Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/Te14tamnrJqXeQC4W8U2DzJym5U.roa
File: Te14tamnrJqXeQC4W8U2DzJym5U.roa (raw, json)
Hash identifier: W4zOPPUgxxDML7pBRzoi3Qgl9ROoDClc61+TT3Pwr94=
Subject key identifier: 4D:ED:78:B5:A9:A7:AC:9A:97:79:00:B8:5B:C5:36:0F:32:72:9B:95
Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial: 0AB8
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/Te14tamnrJqXeQC4W8U2DzJym5U.roa
Signing time: Thu 15 Sep 2022 02:39:37 +0000
ROA not before: Thu 15 Sep 2022 02:39:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9676
IP address blocks: 101.0.192.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2744 (0xab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Validity
Not Before: Sep 15 02:39:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4DED78B5A9A7AC9A977900B85BC5360F32729B95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:08:85:6b:0e:1e:f1:8a:0e:b9:ce:4e:cd:
a3:f3:29:cd:a4:cf:a7:e0:4d:9b:ed:8a:18:cf:4d:
2e:ef:b3:7b:d9:83:4b:b2:8d:61:35:d9:d4:cc:46:
68:e1:99:03:66:97:01:d9:76:80:fb:53:a4:a3:ed:
00:6d:03:37:60:cf:da:fe:58:96:b2:70:24:62:55:
33:0c:ee:f8:ac:60:75:59:a5:3b:06:f3:72:4f:2a:
16:27:5b:f2:7d:f1:36:72:f5:5c:1f:3c:ef:af:65:
db:83:b2:6e:57:97:3b:10:f1:64:ec:ca:ec:54:57:
ff:aa:e6:06:5a:16:d7:e0:7b:91:b4:a9:64:e3:4b:
0a:ec:17:52:bc:69:82:ec:93:cc:2f:4e:fd:a3:d1:
60:1e:28:3e:b6:27:96:ad:ec:64:12:39:c0:91:97:
f7:5f:1d:b1:a2:cc:7c:1d:54:25:c5:63:13:57:50:
f3:e0:50:b5:f8:70:80:2b:56:8e:3d:37:80:ce:42:
0a:2d:ef:c0:b2:07:44:98:25:54:f8:12:cd:25:45:
4a:2b:f2:5b:ac:78:6f:25:fc:1e:79:2d:98:42:62:
54:29:a6:72:70:62:84:a7:96:fa:15:bc:02:22:58:
55:a8:05:0e:ce:1d:a8:48:28:e2:6a:43:63:ff:3e:
6e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:ED:78:B5:A9:A7:AC:9A:97:79:00:B8:5B:C5:36:0F:32:72:9B:95
X509v3 Authority Key Identifier:
keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/Te14tamnrJqXeQC4W8U2DzJym5U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.0.192.0/19
Signature Algorithm: sha256WithRSAEncryption
66:c8:82:76:4d:92:70:1b:af:f9:f1:15:81:dd:2a:52:63:c8:
a3:7b:92:17:7b:e0:9e:a1:40:ae:34:11:16:63:9f:de:2f:f7:
84:22:84:cc:78:84:0e:35:e5:40:e6:9d:1e:00:e1:76:03:49:
2c:ad:b9:3f:4e:26:14:67:44:7a:5d:f0:d6:e2:ac:e4:a9:7e:
0b:b0:99:d9:21:2e:9f:7d:7c:1c:75:e2:0a:18:32:57:b3:65:
b2:24:8b:ff:a1:9d:4a:10:38:c2:e9:6c:6d:2d:1d:93:95:f3:
35:bc:ca:7a:7c:0e:91:d7:6b:18:06:8a:c6:b7:c9:69:21:b6:
ad:d4:4a:1b:3d:01:21:7c:d9:76:7e:3c:8c:90:e7:90:ac:95:
33:4d:ad:55:47:04:ec:78:51:b4:93:95:06:c3:0e:19:e5:c6:
ce:66:85:c8:71:4e:5b:71:d4:c1:a4:f9:10:75:c7:16:84:84:
2b:35:af:45:69:77:b4:75:ce:9c:d4:6b:15:e2:02:c0:ae:fc:
ac:1a:18:de:42:1b:7b:5e:75:41:17:74:e2:95:e6:77:49:79:
7a:ee:c5:f4:60:79:22:77:0d:aa:8a:ed:48:60:5d:fe:1e:33:
22:3e:08:f8:49:45:3c:1c:75:be:d0:02:0f:7d:7a:2b:1e:df:
44:ec:f2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:18:40 2023 by rpki-client on console-fra.rpki-client.org