key identifier: 8E:D0:92:04:FF:B0:2F:25:77:C3:DD:14:39:E2:EC:69:54:3C:5D:90
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0E47
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jtCSBP-wLyV3w90UOeLsaVQ8XZA.roa
Signing time: Fri 07 Jul 2023 09:58:17 +0000
ROA not before: Fri 07 Jul 2023 09:58:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 142005
IP address blocks: 210.242.83.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3655 (0xe47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Jul 7 09:58:17 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8ED09204FFB02F2577C3DD1439E2EC69543C5D90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:f4:7d:69:b6:c5:29:b0:0a:ca:b4:f4:a2:
f2:08:af:9c:21:65:2d:28:e6:40:05:78:8f:3e:f7:
2e:30:6b:8d:fa:36:d7:94:58:c9:5c:49:3b:89:81:
1b:57:28:1c:2f:33:bb:3c:af:97:73:cd:85:d3:2e:
b6:fc:38:97:8d:e3:16:30:52:e3:0a:0c:80:3e:57:
26:2d:9a:5b:8e:57:73:16:96:04:36:c0:d9:18:ff:
27:51:a2:79:6b:8e:48:79:50:e8:dc:cb:82:55:51:
ed:5f:8b:f4:9c:bf:16:ae:64:0c:ac:f8:29:49:a9:
55:ca:6d:4e:a1:55:5e:b2:35:47:b4:e3:26:24:4a:
36:80:77:db:ee:f5:d8:71:f4:ab:7e:9f:73:3a:3f:
9f:18:00:ca:ab:5a:3b:33:f5:72:88:d7:66:92:c7:
8d:8c:3c:e5:d7:f8:52:c5:58:3d:6d:8e:e3:73:fb:
83:48:a6:21:ca:37:cc:5c:dc:dc:9f:a2:6b:c0:48:
83:a5:27:f8:3a:ce:d7:1d:c2:68:6f:83:a8:10:fe:
f0:b3:ec:9e:92:de:7e:d8:3f:c6:75:29:6a:45:7b:
98:b3:e7:d6:ab:05:2e:b1:0d:ff:3d:60:b3:1c:1b:
5a:c4:2c:b7:a9:8d:6c:8a:c3:a9:4d:ff:3e:b3:37:
46:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D0:92:04:FF:B0:2F:25:77:C3:DD:14:39:E2:EC:69:54:3C:5D:90
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/jtCSBP-wLyV3w90UOeLsaVQ8XZA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.242.83.0/24
Signature Algorithm: sha256WithRSAEncryption
58:19:e5:86:68:b4:94:3a:a6:be:2f:7c:d0:f8:ca:c5:4a:9e:
05:10:46:ba:82:a7:4f:cd:82:20:70:d4:3f:45:1a:96:bc:2e:
0f:c9:02:01:6b:f1:d5:af:1d:cf:b4:91:d7:46:33:e7:92:51:
21:94:5c:65:8e:ae:02:08:1b:d1:09:38:83:fb:52:8f:0f:0c:
18:8f:9d:09:f7:4f:34:d8:6d:8b:f5:9c:a9:31:e9:40:03:27:
c9:cf:a8:0d:78:60:b5:e4:c2:09:b6:ee:b3:79:ec:42:42:be:
e8:aa:9b:24:e5:51:71:f5:5f:8f:a1:2b:65:35:e5:6b:45:1e:
fe:44:44:87:1b:9c:3a:ee:f8:b1:af:f5:fe:43:b1:84:5b:d8:
88:23:dd:26:a8:d4:f1:ff:35:1e:c8:76:cc:b0:16:e0:24:e1:
1b:8b:27:0d:49:9a:42:eb:f1:df:87:4a:85:63:5a:64:45:f9:
1e:98:b2:43:25:61:28:6b:b5:b0:8d:15:d4:67:db:86:5c:9b:
5f:91:4a:b0:b2:04:46:08:3b:67:c5:12:35:e8:a0:fd:ea:26:
d5:39:f3:1a:43:26:f6:8f:92:84:de:4a:07:45:f3:21:fa:f2:
45:8d:7e:e2:87:4f:fb:65:9f:8f:42:4a:23:ea:11:48:fb:25:
5b:ee:e2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:15 2023 by rpki-client on console-fra.rpki-client.org