Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/oQY0xiw1w4YAftHdQQWBD7jKDZ8.roa
File: oQY0xiw1w4YAftHdQQWBD7jKDZ8.roa (raw, json)
Hash identifier: up+jts58T2JyzhbFH4gbHN9iLqU7tjaOCF1DxoH4A/g=
Subject key identifier: A1:06:34:C6:2C:35:C3:86:00:7E:D1:DD:41:05:81:0F:B8:CA:0D:9F
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 0A97
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/oQY0xiw1w4YAftHdQQWBD7jKDZ8.roa
Signing time: Thu 15 Sep 2022 02:50:58 +0000
ROA not before: Thu 15 Sep 2022 02:50:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 211.73.160.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2711 (0xa97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 15 02:50:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A10634C62C35C386007ED1DD4105810FB8CA0D9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:f0:87:3c:1e:4f:c4:0a:8d:6a:5f:a0:53:
db:0a:e0:20:b2:20:c1:9a:38:77:55:9b:a7:09:e4:
b2:0d:fe:10:fe:86:16:4b:2f:3b:13:13:c1:f6:55:
9f:e0:e4:41:11:6f:b8:ea:cd:f8:6f:34:62:46:d8:
76:1c:4a:dc:08:97:eb:c2:5b:d0:04:af:38:6a:b9:
0e:68:01:4a:f9:6b:15:37:e8:f6:26:20:e1:f3:6b:
b5:73:7e:9e:b8:0a:d5:5d:d6:bc:1d:67:c0:de:b3:
23:90:26:aa:1b:38:9a:39:dd:f5:43:b8:29:d4:a2:
66:29:74:ed:0c:e1:b2:cc:32:ef:02:d8:ab:cd:4f:
2f:45:c2:ae:f2:ef:fc:c6:ff:87:e8:73:ff:8b:69:
11:cf:87:a3:52:5f:ba:b8:b0:22:a5:50:8e:02:f0:
62:f7:fc:ff:50:bc:0d:1f:e1:2b:51:8a:50:31:4b:
60:8b:c6:10:b4:f6:4c:71:fb:a0:49:bb:8f:72:fc:
b8:58:12:fa:5a:fc:3b:85:5a:b9:cf:ad:68:8e:c2:
d3:7e:b9:5c:d4:f9:41:1a:4e:d1:18:02:78:a4:8e:
a5:59:5c:99:57:c1:0f:2d:0a:25:c6:49:85:90:45:
ef:29:cc:17:09:e2:c9:3f:15:1d:b3:e1:0a:87:b7:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:06:34:C6:2C:35:C3:86:00:7E:D1:DD:41:05:81:0F:B8:CA:0D:9F
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/oQY0xiw1w4YAftHdQQWBD7jKDZ8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.73.160.0/19
Signature Algorithm: sha256WithRSAEncryption
21:6b:2e:d3:a8:3c:7d:31:93:d2:1a:c9:20:e4:ba:cb:6a:0d:
51:5b:d9:98:ed:f4:0e:f5:ae:40:ac:bc:26:bb:95:98:7f:fc:
27:18:d2:f6:65:ab:d3:ad:14:d6:f9:c3:cf:91:7c:70:70:d3:
52:f8:92:dc:a1:37:2a:8d:b7:0a:94:7a:46:0a:f0:f1:38:40:
87:bd:48:55:c5:c9:7c:db:1b:f4:4c:c7:0e:c2:d6:8d:6a:84:
c2:56:fd:4c:26:dc:4f:60:50:32:19:a5:35:1b:d4:7a:b0:00:
f2:e5:c4:88:5b:be:fa:b9:1d:53:20:7c:09:85:f7:f4:36:90:
8a:e1:7b:a6:ef:01:f7:cf:8c:ba:eb:93:ec:55:48:fd:14:c3:
ac:82:71:18:df:89:23:4c:54:11:bb:ec:ed:78:59:59:b0:95:
04:16:67:73:2a:e4:4e:94:95:2a:d8:39:1e:90:fa:37:69:c5:
67:32:ee:a2:20:09:7e:4c:f4:11:3e:0c:69:8a:72:32:a7:61:
3c:fd:70:90:d2:cf:f3:8e:c7:2b:17:f2:cc:7c:a0:74:50:3d:
56:61:f9:81:52:d2:63:fc:5a:4e:84:bc:ea:ae:fa:7c:fa:c1:
66:8e:db:8e:f6:24:c0:9c:e4:b9:39:13:e2:b7:25:a7:88:cf:
32:73:d2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:46:58 2023 by rpki-client on console-fra.rpki-client.org