Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/7pvb3QORgZNcdtbcpmXxfFWGVaQ.roa
File: 7pvb3QORgZNcdtbcpmXxfFWGVaQ.roa (raw, json)
Hash identifier: waL3NtPQatANom1K/MKRhj+I6+r56T0irjH0PXF8II8=
Subject key identifier: EE:9B:DB:DD:03:91:81:93:5C:76:D6:DC:A6:65:F1:7C:55:86:55:A4
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 110E
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7pvb3QORgZNcdtbcpmXxfFWGVaQ.roa
Signing time: Wed 01 Feb 2023 10:29:24 +0000
ROA not before: Wed 01 Feb 2023 10:29:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 2401:8000::/26 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4366 (0x110e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:24 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EE9BDBDD039181935C76D6DCA665F17C558655A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:67:df:7e:e9:a5:45:a0:77:fd:c4:ac:26:94:
b0:23:c3:d1:b2:fb:ea:2e:2b:56:71:50:a0:4b:2b:
eb:e6:9a:9a:56:af:de:fa:2e:a2:50:57:b5:a2:64:
58:98:d0:e6:6d:77:a4:98:dc:97:96:69:3f:7c:6f:
6d:f5:8e:de:bf:31:7d:8f:c3:1e:16:f6:6c:c9:36:
21:5d:4f:c5:f7:d3:df:03:01:ce:88:a7:4f:4c:12:
ae:d7:d7:d0:8e:09:39:00:0d:ef:5a:93:15:f8:62:
fc:ca:6e:7c:0f:cc:65:bd:9b:27:7d:4f:28:1e:6e:
ed:a0:60:74:29:c7:89:53:ef:b8:0b:fb:6d:7d:b6:
78:81:bb:e4:36:b3:6e:2d:57:d6:90:69:14:05:36:
4f:d8:ef:4b:3c:0d:72:74:48:2c:1a:88:40:99:fc:
ab:d3:cd:42:f5:1e:86:8c:ab:ba:33:39:85:fd:d7:
59:7a:97:c5:40:4f:5c:d7:b7:96:69:f3:a5:88:28:
fd:a2:dc:13:33:25:6e:bc:65:96:a7:73:70:3c:b7:
fd:ef:b2:d5:b1:51:ca:aa:b4:86:6a:98:bd:a5:cc:
4f:6d:c3:18:d7:62:40:86:b7:2e:89:17:25:8a:a8:
38:0b:ec:a1:23:7f:3f:ea:6f:c7:45:34:2e:48:b5:
29:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9B:DB:DD:03:91:81:93:5C:76:D6:DC:A6:65:F1:7C:55:86:55:A4
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7pvb3QORgZNcdtbcpmXxfFWGVaQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:8000::/26
Signature Algorithm: sha256WithRSAEncryption
3c:71:4a:68:98:b4:31:54:fa:f9:59:43:5e:df:f5:1e:14:ec:
9c:00:df:61:e5:0a:b5:c6:b1:b1:28:5a:6a:26:57:6b:6b:bb:
56:6a:6e:51:c0:fa:34:ae:a3:4e:7a:67:70:82:48:0c:e0:63:
d2:51:8b:b4:13:9a:75:30:b0:b8:f1:81:75:67:0c:f3:16:2b:
58:49:88:8b:d5:01:fb:29:33:95:fe:bb:90:66:dc:b2:82:c8:
bf:f9:b8:aa:7d:34:ba:1f:dc:26:41:24:7e:55:3a:35:73:98:
47:ae:b5:8f:61:f1:5b:5a:3c:7f:a7:72:4d:e6:4b:f9:39:6c:
d2:31:31:b9:c0:de:ec:80:47:e6:61:d6:05:38:76:1f:01:1c:
07:8a:7c:2a:c1:23:45:89:5f:33:03:13:32:1f:07:9b:64:4b:
df:2a:9e:5a:df:56:95:7e:94:bc:11:07:df:ab:bd:23:77:20:
7a:67:58:36:ce:1f:c4:c6:85:6c:f1:33:8b:11:46:84:78:6e:
ed:01:0e:9e:67:05:92:1c:25:97:83:f6:ef:f7:e0:1a:62:f0:
8a:8b:d3:af:5e:62:e1:e8:83:50:03:30:ab:69:4d:69:82:7c:
a4:9d:4b:7e:38:f5:3a:2b:28:40:2d:46:b7:1f:10:b3:7f:42:
03:b7:96:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:50 2023 by rpki-client on console-ams.rpki-client.org