Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TYCATV/-4PPj-uHeuae_4qf5dNTxq3Eplk.roa
File: -4PPj-uHeuae_4qf5dNTxq3Eplk.roa (raw, json)
Hash identifier: icYtr27d2lND9LPhIjuXVNYHk2yMt4Qrb5Ja6SUAboQ=
Subject key identifier: FB:83:CF:8F:EB:87:7A:E6:9E:FF:8A:9F:E5:D3:53:C6:AD:C4:A6:59
Certificate issuer: /CN=DF210700AE8EA25668E6BEA3FA6A6D3B378C3121
Certificate serial: 09F0
Authority key identifier: DF:21:07:00:AE:8E:A2:56:68:E6:BE:A3:FA:6A:6D:3B:37:8C:31:21
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3yEHAK6OolZo5r6j-mptOzeMMSE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TYCATV/-4PPj-uHeuae_4qf5dNTxq3Eplk.roa
Signing time: Thu 15 Sep 2022 02:42:09 +0000
ROA not before: Thu 15 Sep 2022 02:42:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9676
IP address blocks: 203.111.208.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2544 (0x9f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF210700AE8EA25668E6BEA3FA6A6D3B378C3121
Validity
Not Before: Sep 15 02:42:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FB83CF8FEB877AE69EFF8A9FE5D353C6ADC4A659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:50:4d:0b:f5:39:0d:8e:40:c9:62:23:bc:18:
08:5a:0e:cf:e3:0a:8f:44:27:c1:f5:c1:74:32:a2:
4c:0e:b9:13:9e:f2:49:a9:b3:ac:d5:48:e8:8a:3a:
92:bf:12:05:7d:33:bf:2d:60:a3:1d:d4:90:f6:a8:
4b:cb:e5:c6:bc:5f:d9:7c:5c:c6:7f:57:3e:b9:a5:
3c:2e:3a:46:a5:0e:a1:ed:7d:04:46:38:5c:f4:e6:
49:28:d7:06:cb:91:4e:33:bf:fb:23:7f:76:5f:67:
38:77:50:89:0e:3c:08:59:12:ff:87:ef:24:e4:3d:
91:8e:ec:76:20:5a:8b:27:b4:92:61:25:f8:68:49:
fb:07:5e:a7:a4:4f:d3:d9:bc:1c:82:bb:4b:fb:54:
5a:e0:b0:54:20:cc:25:b4:ab:70:20:4b:9d:0b:84:
be:e3:da:18:a0:03:e1:d6:f0:be:19:a6:35:56:6e:
41:e7:a1:b3:46:18:14:e2:f0:f2:41:f5:01:0f:21:
ed:12:a6:3f:3d:6f:c3:9f:52:6a:3e:3f:f0:df:f3:
f4:4f:30:ba:8a:d8:bd:40:f9:a5:f2:75:14:c4:a3:
09:7f:bb:ca:65:2d:58:3a:f6:ec:51:25:a7:ea:b8:
aa:59:19:5a:00:e5:4a:0e:74:7c:e7:eb:12:ca:77:
78:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:83:CF:8F:EB:87:7A:E6:9E:FF:8A:9F:E5:D3:53:C6:AD:C4:A6:59
X509v3 Authority Key Identifier:
keyid:DF:21:07:00:AE:8E:A2:56:68:E6:BE:A3:FA:6A:6D:3B:37:8C:31:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TYCATV/3yEHAK6OolZo5r6j-mptOzeMMSE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3yEHAK6OolZo5r6j-mptOzeMMSE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TYCATV/-4PPj-uHeuae_4qf5dNTxq3Eplk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.111.208.0/20
Signature Algorithm: sha256WithRSAEncryption
73:fd:48:7c:b3:13:a7:d7:14:a4:77:fd:56:7d:1c:35:de:ec:
ed:78:c7:40:16:86:09:b0:4d:bc:92:c8:9a:f6:12:b2:82:de:
4b:38:62:e6:7a:cd:2a:09:50:95:74:75:be:ce:a5:bf:19:40:
52:ef:e7:f0:e6:d9:5f:0c:79:99:28:6c:a8:f3:99:5e:57:5c:
3c:4a:76:cf:7a:5b:de:40:f6:a0:16:eb:5c:fb:5b:f7:6a:13:
e7:6b:e7:9e:03:c3:23:d8:48:26:98:d9:87:6a:5b:14:7d:a6:
45:c7:a9:76:4c:ec:bd:38:25:10:5a:14:4a:36:15:da:72:de:
7d:bf:13:d2:4b:74:0c:72:13:ce:cc:27:b9:dc:9f:9b:d6:67:
f4:22:e0:10:c5:c2:2e:90:e2:56:1b:ab:9d:85:43:0b:a4:05:
b1:c9:7b:ed:91:ca:4a:27:1b:b2:23:15:9f:e1:d4:00:29:1f:
4c:69:8f:b9:f8:5b:91:52:8e:f9:f2:74:62:68:01:ed:b3:99:
69:2f:e6:35:60:73:05:75:7c:54:e7:36:27:11:99:da:32:1e:
c2:f7:82:8a:55:9c:ed:51:65:64:f7:55:7a:d6:94:06:d7:a4:
fa:34:0a:28:3b:60:2c:9c:7c:e4:d1:8d:41:9b:d1:ff:8f:d8:
fc:9b:ee:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:37 2023 by rpki-client on console-ams.rpki-client.org