Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/47YgzjSvIvtXWVEL016boFvQ5gc.roa
File: 47YgzjSvIvtXWVEL016boFvQ5gc.roa (raw, json)
Hash identifier: 1SkAnNf77wpAe/InRmQz2wk2dDtcB9T9lrHn5Ahmags=
Subject key identifier: E3:B6:20:CE:34:AF:22:FB:57:59:51:0B:D3:5E:9B:A0:5B:D0:E6:07
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10EF
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/47YgzjSvIvtXWVEL016boFvQ5gc.roa
Signing time: Wed 01 Feb 2023 10:29:14 +0000
ROA not before: Wed 01 Feb 2023 10:29:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 175.183.138.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4335 (0x10ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:14 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E3B620CE34AF22FB5759510BD35E9BA05BD0E607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:ef:79:20:35:dd:8e:84:46:1e:b5:ca:a9:
37:5f:39:75:88:d2:24:5c:d4:f4:3f:7f:31:a3:7d:
9c:8d:ee:61:b9:07:0a:89:90:21:a5:f4:fe:63:a5:
44:f2:74:66:f2:0f:7e:a0:cc:6c:f8:eb:68:b1:54:
e6:f2:09:ea:7a:28:3e:aa:c2:8c:2f:69:55:98:91:
79:ad:61:1c:80:05:ab:71:91:0d:4f:b4:e2:55:af:
c5:96:ed:d5:cf:3f:de:d4:12:ff:0e:6d:6f:24:f0:
aa:16:b7:9d:f1:59:0b:fc:5e:51:b5:4d:57:ac:ae:
5e:a1:42:f7:fa:73:31:d5:a6:62:e0:9b:5c:ce:30:
5b:db:c9:c3:fe:1a:16:2b:0c:1f:56:13:1b:fa:ba:
69:81:ef:6e:3b:f9:9e:0f:b1:03:f0:5f:c2:e2:bc:
a6:e6:e8:42:45:b4:87:fb:5f:9f:34:60:9f:2f:74:
a7:7f:95:66:7a:d7:e6:1a:66:a6:6b:2b:fb:98:48:
63:fc:1b:5b:9e:17:d9:f3:4a:ea:73:c7:be:35:35:
2a:e3:06:7f:09:bc:83:cc:0e:56:aa:80:96:4a:7e:
71:7b:7c:e3:64:db:69:8c:61:f0:db:27:55:32:59:
b7:7d:57:f1:7d:f4:57:b2:46:65:95:c5:07:8d:67:
3f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B6:20:CE:34:AF:22:FB:57:59:51:0B:D3:5E:9B:A0:5B:D0:E6:07
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/47YgzjSvIvtXWVEL016boFvQ5gc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.138.0/23
Signature Algorithm: sha256WithRSAEncryption
84:51:e2:59:e4:42:0a:40:d7:d0:c5:36:4e:d8:d3:25:f0:b8:
5c:b9:ec:e1:f0:1c:32:ed:9f:4e:a2:21:56:c0:78:af:a8:84:
31:ed:85:45:66:50:18:bb:93:09:0f:0e:3f:cd:76:b3:b6:5d:
06:07:31:7a:70:11:61:4e:5b:0c:8e:54:fd:fe:03:c3:27:f6:
ed:9f:2b:b8:8c:0d:d5:61:06:ea:a4:2f:ba:d4:34:79:71:e0:
c3:46:e8:17:e0:0d:74:d8:a9:2a:45:83:50:44:69:0b:03:14:
e9:7b:c2:e3:00:f0:b1:4b:8f:4e:27:5c:8b:c5:78:48:9e:16:
c9:29:d7:5c:92:33:e2:72:4d:6b:dc:fa:0c:0a:fe:1c:45:f4:
56:cb:2c:53:9e:05:b1:49:21:32:da:72:a0:14:82:ee:29:69:
c3:ea:b6:bf:5b:1e:3d:f1:60:f8:8c:e8:78:fc:db:41:32:dd:
02:da:40:c6:a5:31:d7:3d:c4:8f:c7:bb:b4:a6:31:c1:a2:98:
cd:8b:6b:88:73:0b:87:b3:ea:33:7e:90:24:23:ee:98:28:5a:
a5:f3:40:70:bd:76:6b:47:ac:be:1f:a7:89:59:e7:f3:e8:a7:
a8:e8:c5:49:50:f9:4f:89:29:c7:ab:20:91:b5:54:c5:7d:18:
ce:fa:83:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:50 2023 by rpki-client on console-ams.rpki-client.org