Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/-mtwTr6IkI18yZWj_WKaRLfdHXM.roa
File: -mtwTr6IkI18yZWj_WKaRLfdHXM.roa (raw, json)
Hash identifier: TCBQKswCMcYPWiAjrf/ck6ibc2o9YkMFIG5witEJvuQ=
Subject key identifier: FA:6B:70:4E:BE:88:90:8D:7C:C9:95:A3:FD:62:9A:44:B7:DD:1D:73
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0BA9
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/-mtwTr6IkI18yZWj_WKaRLfdHXM.roa
Signing time: Thu 15 Sep 2022 02:42:31 +0000
ROA not before: Thu 15 Sep 2022 02:42:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38843
IP address blocks: 223.27.32.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2985 (0xba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Sep 15 02:42:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FA6B704EBE88908D7CC995A3FD629A44B7DD1D73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:17:69:a7:f3:70:75:28:67:5d:90:ac:74:ae:
6f:7d:8e:95:c6:b8:bd:f0:de:d3:18:0e:a8:9c:c0:
b7:a7:b9:86:d4:1f:99:b9:0e:e9:b4:65:ce:5e:d7:
a4:2d:1e:e1:aa:1b:69:5a:91:f6:85:98:5c:b6:9f:
aa:80:0b:06:a0:63:88:bd:de:a3:d1:74:25:72:80:
23:16:07:2c:e4:b9:4f:d4:b3:18:18:64:3e:1c:3c:
63:6c:5c:6a:72:41:fc:8e:06:f6:1d:cd:5b:f9:0d:
8b:05:af:c4:68:77:b8:4d:88:89:0e:7e:4b:8c:ae:
f6:80:1c:ae:a4:87:e0:f2:8c:96:2e:d5:f6:1f:b2:
5b:cd:93:4c:1f:dd:83:5d:7e:d1:7b:91:4a:56:04:
38:af:5f:7f:8f:92:a0:89:4e:fc:02:27:bb:36:71:
c2:80:bb:8b:5b:33:b1:66:ce:e2:df:ee:17:79:a5:
86:1d:a6:6b:40:89:6c:a4:1f:7b:f6:25:cc:88:4e:
85:8f:18:ad:9b:41:c0:83:b9:5e:db:d3:56:86:50:
5a:23:ed:1e:e4:5b:84:0d:d8:f9:6c:53:33:17:51:
57:4f:7f:3e:9b:d9:26:3b:f7:29:26:2f:9c:2f:d8:
79:71:42:bc:8e:b5:69:b9:c7:33:27:f1:23:0b:03:
d3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6B:70:4E:BE:88:90:8D:7C:C9:95:A3:FD:62:9A:44:B7:DD:1D:73
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/-mtwTr6IkI18yZWj_WKaRLfdHXM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.32.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:29:de:ed:e6:53:dc:61:2b:89:a1:37:66:b2:64:88:f1:1d:
76:4f:c4:3a:e1:b0:d1:8e:c9:4d:84:39:52:ca:03:0f:8f:17:
6e:e3:5e:03:a5:37:4d:e3:b5:0f:1e:c9:e1:70:7f:05:e8:65:
6e:ac:58:56:64:15:f4:fc:4b:7b:60:b3:31:bb:7e:c6:7e:31:
3b:5d:75:1e:11:7d:82:69:ca:af:7b:36:51:95:4f:cd:e0:8d:
55:0e:9f:6a:c4:d7:41:8d:78:a7:1e:64:ad:0e:91:1c:29:cd:
fa:3b:bc:34:3a:07:04:35:6c:cb:ce:6f:f8:80:6f:ce:d2:02:
9f:0c:aa:29:a2:1f:cc:0b:b9:70:c1:27:26:15:d8:b8:89:90:
82:d5:2e:8e:05:c2:67:34:4c:be:f0:30:d5:dc:16:14:4c:d0:
ac:89:01:31:67:44:10:31:52:37:a5:a1:48:b7:fc:79:d0:5c:
20:14:9f:ac:8c:66:63:bf:14:30:04:e8:72:3d:35:6b:ab:2a:
e6:df:0c:ab:c9:0b:2a:cd:9d:6f:4f:5d:db:d3:7d:bd:30:91:
ff:2e:39:d3:45:d4:6c:8c:82:f3:4a:03:c9:5c:c5:34:4c:8d:
32:14:c5:b1:48:89:b0:6e:81:f1:86:fa:6c:b3:86:2d:68:96:
d7:2c:5d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:18:40 2023 by rpki-client on console-fra.rpki-client.org