Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/o_YWP9TJFH1FunbZoIl1RTH9d94.roa
File: o_YWP9TJFH1FunbZoIl1RTH9d94.roa (raw, json)
Hash identifier: vGrI+sW0LR13OKOW8EfUyVFhdaqijucwX/svXX1e+08=
Subject key identifier: A3:F6:16:3F:D4:C9:14:7D:45:BA:76:D9:A0:89:75:45:31:FD:77:DE
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0AE5
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/o_YWP9TJFH1FunbZoIl1RTH9d94.roa
Signing time: Thu 15 Sep 2022 02:49:47 +0000
ROA not before: Thu 15 Sep 2022 02:49:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9918
IP address blocks: 211.78.0.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2789 (0xae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 15 02:49:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A3F6163FD4C9147D45BA76D9A089754531FD77DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:e3:84:6b:37:b0:49:26:4c:02:67:ad:1b:
46:c6:0a:cb:dd:1a:0e:d5:ad:ad:ee:59:2e:6a:51:
0c:84:c2:ea:70:5f:4b:77:b4:08:e0:63:55:fa:25:
e5:94:39:8c:43:5b:25:0e:aa:bc:c3:f1:c0:7e:93:
04:36:a9:e8:f5:b5:f0:cf:7f:d9:3f:46:39:0e:a6:
ec:6d:0d:96:39:0d:67:66:dc:ac:d0:c1:d8:52:9c:
2d:5e:87:a2:21:c9:86:d4:9b:e7:41:a0:10:79:e8:
46:12:b3:63:b1:96:a2:7c:03:73:35:4b:97:9a:c7:
8d:2d:af:6a:4b:6a:69:1c:98:de:25:86:92:ba:83:
28:cc:db:d0:68:ad:66:1c:d3:70:69:24:4f:40:cd:
41:22:09:15:b7:2a:bf:34:0e:18:14:78:28:20:70:
b0:06:3b:04:88:66:14:5a:17:cd:7f:37:9b:c6:a6:
04:8e:be:8c:29:38:23:7c:6f:3c:d6:71:be:4f:8e:
c8:d7:d4:bb:dd:ac:ea:eb:a2:f4:16:d4:e5:24:e2:
ad:0a:f0:aa:8e:85:32:fd:c6:32:88:57:f8:63:56:
b2:87:4d:bc:70:60:3a:7d:c1:b7:8b:a1:ec:72:8e:
ac:7a:b3:24:90:c5:58:58:54:93:e7:e0:e5:9d:7b:
23:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F6:16:3F:D4:C9:14:7D:45:BA:76:D9:A0:89:75:45:31:FD:77:DE
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/o_YWP9TJFH1FunbZoIl1RTH9d94.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.0.0/18
Signature Algorithm: sha256WithRSAEncryption
45:2c:11:ec:87:7d:d8:d3:5c:ad:bd:6d:68:89:c9:64:af:d4:
13:b5:e1:e4:2b:bb:dd:5a:c2:1f:30:e3:60:24:ba:45:68:52:
db:4e:1d:99:08:fe:03:c0:9d:2d:31:d4:ed:45:2d:42:ae:f6:
03:b2:96:6e:f0:34:00:8e:1f:d2:b2:88:1b:be:0b:84:a6:b5:
32:c3:af:87:83:c5:0b:dd:9a:d4:24:d9:5a:a0:7e:ff:db:4e:
bf:61:b2:e7:e7:23:6c:e6:ac:d8:a3:e7:24:c6:67:6d:48:5c:
f7:74:7c:9b:8c:5c:46:19:3c:63:69:34:3f:cf:c2:c7:2e:a3:
d3:3f:2e:13:a3:60:8b:36:49:c5:eb:b5:8f:bc:c3:38:62:53:
ca:f5:30:c5:03:3c:9a:0b:65:31:85:e7:a0:19:c0:25:ba:51:
9f:64:1a:4b:27:f2:74:42:66:52:91:a4:c5:19:f4:e7:68:7a:
e1:85:52:9a:85:e2:9e:f1:8e:5b:ed:e5:a1:3f:0d:ed:6f:b7:
33:d2:ac:04:9d:3b:6d:c4:43:6e:41:d9:00:20:19:00:22:8d:
e7:89:56:cd:a5:cb:bd:62:c6:60:9f:35:70:81:61:3c:de:76:
d3:a7:a0:0c:bf:f1:da:d1:c1:35:9a:2f:52:5e:52:8a:c5:83:
f5:04:35:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:49 2023 by rpki-client on console-ams.rpki-client.org