Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DWINS/NkiquwjhHzbcsxBsSx_V8T92F8s.roa
File: NkiquwjhHzbcsxBsSx_V8T92F8s.roa (raw, json)
Hash identifier: T06vssfm6RHI0KC8hvUSqz0yvXEwhKsaAqYE50CZVaQ=
Subject key identifier: 36:48:AA:BB:08:E1:1F:36:DC:B3:10:6C:4B:1F:D5:F1:3F:76:17:CB
Certificate issuer: /CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Certificate serial: 0A55
Authority key identifier: 61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/NkiquwjhHzbcsxBsSx_V8T92F8s.roa
Signing time: Thu 15 Sep 2022 02:40:47 +0000
ROA not before: Thu 15 Sep 2022 02:40:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 137443
IP address blocks: 43.224.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2645 (0xa55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=615F9BD98CC70E8836D01A9481C19C5C2D45D791
Validity
Not Before: Sep 15 02:40:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3648AABB08E11F36DCB3106C4B1FD5F13F7617CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:a2:ab:4f:27:8a:8e:21:4f:2d:e2:d0:84:
2a:c0:fc:1f:40:90:c1:d1:3b:48:06:07:48:10:b3:
ad:f9:4c:03:72:69:78:4a:0a:9c:90:3a:98:8f:85:
0d:59:c7:25:44:a3:ad:7f:44:99:75:2a:36:f2:dd:
2c:4c:0b:c9:02:f6:7d:63:25:c6:93:99:66:a1:44:
bf:fe:31:db:2b:7c:89:14:25:ae:87:43:3b:7b:e4:
76:9c:7e:47:a5:21:c7:29:51:8d:5f:6d:fb:61:09:
fe:a4:ec:b3:47:86:b9:f4:ed:4c:2b:d7:30:c2:58:
31:73:19:57:b9:24:03:dd:18:74:33:5b:de:0e:a4:
af:a3:ff:1e:1e:c2:2c:ce:29:16:38:92:bb:78:70:
b6:cd:f9:1c:5e:79:79:69:b1:50:bf:bc:00:cd:bd:
a8:eb:88:4b:fa:60:54:1d:81:3f:ef:88:ee:91:0f:
e1:57:25:9f:53:1a:c9:8e:b7:d5:5f:bc:ae:c7:c6:
21:85:17:56:e1:6f:9e:99:e8:f5:d9:9a:30:e0:de:
28:33:c6:ff:0d:29:f6:64:f8:45:31:3c:c4:db:0c:
83:2d:63:e5:6f:42:e6:c1:12:40:d6:aa:b2:33:9b:
d3:80:05:4f:4e:c4:9c:69:81:76:31:48:87:16:30:
1c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:48:AA:BB:08:E1:1F:36:DC:B3:10:6C:4B:1F:D5:F1:3F:76:17:CB
X509v3 Authority Key Identifier:
keyid:61:5F:9B:D9:8C:C7:0E:88:36:D0:1A:94:81:C1:9C:5C:2D:45:D7:91
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/YV-b2YzHDog20BqUgcGcXC1F15E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YV-b2YzHDog20BqUgcGcXC1F15E.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DWINS/NkiquwjhHzbcsxBsSx_V8T92F8s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.23.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:d6:be:ca:1f:c9:8f:55:31:99:47:b4:af:df:33:90:c5:60:
6d:98:79:a8:df:87:b3:38:cd:e4:21:38:f1:30:19:25:4d:ca:
a6:cd:3c:23:44:88:d0:0d:9b:17:87:af:ae:b5:0b:74:6e:04:
8b:e5:31:7c:c3:b3:01:a0:dd:31:c3:34:b7:dc:ff:b5:85:e5:
91:7d:9a:d6:70:73:00:f9:2c:40:be:37:d4:9e:43:20:9c:af:
da:e5:52:1f:9e:96:e0:ec:df:ef:94:04:38:c7:f0:c4:32:91:
7e:3b:47:3f:8e:6c:d1:a3:27:22:8c:ec:cf:5c:9f:42:7e:9f:
1c:b1:ed:52:e3:d1:cc:af:a1:ec:2f:2b:ce:79:68:61:77:60:
40:4c:50:1e:de:5f:36:3d:52:ce:a2:3d:cb:19:f4:5b:96:ae:
b2:f2:93:a0:6a:a7:b6:71:b4:e6:c4:0c:a1:e9:84:14:ea:45:
74:82:c5:9a:db:42:7f:52:f1:a5:22:e0:59:99:0e:1c:70:26:
f8:d4:07:e3:e2:7d:56:1a:75:77:5c:4f:e7:da:ad:f2:8a:fd:
3d:04:51:97:64:87:1f:6a:e6:fd:68:4f:0a:4a:e9:0e:59:a4:
cd:b1:0c:72:48:89:59:f5:4b:7b:59:fb:2f:dd:e3:29:d6:68:
96:aa:aa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:52 2023 by rpki-client on console-ams.rpki-client.org