Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/BPo9WUMzz--WjF0jm8ZS74L9BiY.roa
File: BPo9WUMzz--WjF0jm8ZS74L9BiY.roa (raw, json)
Hash identifier: FzyZS0S+IPhwxL1gSpZQWFIFdaIF4x46pyHy+DQKolM=
Subject key identifier: 04:FA:3D:59:43:33:CF:EF:96:8C:5D:23:9B:C6:52:EF:82:FD:06:26
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0AE5
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/BPo9WUMzz--WjF0jm8ZS74L9BiY.roa
Signing time: Thu 15 Sep 2022 02:49:53 +0000
ROA not before: Thu 15 Sep 2022 02:49:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 36408
IP address blocks: 61.61.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2789 (0xae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 15 02:49:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=04FA3D594333CFEF968C5D239BC652EF82FD0626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:4b:eb:00:2d:2e:95:49:6d:b2:29:61:fc:
94:e7:07:de:5c:71:be:51:a0:34:23:cf:bc:24:c6:
50:86:ba:8f:fb:45:1e:52:15:3b:dc:77:45:14:6c:
ca:7e:36:c6:27:b6:95:39:c4:01:04:46:42:30:cc:
c7:80:3e:fc:bc:05:8c:3e:69:08:50:2d:f7:cb:4a:
69:6a:fa:96:09:cb:94:4e:d1:a3:5c:97:68:55:b7:
5d:59:99:6b:74:af:dd:f0:2b:50:74:58:bd:87:7f:
92:2c:6e:c1:d1:65:5d:19:b3:91:d7:78:3a:f4:61:
08:ae:d5:cf:13:0f:c4:72:7e:e3:fc:ac:c9:08:f0:
9f:2d:50:23:c4:25:40:ab:70:69:e5:bc:b9:70:ea:
21:9d:86:56:a2:43:b8:e4:a2:47:23:e7:19:51:db:
14:33:59:4c:6c:6f:89:ca:5c:f8:06:c0:63:95:cf:
dd:4b:b7:29:93:f3:0b:f2:8b:ce:23:05:8a:89:dc:
d3:b2:92:f1:e9:1b:85:36:ec:f9:96:aa:e4:c0:51:
9b:5a:a1:af:58:db:e3:f1:a7:4f:cc:93:37:28:4b:
54:62:6e:31:e2:18:c1:9d:c5:12:87:11:95:1d:a8:
c4:3c:5f:24:02:c7:33:46:d0:4c:18:07:57:5b:40:
2d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FA:3D:59:43:33:CF:EF:96:8C:5D:23:9B:C6:52:EF:82:FD:06:26
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/BPo9WUMzz--WjF0jm8ZS74L9BiY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.69.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e9:f7:fb:1d:78:33:93:85:7c:58:fe:d9:90:d2:75:d3:a0:
2d:6a:9d:d5:4e:f3:ac:0d:27:65:68:88:e0:61:ee:8d:ae:6e:
21:e1:6f:11:f7:f4:e6:4b:2d:c5:ca:d8:08:d9:a1:98:33:28:
7f:a8:f4:b2:8d:a3:09:3a:02:c3:38:68:67:94:c4:58:ef:3d:
d7:e8:dc:95:39:87:2c:3f:4f:9d:09:3f:09:65:ec:60:46:7f:
29:d3:08:06:29:bc:91:bc:97:ab:39:a6:69:81:e3:b5:18:f1:
52:56:bc:c6:54:06:76:d8:6d:63:a2:5f:9b:7a:a7:0a:1f:ea:
3f:d6:b9:3c:3f:b4:c5:34:2f:1c:35:a4:f0:40:ee:ef:27:f9:
8d:76:2d:d7:71:97:e3:fa:d5:29:56:c4:49:6d:5e:65:20:6b:
9d:81:84:76:78:94:c1:49:66:21:43:89:26:9e:fd:49:e5:cf:
29:01:03:cb:5f:ce:1d:a9:17:47:09:c1:39:4a:94:fa:b0:22:
59:e3:bf:34:24:e5:fc:91:c4:eb:1e:6b:8a:aa:6f:3a:14:0e:
28:05:1f:a6:2a:8d:60:a0:a3:d3:ac:c0:fd:f1:6d:8c:80:1f:
c9:3a:fd:b8:7c:65:8f:e6:1d:53:f7:c6:a3:1f:e2:04:d4:d7:
70:9f:58:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:14 2023 by rpki-client on console-fra.rpki-client.org