Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/1nlfXy9R_DKVwKvr6x-F2IhH6_M.roa
File: 1nlfXy9R_DKVwKvr6x-F2IhH6_M.roa (raw, json)
Hash identifier: XcyCuKq4ph3YPVlMXVqHItSFJO51kbr0NMgag+d4alk=
Subject key identifier: D6:79:5F:5F:2F:51:FC:32:95:C0:AB:EB:EB:1F:85:D8:88:47:EB:F3
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1nlfXy9R_DKVwKvr6x-F2IhH6_M.roa
Signing time: Thu 15 Sep 2022 02:42:41 +0000
ROA not before: Thu 15 Sep 2022 02:42:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 61.66.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D6795F5F2F51FC3295C0ABEBEB1F85D88847EBF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:55:70:db:28:cf:c6:b7:ae:3a:1a:c7:7d:
0d:19:d5:03:a8:94:e3:d4:7f:6f:b4:3b:5b:cc:a8:
91:2e:c0:ff:17:ff:e4:de:1a:4f:f5:02:f8:b6:19:
fc:0b:57:54:7a:a0:d1:49:ca:27:bc:89:ff:92:e2:
c9:6e:b6:2b:6e:ba:55:2b:16:bc:bc:ec:92:66:64:
2b:ff:f5:2f:a0:ea:4e:a7:be:a6:dd:2c:f9:d6:5a:
92:1f:b7:7e:8d:5c:91:39:6e:09:55:e5:18:08:8f:
a8:26:ac:99:43:8a:8e:bd:ce:2b:81:63:37:d9:bb:
e6:cf:d1:1a:c5:f9:a3:58:27:16:f4:73:d7:87:fb:
1b:34:9d:9e:72:35:87:1b:f0:3f:32:48:e2:18:d6:
3a:58:e6:cb:c0:53:ff:f3:d5:77:fe:f8:47:fd:53:
47:90:af:6c:85:a2:ff:8f:26:f7:ca:79:57:95:74:
9d:7c:bf:23:30:3a:20:93:42:4b:da:02:1e:2a:fa:
7d:19:5e:2c:2b:ff:36:1a:96:ac:ce:8d:25:11:10:
92:76:c5:91:ba:0e:d8:41:ad:c4:5f:e8:20:89:c7:
2f:b1:a1:59:07:75:21:67:55:5c:f0:20:03:c4:e5:
f4:55:40:25:dc:ef:a2:97:b1:a1:76:83:e7:04:0c:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:79:5F:5F:2F:51:FC:32:95:C0:AB:EB:EB:1F:85:D8:88:47:EB:F3
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1nlfXy9R_DKVwKvr6x-F2IhH6_M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.66.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c3:61:a4:8b:12:b9:1f:b8:05:d4:9a:44:1e:f9:0c:f6:cd:74:
c7:52:98:66:23:98:67:25:b1:14:61:b5:2b:98:b4:1d:22:9e:
3c:1c:b6:18:6a:e9:18:9d:51:f5:06:bc:62:c5:0d:35:6f:5d:
f4:c5:33:af:11:7e:08:cf:62:93:81:24:c1:2f:db:fa:52:99:
be:5a:99:83:1a:65:19:80:bf:fa:db:3d:6b:68:47:d1:df:81:
46:0a:82:eb:c4:ed:d3:6a:57:7b:a1:9d:95:38:f6:48:26:a0:
4d:d7:98:5e:ec:c9:e6:0f:6c:4f:65:84:c6:eb:84:af:07:6b:
d8:d5:62:a1:55:b6:7b:66:70:af:46:de:86:a5:ee:b2:3a:bb:
7e:b1:a8:c8:4b:45:a2:28:96:73:17:58:24:76:c5:d1:a5:07:
a7:4b:58:63:4d:f5:98:5e:3a:ab:65:11:ec:3e:aa:d6:e7:d0:
7f:5f:66:a7:42:17:99:ad:a8:91:d0:96:17:61:22:f9:77:cc:
b5:ad:da:cd:c2:3a:05:f1:2e:7c:ce:29:43:05:87:b2:fa:59:
23:76:a4:cf:6f:04:9d:c6:5b:e8:06:15:42:5b:e0:75:57:b0:
c0:02:a7:c0:85:78:8a:11:1d:28:7b:8b:5c:3a:8c:2d:78:5c:
a1:f2:f8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:57 2023 by rpki-client on console-ams.rpki-client.org