Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/j-sADAuEcQYSnhXso561MHldFYg.roa
File: j-sADAuEcQYSnhXso561MHldFYg.roa (raw, json)
Hash identifier: V9vPMzlwApgooXnwl2P1L6grAC0sI+MZxnQIm6AqeNA=
Subject key identifier: 8F:EB:00:0C:0B:84:71:06:12:9E:15:EC:A3:9E:B5:30:79:5D:15:88
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0B8E
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/j-sADAuEcQYSnhXso561MHldFYg.roa
Signing time: Wed 10 May 2023 04:01:57 +0000
ROA not before: Wed 10 May 2023 04:01:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 61.61.156.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2958 (0xb8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: May 10 04:01:57 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8FEB000C0B847106129E15ECA39EB530795D1588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:53:a8:57:0b:0b:04:af:3f:2b:ef:cd:5c:
70:20:c7:73:cc:30:3a:ef:48:05:d7:91:84:85:c7:
4b:5f:54:54:6f:64:88:fa:7a:e1:41:9a:ca:a7:a0:
59:3c:f0:f8:95:4c:05:6b:97:cd:6a:8b:21:2d:1f:
06:98:af:e0:be:c2:87:2c:6b:3b:84:6e:9a:5e:86:
a7:a2:97:39:12:42:ff:63:46:f0:ff:ab:4b:3c:f0:
76:5b:8f:9e:1e:e4:c1:0a:06:aa:1b:6a:80:f9:60:
59:b7:b3:b8:72:b3:ba:9e:e9:0a:a9:e1:e2:5d:37:
cf:ab:17:93:75:71:d6:f1:1e:35:85:b8:13:aa:01:
62:36:dd:40:56:8d:77:23:50:53:b2:5f:8a:ad:03:
0b:87:33:29:be:9b:0a:d5:5e:0b:ea:00:f9:17:e8:
ba:ca:16:aa:c9:b0:6f:e8:62:7b:4f:35:84:4e:cf:
56:29:b2:f0:ee:71:b3:a5:db:42:ff:67:1c:1e:2f:
1c:c5:e6:47:8b:77:ad:dd:e6:82:bd:c0:15:29:2f:
9f:58:d2:14:c8:bd:a1:c4:29:8d:15:12:02:39:f1:
d7:bd:e6:11:eb:c1:23:fc:09:65:58:58:87:5e:b0:
8a:70:5f:c8:90:33:cd:13:d1:f5:50:c0:50:35:39:
bc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EB:00:0C:0B:84:71:06:12:9E:15:EC:A3:9E:B5:30:79:5D:15:88
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/j-sADAuEcQYSnhXso561MHldFYg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.156.0/22
Signature Algorithm: sha256WithRSAEncryption
98:e5:00:58:65:bc:6c:82:60:bd:07:b0:c5:8a:3a:6f:6e:09:
29:8b:d9:9b:02:c2:ec:e3:40:47:a2:e2:46:65:06:d4:dc:43:
8b:82:9d:df:5f:10:2e:03:4e:c3:1d:46:50:64:ea:88:a7:9d:
9a:60:5d:4c:69:91:99:15:8b:db:56:ff:98:7d:6c:da:4d:95:
7b:11:47:f9:01:cb:a1:9d:0a:95:89:49:87:a7:39:fd:9e:2d:
fe:80:49:e3:09:d3:c7:38:de:23:e1:58:3a:d2:a5:48:c0:cb:
c9:c5:66:2d:b7:70:81:a0:83:c5:04:28:52:0a:58:0d:6d:14:
83:39:46:28:b4:4e:9f:09:94:6d:d9:56:93:0d:a2:c8:24:ca:
f4:98:da:a4:f2:82:e3:c2:91:ff:d7:79:90:c4:a7:e7:3c:01:
22:e0:43:97:3d:7e:34:9c:f9:f4:fe:3d:a8:85:b1:0b:5b:bc:
2e:0c:d5:5b:41:a6:5e:ac:9e:3f:e3:b9:f3:0f:85:62:c6:18:
a9:25:e7:30:11:16:11:94:ca:10:f4:0f:c1:3b:86:33:f0:36:
2f:7a:25:46:36:a1:16:3c:ce:67:50:b5:00:2f:86:48:40:46:
52:4e:82:d3:5a:e5:40:f9:39:4d:5a:31:04:41:dc:ed:03:68:
f7:9c:8a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:49 2023 by rpki-client on console-ams.rpki-client.org