Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/VIBO/1utdTNoMkswstUCyFPcmTpsp6NA.roa
File: 1utdTNoMkswstUCyFPcmTpsp6NA.roa (raw, json)
Hash identifier: CpMj5FKcYF+RfGDwedCwXZlOROfo0ocbaJWBANmqgbU=
Subject key identifier: D6:EB:5D:4C:DA:0C:92:CC:2C:B5:40:B2:14:F7:26:4E:9B:29:E8:D0
Certificate issuer: /CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Certificate serial: 0A83
Authority key identifier: 52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/1utdTNoMkswstUCyFPcmTpsp6NA.roa
Signing time: Thu 15 Sep 2022 02:37:56 +0000
ROA not before: Thu 15 Sep 2022 02:37:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24157
IP address blocks: 112.78.64.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2691 (0xa83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52A3F0198009803B5165DE5ECB61FD451246CFAB
Validity
Not Before: Sep 15 02:37:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D6EB5D4CDA0C92CC2CB540B214F7264E9B29E8D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8f:d4:6e:db:69:4c:7c:97:c5:5b:15:08:b0:
c6:83:33:25:9d:17:34:05:45:26:10:0a:b4:de:90:
34:6c:fa:f3:c1:f0:83:57:42:ae:0c:a9:86:d1:8d:
71:d1:e6:9e:7a:fa:d5:e7:c4:8f:af:9a:3d:5f:67:
f5:4a:80:ef:3b:db:d6:63:ef:18:0f:78:1b:1b:4a:
12:d2:60:ba:77:29:0b:8e:98:58:b3:4a:d5:f2:c1:
86:47:20:52:7b:9c:d4:12:30:2a:1e:7f:53:9e:ec:
db:b1:87:94:a6:c9:c4:04:a4:13:7a:18:58:41:5e:
23:af:6d:ad:53:f3:ca:99:24:06:73:6d:bd:9c:0f:
f5:ab:79:4a:20:76:77:c0:24:1f:0c:bf:3c:28:eb:
74:1b:cc:57:7d:9b:85:f7:52:ab:7f:63:fa:b4:12:
74:5b:4a:2f:70:63:ba:76:8f:76:9d:ee:37:54:d2:
3d:72:cd:63:49:d4:bb:ae:18:4e:b6:0a:57:6b:58:
8a:81:db:85:57:84:33:38:8d:e6:05:1e:5a:24:c8:
e9:a4:3f:60:5b:56:25:2c:9b:9b:bb:1c:4a:da:c7:
07:e8:38:b9:54:3d:a5:38:ec:8b:b0:67:cd:f4:c2:
a6:ed:f9:f3:3c:0e:df:2d:6f:fd:39:51:a2:81:45:
c0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EB:5D:4C:DA:0C:92:CC:2C:B5:40:B2:14:F7:26:4E:9B:29:E8:D0
X509v3 Authority Key Identifier:
keyid:52:A3:F0:19:80:09:80:3B:51:65:DE:5E:CB:61:FD:45:12:46:CF:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/UqPwGYAJgDtRZd5ey2H9RRJGz6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UqPwGYAJgDtRZd5ey2H9RRJGz6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/VIBO/1utdTNoMkswstUCyFPcmTpsp6NA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.78.64.0/19
Signature Algorithm: sha256WithRSAEncryption
7f:65:9d:f7:fa:fd:79:69:62:37:e9:32:02:b7:47:9d:e4:36:
e9:05:d2:5b:63:52:41:fd:3b:51:91:26:b9:1f:6b:b8:12:51:
04:76:e1:6d:01:d5:d8:a3:e0:27:e5:8b:14:a2:35:c9:be:4e:
9a:04:95:36:d1:35:5c:d3:65:d3:10:f2:17:43:fe:64:55:fd:
0c:62:fc:21:12:34:9d:97:14:a1:59:fa:ff:67:26:61:8a:72:
05:eb:98:16:b3:c0:25:35:6c:b0:9a:63:2f:33:fa:96:6c:94:
a9:f8:f7:b8:2f:b7:b8:da:f0:2c:72:c1:12:2c:fd:e6:3f:b4:
44:4f:28:93:98:53:18:5a:2c:de:ee:e4:bf:1a:bf:dc:d9:f0:
2d:38:33:9d:fe:96:1e:ad:45:3a:03:ce:a0:05:ee:af:99:cf:
8f:0e:75:ae:c2:84:72:04:1a:1c:1a:c8:74:d5:9e:17:f3:18:
e8:ee:6c:2f:5a:70:7f:72:7c:01:5d:5b:b3:83:79:5f:da:d2:
61:e8:62:20:57:d6:21:4c:46:f3:a8:dd:47:17:70:fb:f5:fc:
cf:5b:99:01:ac:48:5a:46:5b:db:5f:71:45:31:1d:26:8d:9a:
2f:0c:b5:04:d5:81:5c:bf:36:d2:63:bf:83:fb:49:c6:b1:24:
82:e0:ca:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:16 2023 by rpki-client on console-fra.rpki-client.org