Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/8JEaFBgHFRc0MjXdR8nRCNvrKf8.roa
File: 8JEaFBgHFRc0MjXdR8nRCNvrKf8.roa (raw, json)
Hash identifier: Htskw/0okH2HlVBPeFPwIN4Gfxa/Uj4J0xvto6n6uRY=
Subject key identifier: F0:91:1A:14:18:07:15:17:34:32:35:DD:47:C9:D1:08:DB:EB:29:FF
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1057
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8JEaFBgHFRc0MjXdR8nRCNvrKf8.roa
Signing time: Wed 01 Feb 2023 10:28:26 +0000
ROA not before: Wed 01 Feb 2023 10:28:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 123.205.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4183 (0x1057)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:26 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F0911A1418071517343235DD47C9D108DBEB29FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a0:f3:c7:cf:94:51:82:92:7d:f7:ba:27:13:
62:43:51:73:88:1f:50:bb:56:0b:d7:be:f8:59:f4:
71:4f:af:e4:ba:26:e4:26:36:d8:a8:fc:cc:fd:17:
e0:a2:56:30:29:b0:9e:38:89:52:09:7c:76:23:e4:
70:c0:86:29:fb:89:a9:5c:fd:8b:a3:32:af:ca:cf:
d6:ad:a2:41:07:22:9a:ac:98:5c:1c:eb:41:ab:b1:
d6:c7:d5:6e:5a:06:97:fa:02:00:a8:06:25:12:6c:
31:fc:a7:e2:a9:b5:a6:95:ac:a2:a7:8c:a2:56:6b:
58:6a:a6:f1:c1:9e:08:b5:39:bc:e9:37:d9:9d:d0:
72:33:6f:70:0b:00:c5:f4:29:bd:1c:b4:83:b6:17:
a5:76:65:52:52:98:0b:fd:3f:63:6b:3b:9a:99:e9:
50:d9:33:30:19:de:40:a0:36:c0:bf:19:b4:43:63:
79:ef:38:ba:3e:7a:18:1f:67:8f:40:49:58:df:de:
33:e8:2d:07:f2:8f:82:b8:93:88:6d:e3:21:cf:7f:
f3:3b:e5:df:b3:4d:4d:b2:d5:2f:82:c6:e3:35:03:
e1:2c:cb:1f:72:03:be:db:90:9d:60:a7:15:83:50:
1a:9e:d6:48:07:99:e8:ae:d5:1c:ab:ca:be:24:cf:
ae:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:91:1A:14:18:07:15:17:34:32:35:DD:47:C9:D1:08:DB:EB:29:FF
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8JEaFBgHFRc0MjXdR8nRCNvrKf8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.39.0/24
Signature Algorithm: sha256WithRSAEncryption
98:18:44:79:d4:ad:97:16:5f:c1:7a:2b:ce:4e:81:66:ad:40:
06:96:eb:8d:6d:25:56:10:4f:43:d1:3a:ee:e4:e2:6b:57:42:
a1:de:a1:51:f5:ed:6c:35:8b:95:d5:54:e3:3a:f4:1f:bf:b5:
77:63:22:ea:b4:ae:58:16:5c:87:5a:af:0d:d9:b3:e6:81:21:
f9:ea:51:62:13:6e:3f:36:7a:59:fd:62:00:e1:fb:50:e3:cc:
44:28:b6:14:a5:a7:bf:3d:d6:15:20:dc:1f:4d:0b:ae:22:35:
93:1e:40:90:29:c5:51:1d:c2:e4:7f:8e:b9:a0:0d:37:9e:58:
18:f7:a5:1f:a4:59:c7:83:98:0a:08:45:d4:e2:7e:89:72:81:
25:11:47:01:fb:2d:27:88:55:c4:49:68:59:61:78:a7:2c:7b:
1f:df:f7:a1:32:ec:75:a6:15:6e:dd:24:c6:a8:ad:a8:b9:ed:
1f:64:96:e7:3b:fd:57:a4:a5:37:2f:58:d0:fc:eb:ee:00:ef:
01:9a:25:54:3b:17:16:8d:0b:4a:0c:78:21:f4:6c:ad:c1:d5:
21:39:29:b0:9c:96:93:26:4a:01:61:13:58:4e:f6:f7:9d:50:
f4:ad:1b:6a:64:3b:a4:ac:0d:c8:77:c9:5d:4d:3e:a9:22:c1:
c6:87:b5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:15 2023 by rpki-client on console-fra.rpki-client.org