Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PUMO/ribW-19velp9d3TMRK-CAPU83cw.roa
File: ribW-19velp9d3TMRK-CAPU83cw.roa (raw, json)
Hash identifier: mM6wwlXwm0nvR0ztk0DLOFuZsUbSUqib+Nut1EpWkYg=
Subject key identifier: AE:26:D6:FB:5F:6F:7A:5A:7D:77:74:CC:44:AF:82:00:F5:3C:DD:CC
Certificate issuer: /CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Certificate serial: 0BA9
Authority key identifier: 34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/ribW-19velp9d3TMRK-CAPU83cw.roa
Signing time: Thu 15 Sep 2022 02:42:33 +0000
ROA not before: Thu 15 Sep 2022 02:42:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38843
IP address blocks: 223.27.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2985 (0xba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34DD432961AC42D644AEAF34B14AEC70275B06A3
Validity
Not Before: Sep 15 02:42:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AE26D6FB5F6F7A5A7D7774CC44AF8200F53CDDCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fc:ae:2d:61:ff:7c:c2:a4:e6:84:b9:46:d5:
a0:61:62:f5:4d:aa:60:b7:9b:86:5a:0e:fe:6e:1f:
80:1a:ec:75:aa:1f:1d:fa:3a:ea:c2:c5:8f:eb:1c:
3e:a2:95:a4:e6:1f:48:e9:15:79:f4:1a:24:69:7f:
a8:75:f8:b5:6c:53:e5:46:13:ea:c4:a6:39:f8:8e:
f0:1a:b6:07:8f:d5:a4:eb:1f:b1:be:3c:e0:ed:75:
af:5b:c5:0f:b3:a2:10:62:e4:a7:06:56:92:b2:a6:
93:1b:e5:02:61:52:c2:6a:4c:89:95:cb:f8:3b:ca:
b1:a1:51:b3:dd:ef:20:2a:2f:46:ac:4a:29:fd:80:
80:df:c4:ac:17:39:d7:85:8b:45:c3:66:70:35:3d:
fc:cb:69:04:61:39:37:11:75:17:94:1b:2f:89:eb:
93:57:59:83:b3:22:65:a7:04:a8:ef:dc:70:a8:fd:
1f:74:db:ab:3b:54:59:5f:8b:5d:be:17:cc:e3:df:
fe:44:d2:22:c5:f8:a7:86:28:83:72:d1:9b:6e:cb:
f1:ce:68:76:30:9a:ec:b3:30:ea:fd:7d:38:b7:20:
2d:05:44:4d:d4:f6:e2:51:ea:a6:26:19:29:1e:52:
8f:e9:be:a1:bc:65:59:17:69:5c:11:bf:44:dc:55:
f7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:26:D6:FB:5F:6F:7A:5A:7D:77:74:CC:44:AF:82:00:F5:3C:DD:CC
X509v3 Authority Key Identifier:
keyid:34:DD:43:29:61:AC:42:D6:44:AE:AF:34:B1:4A:EC:70:27:5B:06:A3
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/NN1DKWGsQtZErq80sUrscCdbBqM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NN1DKWGsQtZErq80sUrscCdbBqM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PUMO/ribW-19velp9d3TMRK-CAPU83cw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
223.27.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:b8:d5:f0:45:81:c0:97:59:4e:eb:b6:83:7d:b4:39:c0:c8:
02:15:da:e9:20:9b:bc:a1:59:4c:72:c6:90:67:4a:4b:da:67:
a2:3d:98:92:52:10:0e:c4:ed:31:fc:2f:79:1e:49:c8:54:31:
fa:13:cc:46:55:93:88:65:12:81:af:c9:c2:f8:3a:49:06:46:
f5:c4:2b:af:8f:9d:48:ed:3c:b4:6b:6d:6c:89:ea:f0:aa:e7:
d1:a8:70:59:84:c6:42:e3:f6:8a:56:86:cc:8e:2c:ad:15:e6:
5d:49:c3:dc:75:c0:f2:08:e6:ce:0c:e3:39:71:59:c2:8c:16:
89:36:5d:f4:01:da:49:30:01:5a:11:dc:d6:41:4b:e3:75:ff:
81:d9:89:f6:5b:93:44:d5:1e:ed:17:65:c1:40:ad:f4:a9:db:
ee:8e:1a:25:d6:00:e3:fb:95:10:26:76:fc:65:4c:b4:97:61:
43:1c:25:68:19:23:e1:b4:dd:96:c9:d1:fb:b8:96:e8:f3:9b:
e0:8e:bc:fb:a1:5b:69:9e:33:20:ef:f2:f7:40:61:40:a9:11:
63:e0:e9:71:1d:0f:b2:4a:49:34:7e:da:fa:18:a5:1d:73:f8:
69:36:5f:85:f6:d4:e9:42:18:d5:ce:62:49:a3:a0:21:eb:e2:
fe:89:7b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:18:40 2023 by rpki-client on console-fra.rpki-client.org