Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KGT/z8coNOS2hEv7EHoeoE_se5vHiuE.roa
File: z8coNOS2hEv7EHoeoE_se5vHiuE.roa (raw, json)
Hash identifier: 68LlUt7QWhtbhRylq9h87fizVUVANTY9Fw21wbuj+ls=
Subject key identifier: CF:C7:28:34:E4:B6:84:4B:FB:10:7A:1E:A0:4F:EC:7B:9B:C7:8A:E1
Certificate issuer: /CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Certificate serial: 0AE5
Authority key identifier: 47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/z8coNOS2hEv7EHoeoE_se5vHiuE.roa
Signing time: Thu 15 Sep 2022 02:49:49 +0000
ROA not before: Thu 15 Sep 2022 02:49:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 61.61.128.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2789 (0xae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4772F715345B542E1D708BCB2571FCD72DD26BF3
Validity
Not Before: Sep 15 02:49:49 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CFC72834E4B6844BFB107A1EA04FEC7B9BC78AE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:da:5f:d9:48:b3:97:ae:51:d8:84:2e:6c:
4e:66:59:2e:b0:81:18:c6:54:fc:b3:aa:7f:0d:be:
0c:3c:98:0c:df:8b:a0:b1:2c:12:66:86:31:95:d4:
b0:49:0b:95:91:b1:55:0b:03:15:c0:a0:8d:39:3b:
d3:a7:4c:bf:b8:f2:8a:65:d0:44:95:a0:4d:e4:36:
df:03:d0:18:ce:50:3a:97:0c:35:e1:1d:b3:2a:2d:
7f:ee:7f:c0:41:6a:34:cc:6b:bd:9a:98:65:9d:1e:
9d:b7:f4:7a:cf:6a:f2:42:e8:5d:25:1b:34:ef:b6:
3e:7a:05:2a:0e:c7:eb:41:81:a5:8e:f3:17:7b:37:
c3:5c:0a:ec:6b:88:dc:a8:c1:2f:47:89:b4:9f:78:
3c:dd:17:fa:35:b1:11:63:df:46:37:25:d0:84:f6:
de:1b:01:a9:87:9c:d9:19:fc:54:d3:44:26:81:ac:
64:43:25:0a:6b:34:f0:e0:24:db:87:42:6c:b5:22:
0a:94:73:64:de:88:9e:cb:b3:47:ff:cf:ef:a0:96:
f7:47:e6:b0:8d:23:fc:65:69:62:ff:cb:8c:22:f9:
05:07:08:60:97:ee:50:0c:e5:5a:b7:b8:d6:12:4d:
b6:00:2a:0a:03:ac:56:89:7f:93:d8:40:7b:3f:0f:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C7:28:34:E4:B6:84:4B:FB:10:7A:1E:A0:4F:EC:7B:9B:C7:8A:E1
X509v3 Authority Key Identifier:
keyid:47:72:F7:15:34:5B:54:2E:1D:70:8B:CB:25:71:FC:D7:2D:D2:6B:F3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/R3L3FTRbVC4dcIvLJXH81y3Sa_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/R3L3FTRbVC4dcIvLJXH81y3Sa_M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KGT/z8coNOS2hEv7EHoeoE_se5vHiuE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.61.128.0/18
Signature Algorithm: sha256WithRSAEncryption
93:58:2a:fb:7e:f4:7c:03:65:57:78:f6:c7:e1:1d:f1:46:ff:
8c:b6:c4:a8:66:8f:39:d0:aa:99:55:49:6c:2a:f0:73:77:10:
48:28:98:63:e9:3e:cc:26:02:ce:36:ac:1b:b7:c7:c8:7e:2f:
27:da:89:a2:1a:f7:8e:61:9b:36:e0:c8:2c:99:85:09:c3:14:
01:f9:b2:68:28:97:2c:8b:5d:91:68:16:9d:b9:30:09:10:6f:
01:2f:d5:0e:7a:d8:0e:c6:83:c4:93:c4:b3:7e:64:b7:22:8c:
bd:bd:07:97:56:a1:00:d1:3e:9f:44:dc:89:22:3c:87:76:f6:
83:15:a9:bd:6e:76:4a:73:76:3e:b1:4d:99:0c:b1:2a:9d:a1:
e0:b0:1a:28:be:e9:22:58:07:19:88:5c:11:fb:4a:08:20:01:
5a:44:84:46:4d:21:b1:72:a3:8b:df:05:14:41:2f:7a:c1:65:
be:99:1e:e1:fe:68:54:2e:01:21:95:af:59:7e:a2:6f:de:05:
7d:fe:64:f6:d4:0f:25:0b:22:ad:29:f9:ca:b3:e4:91:92:7b:
43:ad:cb:8c:99:df:8c:d9:41:0b:04:82:40:91:d2:22:dd:d4:
bc:b6:f8:f5:50:13:de:26:63:e9:d3:2f:c7:f3:a6:00:08:1c:
d0:44:fa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:14 2023 by rpki-client on console-fra.rpki-client.org