Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/3rwR0OFSz09M4g5NeOVLuRW1fQ0.roa
File: 3rwR0OFSz09M4g5NeOVLuRW1fQ0.roa (raw, json)
Hash identifier: cMkqmLSGaMeGIAqtv62wH4UV9fj7UFGUQ2z6UQ03z/M=
Subject key identifier: DE:BC:11:D0:E1:52:CF:4F:4C:E2:0E:4D:78:E5:4B:B9:15:B5:7D:0D
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1160
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/3rwR0OFSz09M4g5NeOVLuRW1fQ0.roa
Signing time: Fri 07 Apr 2023 00:46:53 +0000
ROA not before: Fri 07 Apr 2023 00:46:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131602
IP address blocks: 218.210.32.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4448 (0x1160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Apr 7 00:46:53 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DEBC11D0E152CF4F4CE20E4D78E54BB915B57D0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0e:d7:e4:f7:82:46:3a:2a:04:63:fd:e6:c9:
6f:d9:4d:62:c8:17:2e:3d:db:33:94:94:33:87:e4:
e5:74:95:ad:f2:a1:6d:19:67:dc:31:40:c1:c4:d6:
d8:10:ad:4b:79:88:ad:91:d5:b3:0e:33:5a:a2:e2:
52:3a:97:59:6f:51:dd:f6:a1:a9:f8:d6:2a:86:0c:
f5:cc:83:2f:d4:46:c9:9f:38:9e:d4:86:4e:a7:1b:
b0:2b:6f:2d:01:14:fc:94:da:67:38:35:d5:53:7e:
69:e7:32:7f:0c:29:4d:96:a7:90:14:c5:aa:eb:39:
50:5b:ff:bf:bf:9c:b1:b2:7b:5a:cd:5b:b5:6a:5e:
62:a8:b6:5b:71:ef:1a:6d:f3:43:30:2c:29:a6:72:
83:be:bf:f7:26:99:89:53:3c:58:6b:5b:c5:ea:71:
d3:73:7b:58:78:9b:e6:6c:de:75:94:87:10:54:bd:
47:26:a9:70:54:b4:d2:a5:d8:04:7d:fb:74:65:5c:
3e:27:6c:17:59:2a:ba:59:d3:b2:81:76:a1:a7:b3:
36:b0:38:b6:f2:01:e0:05:de:dd:af:60:1d:b1:b2:
21:40:9a:ce:e0:87:a8:f6:30:10:0d:da:a4:47:f2:
b7:54:9a:27:25:36:c2:66:b3:a1:2c:7a:d1:e5:dd:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BC:11:D0:E1:52:CF:4F:4C:E2:0E:4D:78:E5:4B:B9:15:B5:7D:0D
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/3rwR0OFSz09M4g5NeOVLuRW1fQ0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.32.0/20
Signature Algorithm: sha256WithRSAEncryption
51:09:d7:d4:d7:07:2e:f2:b1:23:3a:0b:10:79:98:f3:8a:9d:
f4:d6:71:52:17:a8:ee:d4:46:50:f9:8e:20:6d:5f:e7:12:4a:
ec:e1:1d:b8:e9:bd:99:70:22:bb:2e:e8:62:42:2e:8f:70:eb:
36:60:4b:a8:70:ac:d7:67:8a:fe:f0:9f:bc:26:1c:56:34:87:
7a:af:5a:54:04:f1:ec:01:58:97:51:43:38:61:2c:5c:0c:7b:
7d:e6:40:af:b7:e9:58:82:76:bb:57:49:d4:51:93:6d:29:cf:
f1:1a:ae:54:e8:12:84:bd:71:b8:2a:48:d2:17:0e:34:da:69:
e5:71:7e:58:d0:1a:77:fa:19:93:e0:25:2d:25:00:91:7b:b4:
43:6c:21:f0:b8:73:fc:c0:66:dd:54:ac:a4:ff:99:62:c0:53:
4d:b0:fa:fe:be:8b:98:0c:44:9f:1f:99:2f:21:68:65:29:da:
1b:bc:31:b1:a8:c2:7e:d9:11:83:f5:5d:c1:59:c5:21:f6:6a:
8d:65:3a:c8:50:b3:c7:a9:c5:1f:f2:25:65:7d:e2:cb:b9:24:
2f:a7:7c:0e:01:d6:06:40:5d:b1:af:42:6f:a7:dc:10:8f:9c:
0d:6c:3b:32:c3:10:5f:e9:95:1b:bf:ba:81:f8:bf:d0:70:31:
00:19:38:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:50 2023 by rpki-client on console-ams.rpki-client.org