Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/Fmd-T_hYIUVmFqZdYwoHKV16IfU.roa
File: Fmd-T_hYIUVmFqZdYwoHKV16IfU.roa (raw, json)
Hash identifier: nMx0FPtMgElrEkT4Jl6R8seMe1xq7TQrXTTriQKgboM=
Subject key identifier: 16:67:7E:4F:F8:58:21:45:66:16:A6:5D:63:0A:07:29:5D:7A:21:F5
Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial: 0AB8
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/Fmd-T_hYIUVmFqZdYwoHKV16IfU.roa
Signing time: Thu 15 Sep 2022 02:39:33 +0000
ROA not before: Thu 15 Sep 2022 02:39:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9676
IP address blocks: 61.60.128.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2744 (0xab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Validity
Not Before: Sep 15 02:39:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=16677E4FF85821456616A65D630A07295D7A21F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a6:58:81:7a:66:15:cc:2b:72:15:8a:bb:51:
a2:4a:d8:20:78:15:09:24:b8:df:42:99:38:5b:ad:
fa:55:51:02:e7:40:c3:bb:e1:ef:70:9e:1b:80:22:
04:c3:56:f2:cb:0a:46:c4:90:9a:b5:7e:ae:b2:6b:
0a:4d:68:75:42:12:50:4f:cf:81:54:43:20:65:d4:
d5:50:cd:cc:df:93:02:1b:a1:9e:77:a3:4b:96:b4:
a3:4c:89:da:b8:01:36:f5:22:4c:f5:dc:5c:67:6d:
13:3d:d2:2d:f4:95:72:cb:6e:c8:bd:e5:16:3c:2d:
9b:4b:6a:99:bb:bf:07:fb:51:98:d7:8f:05:84:8f:
4d:8c:2e:a4:3a:10:bf:48:75:37:66:10:90:18:7a:
8f:c9:f9:3d:b9:3e:e1:fb:a8:46:af:9d:7c:6a:06:
94:0c:da:1d:f9:7d:b1:89:cd:d8:ac:3c:3c:c1:14:
b9:3e:de:27:5c:fa:21:2f:9a:c8:6c:67:09:37:c0:
48:84:ee:f9:c2:5c:23:db:e8:23:50:bc:66:29:a4:
73:f3:fc:77:df:46:da:bc:05:d5:28:8b:9a:23:aa:
0f:0c:20:1c:61:53:ee:99:51:13:e0:d8:a1:52:16:
2e:17:36:eb:ea:46:02:0b:eb:b8:83:3d:b8:62:27:
c7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:67:7E:4F:F8:58:21:45:66:16:A6:5D:63:0A:07:29:5D:7A:21:F5
X509v3 Authority Key Identifier:
keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/Fmd-T_hYIUVmFqZdYwoHKV16IfU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.60.128.0/19
Signature Algorithm: sha256WithRSAEncryption
24:81:f3:2b:36:11:6d:62:dc:6b:ee:23:2e:fd:ad:1c:b7:77:
69:16:87:53:72:3b:32:ca:30:6e:f9:ba:6a:77:a9:1e:28:6a:
ff:0b:90:7c:df:3a:a9:de:4c:5f:1b:78:2b:90:d0:49:eb:ff:
7d:11:09:b6:33:f3:fe:d1:f5:bd:d1:ed:80:f7:ac:6c:e3:41:
b4:ce:f4:55:08:e1:7e:4b:8b:db:f2:2a:f4:b2:61:cc:61:c7:
3a:25:a4:17:a8:f2:fb:aa:01:c9:73:ca:85:32:13:da:b8:b6:
e1:4a:49:f4:f1:54:01:9c:8f:48:51:06:93:3f:18:2d:c4:4d:
b6:4c:e9:72:28:a9:8b:db:c3:e6:79:00:da:ee:94:1e:db:76:
a2:4c:6e:77:78:c8:61:2d:ab:23:10:53:97:1c:01:d7:5a:65:
79:f1:96:a1:52:2e:85:25:e2:0a:30:74:b8:8b:fa:20:17:11:
b0:cd:12:0c:e9:8a:2f:31:8b:bf:bc:c0:14:2d:5d:78:02:fa:
36:7e:1c:c9:4a:33:78:0e:e7:d9:51:c2:48:fe:61:45:d4:17:
31:78:9f:49:3f:64:6c:7d:f5:69:55:37:50:76:7c:fc:ea:70:
e9:20:72:8e:5f:5f:9e:e6:12:1e:94:56:e1:9b:86:50:ef:f7:
8b:dc:4b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:21:50 2023 by rpki-client on console-ams.rpki-client.org