Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/wP6OOtV9SqMV03xuGwy2lLG5a58.roa
File: wP6OOtV9SqMV03xuGwy2lLG5a58.roa (raw, json)
Hash identifier: qA055KyetJvnlIjnq5AGR5jkA0h7/jQQLwSqjAOIKek=
Subject key identifier: C0:FE:8E:3A:D5:7D:4A:A3:15:D3:7C:6E:1B:0C:B6:94:B1:B9:6B:9F
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wP6OOtV9SqMV03xuGwy2lLG5a58.roa
Signing time: Thu 15 Sep 2022 02:48:17 +0000
ROA not before: Thu 15 Sep 2022 02:48:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17421
IP address blocks: 221.120.64.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C0FE8E3AD57D4AA315D37C6E1B0CB694B1B96B9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:59:ef:3c:68:5d:dd:b7:96:88:ea:95:2b:f0:
ef:20:09:0a:e5:d5:4c:1a:99:8b:c0:65:6d:de:00:
5a:fc:19:0c:7f:cc:7f:8f:e9:d4:a9:ec:b3:f0:39:
cf:4b:d9:8e:25:c1:bc:f8:e2:26:74:43:a1:a8:9b:
dc:f7:cf:82:e3:c3:de:f8:94:96:21:7b:67:c2:c7:
4a:f6:4b:82:25:da:9f:7c:58:9f:fb:6c:d4:70:e5:
54:04:dc:ea:04:ad:2a:13:a4:9b:f2:b8:eb:09:af:
b7:0c:99:f5:8c:11:85:f0:a9:f5:72:f8:1c:0b:ff:
a5:e5:31:a7:0e:21:0b:25:97:f3:0b:f8:65:d5:e2:
fa:de:12:9a:a8:ec:36:09:71:45:ec:77:2f:ab:8d:
3b:f9:5c:a9:32:1e:0c:9c:9a:79:e8:e4:84:75:6d:
03:55:4f:a8:47:35:c2:a6:20:b8:e0:78:72:c2:e3:
72:d6:b4:74:00:b5:34:29:a9:92:ee:23:0c:39:1e:
bc:67:ca:18:52:82:f2:0c:56:03:55:a0:44:4f:7d:
4d:d4:b5:11:0e:d6:73:d8:92:1d:26:40:97:e8:00:
11:24:ce:a9:12:6e:ff:c3:1b:05:b5:6c:f4:e0:a0:
85:09:e7:a5:d6:e1:1a:0b:81:31:32:52:c2:ed:99:
f0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FE:8E:3A:D5:7D:4A:A3:15:D3:7C:6E:1B:0C:B6:94:B1:B9:6B:9F
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/wP6OOtV9SqMV03xuGwy2lLG5a58.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
221.120.64.0/19
Signature Algorithm: sha256WithRSAEncryption
8e:59:55:8d:28:b5:c2:29:c6:84:d1:71:43:5c:71:d7:99:ac:
e7:25:0a:34:b7:da:26:78:6d:84:d5:e3:3c:ae:b2:10:3b:a5:
ac:33:d0:9e:25:9b:04:81:81:8e:56:a8:e6:0d:bf:49:0e:9a:
13:7a:87:be:ed:c3:14:4a:fe:02:5b:33:68:c7:51:a1:e3:dd:
e1:fe:77:da:46:72:fc:52:b5:ca:50:29:7c:e7:28:d2:e2:3c:
42:39:9b:56:f4:78:f7:0a:2d:15:82:d8:de:dc:17:3d:96:6c:
59:33:d4:39:04:1d:8c:fb:ff:43:ab:9c:70:b8:1c:42:95:66:
c7:6b:71:74:37:61:b0:0e:b9:4c:f9:58:ba:15:a7:d3:42:74:
bf:be:d2:db:fb:07:b1:aa:f5:48:28:e7:ec:14:2c:d1:4a:a3:
7c:ba:35:29:01:5f:74:69:35:3d:8a:fa:8f:ce:9e:c1:14:c6:
f0:09:1e:83:58:07:02:ee:58:db:3a:4c:2c:72:18:48:76:11:
ff:af:46:dd:33:35:cb:8d:a1:b2:36:e7:cc:e6:4e:5f:90:11:
d1:a1:83:64:06:81:d0:4a:c2:fe:9f:dc:9b:08:05:eb:bf:59:
68:0f:cf:0e:66:d9:e0:60:d0:44:c6:90:28:33:58:d1:f5:89:
ba:f2:5e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:15 2023 by rpki-client on console-fra.rpki-client.org