Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/IXj4pVMsfzzq5pYyjEXA-T21ros.roa
File: IXj4pVMsfzzq5pYyjEXA-T21ros.roa (raw, json)
Hash identifier: T9+xlT5kPD1m0Ys9B9av2awtnrLYXGIU7OVwK6+Gx/k=
Subject key identifier: 21:78:F8:A5:53:2C:7F:3C:EA:E6:96:32:8C:45:C0:F9:3D:B5:AE:8B
Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial: 0BC6
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/IXj4pVMsfzzq5pYyjEXA-T21ros.roa
Signing time: Mon 27 Mar 2023 23:14:04 +0000
ROA not before: Mon 27 Mar 2023 23:14:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18424
IP address blocks: 121.50.149.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3014 (0xbc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Validity
Not Before: Mar 27 23:14:04 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2178F8A5532C7F3CEAE696328C45C0F93DB5AE8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3a:58:42:54:33:e1:8c:f5:6f:a3:47:ca:4f:
f1:4e:1d:33:de:32:53:47:31:86:36:50:80:9a:f3:
19:0a:f6:1c:10:4e:8d:14:c6:a8:60:66:71:b5:f2:
e8:05:6b:8d:59:62:78:3d:8d:b7:dc:bf:71:28:54:
4c:26:d7:d6:a7:f2:54:e4:d2:68:fb:d1:d0:71:f2:
e2:da:23:e5:e0:3f:13:4e:bc:86:ab:78:16:08:0d:
58:8d:69:63:6c:4f:85:e0:57:e8:55:11:fa:55:a6:
63:38:cc:a3:af:38:56:f3:0f:ec:35:c9:4c:e6:72:
99:ea:2e:a2:6e:2c:c5:8b:19:3d:4f:ad:72:34:6e:
54:55:5e:d5:8f:27:66:93:1e:8b:96:2d:e2:96:52:
d5:2e:0a:89:bc:fe:7c:a4:58:4c:10:6f:2a:3f:a6:
d8:06:ae:3d:3b:72:7b:5f:37:8f:55:84:7b:79:0a:
5a:bc:7b:4a:11:ba:53:86:38:a8:e2:47:1a:0d:a6:
d7:f4:47:2c:fa:b1:fc:3d:7a:af:69:d0:27:2d:54:
d9:c6:00:04:1d:d5:b4:ea:1f:ad:75:f6:8a:bc:4e:
74:d8:e5:d9:39:94:a6:12:d8:b7:43:34:d2:cb:cd:
06:e0:cc:44:80:92:51:0a:b0:a4:b1:11:a3:07:a8:
9a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:78:F8:A5:53:2C:7F:3C:EA:E6:96:32:8C:45:C0:F9:3D:B5:AE:8B
X509v3 Authority Key Identifier:
keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/IXj4pVMsfzzq5pYyjEXA-T21ros.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.50.149.0/24
Signature Algorithm: sha256WithRSAEncryption
29:5a:06:91:a6:aa:48:73:f5:db:7b:a7:8d:5e:75:8f:46:6a:
e8:a7:58:b1:29:cb:30:cd:b6:f1:b8:43:4f:44:11:38:4a:92:
20:19:41:6e:6a:06:eb:82:55:86:54:06:83:01:be:ad:91:33:
86:83:8c:b0:18:e3:aa:5d:a5:a0:05:e3:bc:18:47:f0:f0:43:
c1:7a:38:b3:3c:a2:95:6c:f9:e4:4d:20:90:a1:24:14:d8:a7:
1e:3a:f8:e1:e2:52:3a:55:f7:01:2a:c6:4e:d4:9a:71:f9:6c:
c5:2c:ce:6c:f9:40:fc:ed:00:99:78:b8:03:f9:a1:63:b9:00:
e4:6c:db:31:ec:37:e5:5b:2f:f8:9d:3d:d4:fd:63:5b:a6:ae:
93:30:63:0a:d2:07:1c:dc:88:13:de:82:e5:6b:06:5b:24:b8:
1b:2e:bf:00:7b:f1:16:b5:c2:0f:8c:bd:ad:24:56:be:cd:71:
6d:ea:31:1c:58:0d:b6:f2:11:60:7d:2b:2e:b6:a0:9a:94:5b:
a3:6a:c1:4d:ed:3f:34:5c:c5:11:f3:5e:9f:42:cc:64:06:e2:
53:d1:11:88:74:ef:83:53:c6:b7:ed:bf:a4:4c:da:e8:7b:b0:
a0:49:33:cf:25:14:76:4a:94:19:ef:70:3e:ea:9d:ba:9a:de:
05:94:5a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:41 2023 by rpki-client on console-ams.rpki-client.org