Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/Hda133e7fvBjcwnvvtGWJNn6r2E.roa
File: Hda133e7fvBjcwnvvtGWJNn6r2E.roa (raw, json)
Hash identifier: OrOuiWTRqr9M48XnOKs1RtuJJbm2LKuCYplQ0rHpbUY=
Subject key identifier: 1D:D6:B5:DF:77:BB:7E:F0:63:73:09:EF:BE:D1:96:24:D9:FA:AF:61
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0BA9
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/Hda133e7fvBjcwnvvtGWJNn6r2E.roa
Signing time: Thu 15 Sep 2022 02:42:33 +0000
ROA not before: Thu 15 Sep 2022 02:42:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 13335
IP address blocks: 223.27.48.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2985 (0xba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Sep 15 02:42:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1DD6B5DF77BB7EF0637309EFBED19624D9FAAF61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:8e:2d:e4:e1:60:ef:b3:3f:65:17:fb:93:
18:ee:b4:aa:c2:e8:61:1a:c4:c0:f1:dc:0a:ae:95:
67:c8:35:2b:02:b5:35:99:f8:a6:8a:ef:30:48:67:
62:b7:8b:9f:a3:46:27:73:41:ce:ef:39:1a:44:cc:
a1:72:46:37:8f:10:4c:53:4a:aa:8a:43:4c:dd:cf:
27:5f:01:62:38:f1:fa:96:9d:af:5a:b4:0c:c0:fa:
50:5a:84:b0:46:78:6b:f0:3a:76:2e:26:37:76:dc:
ef:2d:df:03:e6:7d:44:17:92:d5:c5:00:93:04:13:
84:ae:83:13:a5:9a:3b:97:29:f1:c5:58:b6:3a:63:
67:fa:d3:71:d2:67:67:ad:60:2c:ec:3e:1f:bb:39:
40:6b:30:a6:c6:a3:f1:4b:3b:69:7d:8d:4a:db:28:
f7:83:4c:e2:68:d9:87:6e:49:b9:d6:b5:6a:fa:36:
59:5f:02:a8:92:8c:b8:ab:b8:a6:9d:40:24:45:59:
e0:91:fc:1b:d3:0e:40:b7:74:35:a7:06:8e:c1:30:
52:8d:29:b2:79:fc:8f:ff:89:09:7f:2c:9b:b5:67:
86:d9:76:19:d8:da:92:e7:2b:a9:94:9a:d3:c9:18:
ea:27:67:d7:17:47:12:da:93:85:4f:64:aa:2d:ba:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D6:B5:DF:77:BB:7E:F0:63:73:09:EF:BE:D1:96:24:D9:FA:AF:61
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/Hda133e7fvBjcwnvvtGWJNn6r2E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.48.0/20
Signature Algorithm: sha256WithRSAEncryption
59:50:17:d1:28:23:24:03:dc:06:8b:5b:52:0b:c5:7d:7b:8a:
85:da:36:02:26:dd:43:83:79:af:75:42:a1:0e:a7:e3:7c:4a:
55:56:2d:69:a7:9b:77:6c:fa:17:1a:a9:05:ae:27:c9:d5:b3:
bf:b9:6e:5d:86:d0:a7:d9:92:93:77:c0:64:ae:82:aa:53:b9:
dc:fd:0d:f3:50:ba:4c:7b:f7:c7:da:df:67:fa:46:59:a0:54:
a8:7c:2b:30:ea:2b:9f:d0:ee:1e:89:d4:f5:2b:22:7f:e4:4b:
84:5b:0a:cf:0b:67:4d:c0:4b:ec:0d:e0:f0:57:2b:82:63:b3:
8e:bb:49:1d:f1:b6:5b:35:36:67:7b:fe:92:38:66:03:cc:ef:
4f:a7:fa:0b:9d:92:14:52:38:a1:73:d3:cc:83:61:00:e0:bf:
68:16:cf:49:ec:43:42:b8:93:53:6b:00:f5:09:83:a3:69:b5:
e5:1b:7d:2f:b8:a2:71:6c:71:71:bb:2a:a5:4a:d3:bb:77:80:
bd:aa:c0:a7:d6:d2:24:88:84:24:76:dc:dd:a2:da:13:56:70:
d4:4b:bf:a2:c7:4e:23:fe:45:a8:d8:62:8a:e4:14:14:0e:8e:
d6:26:21:99:77:95:89:2b:16:b9:13:ed:6f:5c:12:fb:aa:0e:
21:9c:f9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:21:50 2023 by rpki-client on console-ams.rpki-client.org