Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/jApj4cvtZdgC14xSWh4Wqw_IslI.roa
File: jApj4cvtZdgC14xSWh4Wqw_IslI.roa (raw, json)
Hash identifier: eaLTpCLYkTBXw3qq9fP3kNYwkgvwV8qIkz8U4j2daSM=
Subject key identifier: 8C:0A:63:E1:CB:ED:65:D8:02:D7:8C:52:5A:1E:16:AB:0F:C8:B2:52
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0AE5
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/jApj4cvtZdgC14xSWh4Wqw_IslI.roa
Signing time: Thu 15 Sep 2022 02:49:53 +0000
ROA not before: Thu 15 Sep 2022 02:49:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 61.61.0.0/17 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2789 (0xae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 15 02:49:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8C0A63E1CBED65D802D78C525A1E16AB0FC8B252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:49:eb:41:43:3b:84:9c:e3:46:aa:f8:11:ef:
11:ff:16:4d:05:fe:71:3d:c9:f1:e2:54:6a:3b:42:
ce:16:b7:2b:f6:89:65:0c:ae:cc:98:09:ca:26:d7:
18:ef:ee:2e:b7:e6:91:61:bf:e1:26:68:18:f5:90:
4a:0e:d3:6e:73:d7:91:a4:c9:1d:07:17:a6:ed:5d:
e8:8e:32:d6:04:b9:84:f9:e4:21:25:c9:44:78:ee:
53:77:a4:30:e2:cd:b0:bb:41:4b:61:12:c1:8a:19:
a7:d1:bd:f5:4d:da:15:90:29:bb:20:69:6f:87:5e:
e2:9f:0e:44:60:04:69:e6:ff:8f:2e:89:b1:64:4d:
3f:04:e9:58:1c:0d:16:99:3d:8c:0b:aa:c8:45:21:
97:b0:54:47:5d:a3:80:9c:bd:1f:d4:21:f8:06:5c:
e6:1f:ce:7e:9c:1a:8c:ab:ff:67:7e:16:c7:ea:41:
5b:e2:4a:12:7d:6c:af:6c:07:87:52:00:a3:0b:16:
cc:2c:2c:1c:99:c4:ae:7d:a1:42:30:61:b0:ce:10:
b2:18:49:02:f9:a8:46:55:05:af:95:16:fe:a3:d7:
2b:18:fd:db:4c:22:31:e6:bc:67:da:4f:e4:56:3d:
bb:3b:eb:22:de:7a:4b:f8:1d:a4:04:8a:4b:7d:24:
25:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0A:63:E1:CB:ED:65:D8:02:D7:8C:52:5A:1E:16:AB:0F:C8:B2:52
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/jApj4cvtZdgC14xSWh4Wqw_IslI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.0.0/17
Signature Algorithm: sha256WithRSAEncryption
22:06:00:bd:e6:47:fe:da:a2:6a:ea:d0:1e:02:04:ba:26:a8:
6f:80:a9:64:d4:08:59:f1:b2:f6:03:3b:11:9f:c4:76:b0:69:
86:78:bf:7d:45:fe:0d:69:0d:54:8f:cd:5e:86:3a:f0:6e:d8:
0c:00:f0:0d:15:7d:84:c0:bd:18:cb:d9:cb:09:50:a6:8b:ed:
54:65:e6:52:cb:5f:e2:78:77:0e:0f:bd:69:3d:df:4a:d8:b7:
53:cd:2f:fa:20:76:6a:17:4f:6d:7a:0c:55:2e:4b:33:49:22:
a2:be:95:e5:af:a7:8c:22:1b:bf:05:0a:ea:27:65:b3:38:ba:
e3:4d:39:45:d2:29:75:bf:45:33:9f:92:9f:cb:77:c0:35:ba:
c8:3f:78:c5:64:c5:8a:12:b6:73:84:fa:94:cb:12:7f:57:e8:
0d:20:ba:32:67:d6:a5:96:a3:b9:1d:96:b5:81:fa:c0:91:25:
f4:99:0a:6c:41:df:b1:b9:34:de:c3:ec:f7:9d:3d:1c:17:0b:
f1:60:50:78:73:96:c4:27:a8:c6:cf:ac:1d:1e:91:e1:98:43:
d5:ea:72:67:c4:31:6f:7e:6c:6a:3e:a5:15:53:85:e3:ac:10:
7f:46:98:4e:a3:0c:1e:81:64:40:1b:93:2d:aa:14:a3:64:ea:
79:1b:3c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:14 2023 by rpki-client on console-fra.rpki-client.org