Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MKY/-DyoPT6AM2z7bJ7OaFvQRlGqMlc.roa
File: -DyoPT6AM2z7bJ7OaFvQRlGqMlc.roa (raw, json)
Hash identifier: 9T8qrnybGIyqB8QMJaierCLLiJaghY9lzntPzF1Tmi8=
Subject key identifier: F8:3C:A8:3D:3E:80:33:6C:FB:6C:9E:CE:68:5B:D0:46:51:AA:32:57
Certificate issuer: /CN=9D9E97B00D2E15C41AE7071732018C2B137E53A1
Certificate serial: 0A48
Authority key identifier: 9D:9E:97:B0:0D:2E:15:C4:1A:E7:07:17:32:01:8C:2B:13:7E:53:A1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/-DyoPT6AM2z7bJ7OaFvQRlGqMlc.roa
Signing time: Thu 15 Sep 2022 02:39:39 +0000
ROA not before: Thu 15 Sep 2022 02:39:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7478
IP address blocks: 210.244.192.0/19 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2632 (0xa48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D9E97B00D2E15C41AE7071732018C2B137E53A1
Validity
Not Before: Sep 15 02:39:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F83CA83D3E80336CFB6C9ECE685BD04651AA3257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f2:b5:37:e8:9c:9c:82:cc:37:33:62:02:e8:
b2:28:d3:c5:e5:4c:ba:e8:73:b2:76:b5:f8:e1:30:
a0:0e:73:96:88:c0:3c:52:fc:8d:a7:32:b5:86:71:
45:71:31:cd:9c:3c:e7:cc:36:f0:c3:77:e7:3b:99:
26:f6:ea:65:37:f3:38:18:d5:c8:9b:c8:0d:25:e5:
86:fe:e3:8a:1c:ff:65:e4:4f:94:a1:3c:59:1b:8d:
03:01:fa:1c:85:e0:26:91:d9:24:97:7d:b9:4c:6b:
b7:2a:0c:bd:48:bc:a8:79:d7:bd:3c:0a:03:84:96:
ad:ab:35:73:33:24:26:d7:20:09:04:0d:76:3d:e5:
4a:09:9a:05:bb:12:70:5f:53:98:28:40:99:41:f3:
6b:c2:a9:3e:1a:cf:3c:1f:a3:13:ff:e2:98:ee:d7:
f0:12:3b:54:bc:12:27:33:ee:f1:ca:da:92:c9:03:
d4:b8:38:b7:2b:6a:99:43:47:e0:d9:36:47:0a:00:
34:0d:f2:72:47:60:cb:6d:57:dd:dd:b2:e0:d0:a2:
77:98:a4:e9:7f:bd:ef:99:29:c7:45:44:53:38:e2:
8a:5e:2f:34:cc:1c:8a:a3:d3:d4:9f:ba:81:87:45:
fc:4a:db:f7:9b:1e:ef:a3:69:eb:5e:ae:59:c4:4c:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3C:A8:3D:3E:80:33:6C:FB:6C:9E:CE:68:5B:D0:46:51:AA:32:57
X509v3 Authority Key Identifier:
keyid:9D:9E:97:B0:0D:2E:15:C4:1A:E7:07:17:32:01:8C:2B:13:7E:53:A1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/nZ6XsA0uFcQa5wcXMgGMKxN-U6E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MKY/-DyoPT6AM2z7bJ7OaFvQRlGqMlc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.244.192.0/19
Signature Algorithm: sha256WithRSAEncryption
71:28:19:8b:d1:dd:4d:94:9d:87:ce:43:36:a6:7b:75:dd:56:
fe:4e:16:93:c0:b7:27:8b:31:d9:f4:54:da:27:5c:16:6a:39:
b4:a8:7b:8a:b9:9a:01:dc:44:02:57:d9:54:9c:4e:e5:6b:f9:
34:ac:4c:ea:a7:01:c6:ad:35:d3:ff:62:ca:22:de:3e:0f:98:
f3:59:08:cf:74:62:51:ab:fd:14:29:fb:1b:8e:fc:e5:87:88:
f0:35:93:29:8b:2c:d7:e6:7b:32:ad:88:25:80:4d:f7:08:00:
d9:75:34:be:2d:57:93:16:4f:90:82:08:05:d5:bd:e7:a7:a9:
43:ab:e2:c7:8a:e3:04:fe:eb:f9:ec:c8:c8:35:4f:7c:83:b0:
e4:36:05:c4:5f:33:8a:d2:f6:a8:3c:85:b7:98:68:f8:65:26:
5f:7d:65:6f:76:de:b4:b1:ab:20:a5:bd:81:2c:9d:c8:87:03:
4b:1c:28:7d:f7:f1:eb:6c:ea:29:d7:c0:b4:59:25:cc:b5:d5:
a8:f3:63:c8:b6:1b:05:86:25:d2:1d:89:f8:d8:7a:80:50:f5:
ab:4d:44:af:62:01:92:75:61:5c:c4:fa:95:39:df:93:0f:ee:
74:db:17:3b:63:39:af:6b:b9:6b:4c:1f:5c:43:d5:77:f2:7d:
0f:1a:5a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:49 2023 by rpki-client on console-ams.rpki-client.org