Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/d-oQk9wTY0x7g3DQihaGxXa06wY.roa
File: d-oQk9wTY0x7g3DQihaGxXa06wY.roa (raw, json)
Hash identifier: BAyda6mR73+ZeKx17TFk420+3JTuM0t5/PRu97mdLUQ=
Subject key identifier: 77:EA:10:93:DC:13:63:4C:7B:83:70:D0:8A:16:86:C5:76:B4:EB:06
Certificate issuer: /CN=3F84FAED6CB47E112F24C6B0277A4862270672CA
Certificate serial: 08
Authority key identifier: 3F:84:FA:ED:6C:B4:7E:11:2F:24:C6:B0:27:7A:48:62:27:06:72:CA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/d-oQk9wTY0x7g3DQihaGxXa06wY.roa
Signing time: Wed 13 Dec 2023 02:07:27 +0000
ROA not before: Wed 13 Dec 2023 02:07:27 +0000
ROA not after: Fri 06 Dec 2024 15:30:22 +0000
asID: 8987
IP address blocks: 113.192.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8 (0x8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F84FAED6CB47E112F24C6B0277A4862270672CA
Validity
Not Before: Dec 13 02:07:27 2023 GMT
Not After : Dec 6 15:30:22 2024 GMT
Subject: CN=77EA1093DC13634C7B8370D08A1686C576B4EB06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:7d:f1:06:c7:0c:37:4b:00:95:af:65:55:
21:db:be:c4:e6:0b:8c:3a:eb:bc:ac:49:e9:a7:ca:
5c:d1:df:3c:7a:18:39:0e:18:68:02:73:22:40:3e:
40:9e:96:f6:ba:69:24:ff:54:a9:07:8c:32:7a:70:
ce:4a:3d:52:9c:22:4a:43:e8:e8:b2:8e:2b:36:65:
0a:0e:38:5c:03:90:96:01:ef:34:2b:c3:bd:44:28:
06:bb:a9:e6:9b:9e:a2:f1:fa:66:ab:9e:2a:ed:53:
bb:b3:41:b8:6d:c8:d9:7d:76:98:d1:bd:e5:03:c2:
06:22:42:72:c4:ce:9a:12:69:eb:3e:4d:7b:3b:fc:
ea:2d:92:13:b4:69:c1:3f:6d:49:99:81:2e:1a:6e:
3b:cb:28:15:c3:bf:86:1d:08:a1:cb:e2:30:61:d4:
1c:1c:1d:92:4f:1c:c9:0a:35:80:0d:62:91:db:88:
cb:06:d0:f6:f2:06:e9:dd:b8:d8:cc:78:f5:ba:6b:
59:00:de:ce:63:f2:69:10:b2:66:6b:6b:27:fe:7a:
06:ec:88:aa:5e:da:ec:cf:43:95:f3:63:af:00:cc:
fc:56:31:8c:06:1e:b8:a6:16:7f:12:7f:f4:b4:6f:
31:53:25:4c:05:19:39:d0:27:f1:b8:2a:da:71:27:
1e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EA:10:93:DC:13:63:4C:7B:83:70:D0:8A:16:86:C5:76:B4:EB:06
X509v3 Authority Key Identifier:
keyid:3F:84:FA:ED:6C:B4:7E:11:2F:24:C6:B0:27:7A:48:62:27:06:72:CA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/P4T67Wy0fhEvJMawJ3pIYicGcso.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/P4T67Wy0fhEvJMawJ3pIYicGcso.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KRONOSTECH/d-oQk9wTY0x7g3DQihaGxXa06wY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.192.25.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:1c:d1:f3:43:72:38:a7:b0:e6:6f:0c:08:c5:3c:76:60:71:
e9:b1:2f:f6:de:e9:ca:5d:00:b9:3c:e7:79:09:32:77:97:16:
10:36:08:ad:05:36:c2:de:c1:e5:b1:33:3c:66:01:e4:2c:7b:
31:70:ed:2e:2b:0c:0a:8d:87:8a:da:cb:97:d7:0b:d5:88:fd:
c8:57:5e:3a:a8:91:c6:08:d4:5f:79:a8:99:44:ba:77:a6:f4:
8e:2a:7e:ab:bb:cb:bb:8b:df:56:76:77:8a:ac:84:56:e8:37:
7b:3c:f6:94:2b:12:2a:47:e2:26:5e:d6:2b:cf:6e:76:6f:f9:
dc:f9:a8:e3:9f:64:11:f9:21:c6:65:55:31:44:87:c0:f1:e4:
e3:1f:50:1c:33:2f:a0:82:a0:b8:87:8c:a0:74:2e:4a:a6:98:
6d:63:3c:24:59:7d:7a:25:13:6c:7f:23:6c:0d:13:04:e0:3a:
f1:f6:da:e5:1e:60:a8:aa:38:49:7a:db:ca:0c:5d:1f:aa:50:
c3:44:37:e2:fd:9e:da:e8:94:74:44:47:9e:e8:c9:69:78:f4:
5e:a2:36:fb:74:c1:4f:20:31:9b:f8:f6:08:f3:d5:b2:33:e0:
2c:6b:63:6d:e4:7a:6c:39:0e:02:c6:d6:88:1e:5b:f2:b5:30:
77:4d:85:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:43:07 2023 by rpki-client on console.sobornost.net