Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/ETXeAhin58fWv10qo6yFS0g0UXY.roa
File: ETXeAhin58fWv10qo6yFS0g0UXY.roa (raw, json)
Hash identifier: uf0qtssCxHIrAmfgT1Fn6Uwi8JohjjTFYF2wBlpKGuk=
Subject key identifier: 11:35:DE:02:18:A7:E7:C7:D6:BF:5D:2A:A3:AC:85:4B:48:34:51:76
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0AE5
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/ETXeAhin58fWv10qo6yFS0g0UXY.roa
Signing time: Thu 15 Sep 2022 02:49:51 +0000
ROA not before: Thu 15 Sep 2022 02:49:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9922
IP address blocks: 61.61.164.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2789 (0xae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 15 02:49:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1135DE0218A7E7C7D6BF5D2AA3AC854B48345176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:55:e2:26:b8:0e:06:60:bf:42:0f:15:8e:c0:
59:b1:38:2f:0b:08:fa:6f:33:28:6c:28:3f:fb:fe:
54:f1:d3:d1:ad:c6:9e:d6:23:63:a2:42:2c:c9:70:
97:d6:9c:28:04:d0:94:01:74:c1:7c:60:79:fa:9c:
05:89:5c:d6:ac:97:8b:fb:7a:88:fe:eb:85:4e:0a:
62:9c:95:7d:85:17:05:76:df:b6:6c:c4:5a:31:9e:
b4:83:74:4b:3e:f0:b8:24:b1:16:b4:89:e8:0f:94:
0a:15:f0:36:0a:e4:57:e4:26:4c:b8:b0:12:11:73:
0b:e8:2f:d1:6f:5e:f1:c8:cc:26:1e:7d:cc:e4:e4:
e3:1e:14:94:6a:de:7c:c7:51:79:4c:c3:6c:a5:9d:
5d:22:67:89:3d:4c:1b:dd:c2:b6:fe:57:7b:57:69:
c4:81:93:42:d8:7c:8a:b8:bd:28:3e:da:6a:1c:8e:
66:03:b3:5d:0b:56:10:ba:83:ad:f7:d6:29:d6:33:
fe:97:52:a9:06:27:20:d6:ea:45:8e:6e:d7:1d:16:
77:10:19:b9:0c:44:15:00:3b:60:22:af:15:da:0f:
03:48:92:ec:dc:1d:ae:b0:26:ed:4d:3e:90:9f:2e:
64:25:72:86:31:a6:b0:46:0b:65:69:e7:e2:91:ab:
88:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:35:DE:02:18:A7:E7:C7:D6:BF:5D:2A:A3:AC:85:4B:48:34:51:76
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/ETXeAhin58fWv10qo6yFS0g0UXY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.164.0/22
Signature Algorithm: sha256WithRSAEncryption
36:b6:10:71:c7:e4:17:5d:fb:ef:c5:f3:4a:5d:eb:2a:aa:b2:
66:22:94:e6:61:8c:4a:f5:ea:83:d3:ae:92:fd:04:af:b4:a9:
d0:ad:1a:1c:c3:ac:2c:11:b0:7f:c5:be:ae:e4:07:4b:7b:01:
d6:f3:76:df:51:a2:2d:ef:5c:b8:ab:ff:b5:5f:ba:67:0a:8a:
05:19:fa:13:de:b6:c2:b6:54:27:34:07:9e:12:46:df:ab:3d:
31:6d:00:6a:57:8e:57:1a:19:11:4f:03:ff:e4:d5:a7:c7:ac:
31:4c:77:97:68:bd:ee:dc:ac:44:8b:a9:ca:ac:55:bb:de:17:
f5:28:9d:cf:a3:f6:55:09:35:b1:73:ad:ec:7e:fe:d2:89:5b:
3d:b4:ca:dd:14:04:86:24:e6:e5:f1:47:23:e5:6c:1e:3e:da:
93:56:51:79:cf:df:1f:38:4c:b0:d7:a0:6e:3a:98:a5:8b:2a:
7e:2b:a4:4f:57:a8:9c:91:58:8e:54:eb:81:9b:65:e9:9e:97:
76:16:e5:c7:fb:0a:4a:94:81:62:b1:74:cc:0a:f0:2d:a3:ed:
03:9f:3b:be:ba:e9:62:14:ec:43:50:b5:f9:7a:3d:24:38:83:
89:07:19:aa:2c:08:2f:de:9f:1c:7e:cd:95:2c:cf:bb:65:9f:
22:e9:76:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:14 2023 by rpki-client on console-fra.rpki-client.org