Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/0Xz4JDUKebzfSp7LWUtzMxbDweQ.roa
File: 0Xz4JDUKebzfSp7LWUtzMxbDweQ.roa (raw, json)
Hash identifier: q1dAoQYW+/Umd/O4tC0jKuoyZosuttGIb9vMV8bkUYo=
Subject key identifier: D1:7C:F8:24:35:0A:79:BC:DF:4A:9E:CB:59:4B:73:33:16:C3:C1:E4
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/0Xz4JDUKebzfSp7LWUtzMxbDweQ.roa
Signing time: Thu 15 Sep 2022 02:42:59 +0000
ROA not before: Thu 15 Sep 2022 02:42:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38851
IP address blocks: 113.196.144.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D17CF824350A79BCDF4A9ECB594B733316C3C1E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ee:d1:99:db:70:6e:d5:d9:5b:dd:f6:5a:ed:
73:34:ca:7e:51:5c:f6:8e:ab:e3:5f:3e:8f:48:d0:
f8:6d:0a:3d:88:65:63:4d:79:37:17:11:4a:df:ea:
da:5f:ce:ae:cc:c3:b5:8a:97:f1:48:fc:e1:79:8a:
b1:58:c6:84:e1:39:ab:2d:cb:d1:3f:48:08:16:69:
ac:6b:ca:82:3c:a7:d3:72:e0:02:3a:e5:7f:dd:a0:
7a:f3:a1:01:68:d4:23:69:b8:2d:9c:0e:cb:6d:07:
97:69:ec:52:12:77:6b:e0:56:ba:37:d0:3d:a9:5f:
85:ea:91:ce:6d:e8:af:42:17:3a:60:37:a6:63:78:
39:88:3c:a5:1a:22:0c:ae:b9:41:55:54:79:ae:4f:
64:14:d6:88:c9:c2:a9:ad:90:d6:99:1b:85:79:f0:
8a:2c:1b:ec:a2:5a:ec:d6:7a:eb:a5:58:3b:e9:5a:
a7:a9:a2:6c:a4:22:03:eb:77:62:90:a2:cc:07:8c:
be:e4:16:3e:58:6e:62:68:d3:b5:2e:97:76:90:9a:
c7:e0:08:72:06:91:2e:44:a2:a8:f2:97:ca:e1:b4:
8f:e4:5b:43:1d:12:de:67:31:d4:39:23:2d:cb:a6:
0d:7b:28:f2:13:78:4c:40:07:2d:8c:39:c6:4e:19:
7d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:7C:F8:24:35:0A:79:BC:DF:4A:9E:CB:59:4B:73:33:16:C3:C1:E4
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/0Xz4JDUKebzfSp7LWUtzMxbDweQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.144.0/21
Signature Algorithm: sha256WithRSAEncryption
85:46:62:7a:87:b9:3b:9b:b2:9f:ef:8c:9f:7e:2f:07:af:15:
6b:bf:75:de:f2:90:27:1c:c7:ed:87:8a:6a:c2:f0:44:a3:2e:
13:07:3d:8e:85:3c:04:48:bd:01:2a:45:c2:aa:cb:4a:11:f0:
21:9f:17:e3:af:f4:56:a6:e5:7b:a1:29:9a:ea:de:ff:6e:fd:
5b:1c:7d:f5:ff:15:44:10:92:ef:b3:56:23:2e:39:65:9d:80:
c9:5c:e8:ed:e1:5f:bb:4a:79:77:96:5b:01:28:2d:6a:52:8a:
c8:b1:77:2e:e5:51:6a:26:80:9b:89:4a:94:ba:2f:b0:fa:a0:
5f:20:79:b5:4c:5e:21:e1:91:10:cf:fb:a7:ae:7a:95:2f:46:
3f:a9:a3:62:79:0d:66:b0:ea:ea:82:58:56:3e:73:10:df:e7:
3e:9e:f6:2a:3c:cc:bb:ab:9f:7e:e5:98:b3:70:16:cf:82:dd:
8b:75:8f:8b:76:e5:e1:37:73:51:1e:3c:55:4d:ca:9f:07:4a:
3e:8f:b5:1a:31:ed:4f:28:0b:18:2a:c7:87:db:c0:9a:d3:60:
4c:53:e4:98:0a:69:9a:4c:b2:c4:c3:4b:91:23:06:f3:9f:2f:
e1:f3:58:b4:3c:7e:02:d6:23:1f:98:b1:e4:25:e7:c3:60:92:
55:e7:8d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:57 2023 by rpki-client on console-ams.rpki-client.org