Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/pIhTMX0XNnErnH_UWfQUCjl751Q.roa
File: pIhTMX0XNnErnH_UWfQUCjl751Q.roa (raw, json)
Hash identifier: f3IPmqs5b8aeSPy2//AKeGnurSWtH+rGieBXsUk+FJ4=
Subject key identifier: A4:88:53:31:7D:17:36:71:2B:9C:7F:D4:59:F4:14:0A:39:7B:E7:54
Certificate issuer: /CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Certificate serial: 0AB8
Authority key identifier: 01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/pIhTMX0XNnErnH_UWfQUCjl751Q.roa
Signing time: Thu 15 Sep 2022 02:39:37 +0000
ROA not before: Thu 15 Sep 2022 02:39:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9676
IP address blocks: 150.107.60.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2744 (0xab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01A53261B2001FA7EB57793E2E579B7322F8E76A
Validity
Not Before: Sep 15 02:39:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A48853317D1736712B9C7FD459F4140A397BE754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:37:79:fd:4d:a8:3f:3c:9c:bb:94:5d:b6:00:
f6:47:13:25:27:a1:49:74:9c:79:89:e2:0e:f9:bc:
07:da:a0:4c:74:e0:16:dc:b6:e6:0d:71:8a:8b:5b:
24:29:db:a3:a7:cd:1c:3e:31:d3:6d:ff:a3:32:f6:
ff:1d:00:da:b9:a3:f5:fd:80:ae:a6:ed:92:31:62:
e6:cb:5f:88:c1:dc:53:64:c0:43:98:27:40:73:45:
08:c9:0a:f0:a1:96:8c:12:c8:ed:f0:d7:ca:d0:d9:
51:73:8e:2f:79:60:6c:b1:c0:6e:01:ed:97:11:41:
d1:9e:4f:c5:53:8d:cb:cf:06:13:20:13:e9:f7:13:
38:83:f7:ef:42:9a:84:8b:01:00:46:8c:a6:b4:46:
39:0b:08:ce:04:10:e3:4b:33:f8:26:99:b5:ab:5f:
0c:98:4e:bd:f3:3e:84:0a:4c:a0:da:bf:82:ce:04:
d8:1f:d1:de:06:b7:9c:a9:3e:23:32:76:a2:98:e6:
7c:86:c0:36:b7:31:d0:f4:1c:6e:50:d5:b5:e9:ba:
8c:e2:94:e5:b3:52:bd:86:d0:86:e2:6b:ce:bd:99:
00:92:6b:f4:a3:cd:6f:aa:ae:20:2c:71:dc:f6:89:
54:da:3d:4e:14:dd:15:1d:b4:e6:c8:02:6a:be:0d:
aa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:88:53:31:7D:17:36:71:2B:9C:7F:D4:59:F4:14:0A:39:7B:E7:54
X509v3 Authority Key Identifier:
keyid:01:A5:32:61:B2:00:1F:A7:EB:57:79:3E:2E:57:9B:73:22:F8:E7:6A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/AaUyYbIAH6frV3k-LlebcyL452o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AaUyYbIAH6frV3k-LlebcyL452o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SAVECOM/pIhTMX0XNnErnH_UWfQUCjl751Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.107.60.0/22
Signature Algorithm: sha256WithRSAEncryption
08:1f:34:47:8b:6b:b0:cd:74:ff:df:15:64:8c:82:a3:c3:38:
88:f0:2b:f3:35:ef:41:64:f6:79:ea:01:ab:a1:19:40:2d:0d:
30:89:a1:50:21:fb:b1:a1:17:2c:45:a2:68:cd:c7:96:e1:e7:
57:0b:33:0e:69:ca:05:31:8e:2d:39:ed:a0:a1:de:18:c5:41:
26:25:cb:0c:5f:fa:d7:6b:9b:19:2b:e1:95:d5:4e:55:b1:c9:
52:e6:d6:8e:43:90:a8:c1:be:f9:b0:bb:e0:ba:d8:d0:d7:f6:
48:9b:7d:18:47:04:40:b0:e2:ba:ae:f9:b6:d6:2c:2d:32:f4:
0e:fa:dc:00:4a:47:95:21:80:d0:a0:58:df:58:22:2a:1a:04:
10:7b:80:01:9a:9d:50:60:74:f8:d9:45:34:ac:81:7f:f9:7c:
dc:8d:bd:46:80:92:9c:2b:7e:62:33:5a:0d:37:9e:b0:61:5b:
64:2a:3f:3f:c0:cb:84:da:ab:eb:58:28:ac:b4:36:5c:21:81:
52:16:15:7f:de:f5:13:6d:c5:7e:29:f3:d5:61:01:e4:36:84:
a8:0b:fb:bc:b5:16:19:68:0d:ac:86:5d:d5:1f:7d:ac:9e:b2:
40:69:75:ca:32:e2:8c:4c:51:e6:95:7e:a1:46:da:c6:66:50:
f2:62:f8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:21:50 2023 by rpki-client on console-ams.rpki-client.org