Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/61XLYAlNv-Ctif3l9pkqrBgEkO4.roa
File: 61XLYAlNv-Ctif3l9pkqrBgEkO4.roa (raw, json)
Hash identifier: DcJc2bOESopHU+cLrfzIh2V0L4/hnQ3WkgujF8vI8OQ=
Subject key identifier: EB:55:CB:60:09:4D:BF:E0:AD:89:FD:E5:F6:99:2A:AC:18:04:90:EE
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/61XLYAlNv-Ctif3l9pkqrBgEkO4.roa
Signing time: Thu 15 Sep 2022 02:43:03 +0000
ROA not before: Thu 15 Sep 2022 02:43:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 122.146.0.0/15 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EB55CB60094DBFE0AD89FDE5F6992AAC180490EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:76:62:e8:8b:1a:e0:d7:f7:2a:45:f8:66:49:
64:ca:6b:11:10:a7:1f:8c:93:e7:af:75:a6:c1:14:
2c:08:ab:88:bb:cc:d7:b9:9c:c8:21:b2:da:75:54:
02:fa:dc:ae:69:26:13:21:aa:2b:f3:c9:ba:cd:19:
1b:78:d8:fc:30:a0:6f:99:db:ce:19:60:1c:dc:52:
87:1e:10:80:58:30:de:c7:2f:d2:77:88:f8:60:b4:
c7:fb:fc:34:6a:f3:7c:13:1b:2b:a7:85:f6:44:b0:
1f:a4:69:d0:75:ec:62:03:ae:8f:14:88:61:8c:72:
34:bf:f7:62:39:95:e8:17:40:47:32:fe:3b:56:cf:
c4:11:93:da:20:bb:d9:60:4a:42:fd:af:4f:a7:bd:
59:5c:3d:31:3f:0a:6c:82:c8:16:37:c5:d9:d4:31:
c6:1f:51:94:e5:c2:70:6b:07:66:b6:0c:42:a0:6c:
d4:cd:93:b0:a9:0a:d8:db:98:36:0e:cb:0d:3e:fe:
10:36:77:53:98:11:18:49:18:52:9f:78:96:e8:e3:
0d:08:88:19:63:c3:63:5b:d4:24:5f:61:17:60:12:
41:79:8b:0c:64:d6:e8:4e:5a:6b:cb:eb:9b:1a:3b:
e4:69:9b:70:92:8b:c5:82:2f:62:18:5c:77:98:45:
6d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:55:CB:60:09:4D:BF:E0:AD:89:FD:E5:F6:99:2A:AC:18:04:90:EE
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/61XLYAlNv-Ctif3l9pkqrBgEkO4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.0.0/15
Signature Algorithm: sha256WithRSAEncryption
43:0b:04:9f:11:a4:6f:15:fd:1f:ba:31:af:64:50:6d:6a:f4:
d9:af:9c:54:66:a5:12:f9:66:7d:75:44:8a:91:6f:89:2d:29:
15:f2:13:9b:be:ab:9a:78:52:ef:43:bd:4c:d3:cf:ac:46:e6:
94:9b:bd:a9:f7:67:4d:ae:24:82:02:14:d7:8c:01:35:3b:22:
63:6b:6e:66:01:5e:1f:57:e6:c6:36:79:79:2b:2f:99:02:48:
ed:f6:c2:99:3e:2c:36:68:41:ea:05:d9:bb:e5:81:28:f5:1d:
e1:e0:ca:22:fd:b3:f3:b8:0f:9d:ae:c5:b9:cb:1a:62:04:c6:
15:19:63:6f:6a:1d:53:1f:68:2a:4a:a3:cd:7f:7d:b0:77:a4:
d3:b4:bd:6a:20:e2:1b:0f:ce:21:14:55:af:4e:73:06:8f:a3:
07:1c:05:20:55:ae:62:ba:f9:6c:2a:d4:02:43:87:89:b7:b2:
c6:22:36:f2:ce:ff:1a:2b:71:63:5b:89:c1:fd:d0:b0:a3:65:
e3:58:3b:e4:ca:7a:13:81:de:de:82:e5:2a:33:1d:f1:f6:67:
09:bb:a3:c7:45:f9:55:bb:db:b2:d7:23:fc:02:3e:dc:f5:bc:
38:79:f6:aa:b0:aa:0d:30:bb:4b:5c:f9:27:50:d1:f3:45:e2:
d4:2e:39:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org