Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/thsm_mUuCAGQ_FaWJ3pwm8mkPxo.roa
File: thsm_mUuCAGQ_FaWJ3pwm8mkPxo.roa (raw, json)
Hash identifier: laUDH2pe0oi3s+Oo+kjjuShcT7LWSxZWhPAkNxQXXp4=
Subject key identifier: B6:1B:26:FE:65:2E:08:01:90:FC:56:96:27:7A:70:9B:C9:A4:3F:1A
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 0A97
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/thsm_mUuCAGQ_FaWJ3pwm8mkPxo.roa
Signing time: Thu 15 Sep 2022 02:51:02 +0000
ROA not before: Thu 15 Sep 2022 02:51:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 49.213.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2711 (0xa97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 15 02:51:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B61B26FE652E080190FC5696277A709BC9A43F1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:16:61:e2:2e:fd:6a:f2:d0:9e:e6:3d:89:35:
33:8a:b6:20:0f:70:d0:c4:20:ab:95:35:73:13:01:
ee:e0:de:49:a5:f0:a5:b8:87:be:df:66:62:f4:41:
44:96:a8:09:d1:06:8e:dc:f9:f1:fd:bc:6b:b4:c2:
47:8b:0d:6c:19:cf:da:b7:41:2c:e7:ae:66:b7:96:
64:29:a5:6c:b1:aa:86:8a:ed:f0:58:71:91:4f:96:
64:aa:95:14:f2:be:b1:fe:96:f5:ec:37:3e:85:94:
e4:6d:6c:5c:f8:7e:87:05:8a:f4:b7:69:f7:06:68:
c0:c0:b8:ff:2f:bb:fc:d9:eb:aa:ac:a8:60:57:26:
0a:d3:61:68:ac:aa:13:85:c7:16:64:69:47:7f:df:
ed:9d:7f:55:4c:cc:fc:09:0a:04:fa:96:8d:7e:37:
ed:fa:79:0f:72:bb:c3:df:7e:9e:f3:40:9c:05:63:
f7:97:a0:a6:5f:c1:3e:45:3d:80:f0:de:c7:e1:8f:
6a:b7:a3:e3:23:59:4d:13:38:76:88:59:b9:c3:fd:
42:b8:4e:d0:93:70:0a:61:74:43:b2:ca:de:b4:a3:
94:f3:55:96:f5:e7:29:71:dd:e7:9a:86:df:f8:d1:
c5:27:c7:34:53:76:68:f6:a8:cf:94:10:cd:ed:28:
dd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1B:26:FE:65:2E:08:01:90:FC:56:96:27:7A:70:9B:C9:A4:3F:1A
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/thsm_mUuCAGQ_FaWJ3pwm8mkPxo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
49.213.175.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:90:99:db:c6:6e:3e:bb:25:fd:7b:f0:32:e5:8d:92:7f:2a:
50:49:a6:ef:2b:a2:7c:d2:50:e3:ee:34:84:1e:6a:12:bb:8a:
23:15:da:7c:e5:01:da:fb:b8:a1:84:e1:c1:30:30:56:32:72:
ae:1a:b4:ac:dc:6d:65:df:06:77:15:24:d9:27:eb:36:ca:a3:
97:97:75:83:ba:20:90:48:83:c2:10:91:b6:c4:22:5e:dd:e2:
50:08:2a:96:05:88:d9:b3:67:2d:7a:a6:eb:90:b9:e6:24:25:
b2:d3:26:24:6c:31:8b:b1:62:40:7e:23:c8:8c:68:94:31:2f:
c4:56:f8:33:16:f5:31:29:29:b0:43:17:b4:b4:2d:0e:f6:cd:
4e:7e:74:e8:43:89:91:5f:8d:b3:74:ae:f9:c3:f6:d6:3b:65:
24:57:7c:e7:7c:ed:c7:a0:58:0f:ec:94:87:93:9c:47:c4:1f:
4d:29:3d:30:e8:77:e0:39:be:45:3d:63:91:44:d8:f0:a1:16:
4f:af:53:dd:9a:d2:49:36:9d:67:a6:4e:8f:a0:d9:a5:f8:07:
a1:99:8a:bc:7a:45:17:f2:15:dc:bc:9f:bf:ce:2b:ca:68:e1:
63:b9:c6:53:9d:9a:11:47:a9:93:de:5d:a5:ce:46:fb:8d:f3:
99:33:db:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:46:58 2023 by rpki-client on console-fra.rpki-client.org