Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/r09nKLsn5A4wp3aR66Uj-wz7DiQ.roa
File: r09nKLsn5A4wp3aR66Uj-wz7DiQ.roa (raw, json)
Hash identifier: v6bdvOEJVnAfrtm3DlrrrV06Fypihn4T2CwmweoeJ3c=
Subject key identifier: AF:4F:67:28:BB:27:E4:0E:30:A7:76:91:EB:A5:23:FB:0C:FB:0E:24
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/r09nKLsn5A4wp3aR66Uj-wz7DiQ.roa
Signing time: Thu 15 Sep 2022 02:48:36 +0000
ROA not before: Thu 15 Sep 2022 02:48:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 3462
IP address blocks: 36.224.0.0/12 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AF4F6728BB27E40E30A77691EBA523FB0CFB0E24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e3:8f:58:5b:7f:d7:2e:57:e8:05:40:f6:b1:
28:13:67:99:75:a9:d1:7e:a7:9f:5b:bd:ae:38:c2:
2c:19:09:c6:c0:02:43:99:6a:86:43:9c:e4:0b:1b:
c2:60:3e:4b:fb:d4:22:91:a5:16:8d:f8:ca:ab:9f:
87:5e:09:cd:ef:21:47:0d:19:52:95:19:80:fd:ba:
27:f6:58:cd:ff:d7:19:f8:94:e8:f0:a8:3e:4a:06:
fa:2e:03:d3:e2:5e:6c:23:18:57:96:22:22:39:ee:
bc:4f:0c:2a:97:e0:f6:ac:66:93:a9:23:77:d8:ec:
e4:f5:d9:75:af:f5:de:11:78:cb:ed:a0:ba:43:f6:
15:ce:ee:e0:82:b3:79:7d:0d:5a:bd:c6:b4:bf:56:
df:1a:a1:00:7e:82:d6:36:9b:85:67:ea:24:b2:99:
0c:a2:69:ec:8a:88:28:2f:3d:25:82:7e:71:c0:3e:
2a:ef:7f:35:cd:15:cc:4b:79:e5:7d:1e:20:47:a3:
82:5f:eb:2d:d1:2e:23:f0:ac:e4:6f:b8:3b:36:db:
d0:fd:c7:4a:7a:f9:7b:5f:e6:17:80:5e:e9:d9:9b:
4d:8b:1d:81:03:f6:1c:ef:00:1f:27:da:c1:1d:6a:
3a:58:8d:40:33:bc:6b:b0:65:c8:53:aa:af:83:d5:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4F:67:28:BB:27:E4:0E:30:A7:76:91:EB:A5:23:FB:0C:FB:0E:24
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/r09nKLsn5A4wp3aR66Uj-wz7DiQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.224.0.0/12
Signature Algorithm: sha256WithRSAEncryption
d3:07:42:ae:b4:01:10:fe:9d:80:63:ef:a1:01:54:0e:20:fe:
4b:f7:4e:6b:a1:e7:1d:8b:31:bb:76:13:93:d1:7a:c2:ba:e4:
d1:c3:de:f0:ef:31:bc:7e:12:66:5e:ad:73:86:ad:50:94:1d:
bc:9c:50:fc:b4:ba:76:ad:1a:c7:4a:da:bb:b5:1d:a3:09:6e:
9b:88:59:3b:38:f6:c9:25:9b:a8:71:87:3f:3f:e0:20:21:78:
7c:54:a3:43:98:9b:3d:c1:a2:28:28:f4:f5:a8:ff:d4:9c:d1:
16:14:3e:89:bf:aa:b6:9a:ce:58:9d:40:ae:82:db:fa:c1:65:
99:8a:84:bb:6a:f6:2d:45:91:38:e3:89:05:b9:c8:1e:fe:7a:
25:d8:c3:02:1e:ff:0a:2c:31:a2:c2:70:9e:a7:46:17:c4:e9:
52:36:22:a8:81:8e:1d:f9:17:ee:4b:4e:6d:64:34:d3:ce:28:
79:7c:51:c1:61:a6:c8:22:80:c0:a2:60:a9:91:a7:63:a7:31:
2d:42:5e:b4:21:5a:92:bd:f8:a5:63:97:bc:c8:ce:40:06:30:
59:90:b7:87:5d:a2:6e:5b:c0:9d:2d:04:28:11:6d:eb:ab:ff:
1b:fb:9a:65:1d:4d:45:e7:b3:50:51:39:fa:cb:c0:f8:38:2b:
a9:2a:53:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:41 2023 by rpki-client on console-ams.rpki-client.org