Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SONET/tgqS55VFiASeq0J_3DYLBw0iHjg.roa
File: tgqS55VFiASeq0J_3DYLBw0iHjg.roa (raw, json)
Hash identifier: i+5GoUUDsT/TcwCar0nPKHAimjotVLxcWday2Yc3AH0=
Subject key identifier: B6:0A:92:E7:95:45:88:04:9E:AB:42:7F:DC:36:0B:07:0D:22:1E:38
Certificate issuer: /CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Certificate serial: 0A6C
Authority key identifier: CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/tgqS55VFiASeq0J_3DYLBw0iHjg.roa
Signing time: Thu 15 Sep 2022 02:49:22 +0000
ROA not before: Thu 15 Sep 2022 02:49:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18182
IP address blocks: 219.85.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2668 (0xa6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCB5454153ACCECE8520D33907D54E56C5CA9A4B
Validity
Not Before: Sep 15 02:49:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B60A92E7954588049EAB427FDC360B070D221E38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:67:bc:62:5b:ed:6a:a1:60:3a:a1:3a:d6:
ae:f6:ab:bc:6b:be:93:f8:e6:61:ea:8e:95:35:2c:
47:6f:9b:73:29:5e:9d:57:84:cd:39:15:59:81:de:
5f:b2:cb:32:1d:ea:57:85:fc:b9:a2:7b:fe:f8:ed:
28:ea:ad:2c:3f:7e:c6:95:e7:28:14:33:9e:5f:bf:
4c:82:e5:f3:95:60:b2:26:81:92:95:fd:dc:d3:93:
33:89:b4:7c:d0:38:66:96:e4:85:fe:fd:43:56:e3:
43:43:33:ec:d2:03:c5:f8:04:ff:c0:2d:e1:af:de:
f8:e6:7d:f2:2d:93:73:ef:cc:ae:ec:95:23:fd:63:
59:58:99:5f:50:67:dc:0b:df:6d:ba:b0:68:6f:f2:
9e:78:c3:83:17:2f:87:18:97:6d:db:82:a1:01:81:
04:5b:71:14:4b:c4:4f:b8:f8:cf:53:7e:5d:de:6f:
2a:78:19:72:8c:a3:8f:c8:9e:63:01:23:b8:7e:61:
d2:33:3b:39:4a:17:79:0e:c1:a4:82:fc:74:31:24:
fc:d5:25:ee:99:06:60:be:71:6a:a1:c7:8d:85:8e:
97:1e:d0:63:e9:69:b9:56:49:8a:9f:e4:ec:da:0e:
0e:d7:d0:43:ac:c6:e9:61:4d:b1:2f:3f:79:8d:76:
79:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0A:92:E7:95:45:88:04:9E:AB:42:7F:DC:36:0B:07:0D:22:1E:38
X509v3 Authority Key Identifier:
keyid:CC:B5:45:41:53:AC:CE:CE:85:20:D3:39:07:D5:4E:56:C5:CA:9A:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/zLVFQVOszs6FINM5B9VOVsXKmks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zLVFQVOszs6FINM5B9VOVsXKmks.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SONET/tgqS55VFiASeq0J_3DYLBw0iHjg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
219.85.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:76:90:03:53:84:ad:10:b4:26:78:90:4f:02:b4:cc:45:85:
b9:89:b4:1e:12:0a:d1:cb:9f:eb:f3:6d:74:b1:d1:74:77:66:
91:82:c3:13:ba:92:f5:d6:60:e4:15:45:85:1e:c3:d7:e2:33:
ed:30:64:9e:c2:be:8b:c4:fb:ef:48:c5:dc:58:5f:9a:0a:73:
a2:cc:a1:ea:c9:96:01:fd:94:f2:18:ae:0f:40:b8:1c:c5:99:
a1:18:2e:01:d9:e4:82:cc:b8:a3:f2:08:de:f2:2e:04:5b:cf:
87:41:4e:b3:10:f4:32:32:ff:71:40:b6:7f:d9:1f:48:2b:c8:
23:d6:25:82:d9:13:89:bc:55:8d:2a:34:76:62:05:1e:38:62:
21:85:5c:ab:fd:ed:76:aa:e8:ae:58:b5:07:13:42:39:bb:2d:
fb:8e:77:e9:fe:75:12:5d:91:77:a5:f1:12:c4:db:96:95:cd:
63:7e:4f:f5:8e:18:78:00:a2:38:97:38:c7:c1:b9:57:b3:ad:
ce:e4:21:5b:5f:5d:f1:d3:8d:4f:f0:ae:7d:c7:3b:75:5a:b8:
a5:4e:92:14:ff:95:0d:c7:7e:74:f0:4b:a2:85:0a:73:18:0c:
0f:48:72:77:7e:1d:74:80:6a:53:49:26:61:e5:f3:47:38:94:
b6:ae:b0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:21:51 2023 by rpki-client on console-ams.rpki-client.org