Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/8eFVT3lsahq-h3K8jlIGqTwvgtc.roa
File: 8eFVT3lsahq-h3K8jlIGqTwvgtc.roa (raw, json)
Hash identifier: AelHIsS5AeTRyvrPqRx3p1O3DYyion2yHDWEChcSw3I=
Subject key identifier: F1:E1:55:4F:79:6C:6A:1A:BE:87:72:BC:8E:52:06:A9:3C:2F:82:D7
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8eFVT3lsahq-h3K8jlIGqTwvgtc.roa
Signing time: Thu 15 Sep 2022 02:42:50 +0000
ROA not before: Thu 15 Sep 2022 02:42:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 175.183.80.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F1E1554F796C6A1ABE8772BC8E5206A93C2F82D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:5a:c2:7f:e6:f3:1b:e4:78:07:1b:e7:29:
c0:cd:cc:fe:a5:de:56:c9:64:97:2a:c4:e2:54:db:
d3:54:4c:48:2e:e4:e5:d2:a3:f1:6a:6a:a5:db:f6:
60:a3:d9:29:ae:60:64:53:44:27:44:3e:4f:ef:5b:
12:47:11:dd:ef:2e:87:5e:cf:a2:06:6a:51:e4:69:
65:6a:94:ef:3d:00:93:0c:b1:c4:e2:d5:e8:b4:ef:
c3:88:0d:3a:b6:7b:4a:9d:27:7a:0d:c4:63:da:19:
ad:d1:59:33:94:fd:4d:36:38:a9:35:6c:8b:a3:db:
48:76:d0:3c:10:86:e8:58:71:29:dc:17:e6:ad:af:
5c:15:01:75:5e:ae:3f:12:e9:b2:b1:61:af:9a:5f:
71:7a:0b:09:28:4a:3d:af:b2:24:96:05:f1:6f:58:
9a:a5:0b:a5:5a:20:93:9b:2c:83:ff:98:73:3e:51:
ed:00:43:b4:41:5c:d4:29:55:ac:1c:5b:f7:21:37:
87:62:4b:e7:1d:17:a2:f9:a2:ef:e2:56:e4:33:30:
12:e9:5e:cb:09:c2:4a:fc:8e:83:63:cb:46:b5:af:
90:9a:f7:a3:5e:7f:16:56:bb:cd:fd:37:36:af:fb:
1f:8f:87:3e:19:a9:0e:65:76:b7:80:c7:45:5f:eb:
52:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E1:55:4F:79:6C:6A:1A:BE:87:72:BC:8E:52:06:A9:3C:2F:82:D7
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8eFVT3lsahq-h3K8jlIGqTwvgtc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.80.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:20:cc:9b:e8:e3:b0:86:ef:38:1a:f4:a6:01:df:cb:59:4c:
00:6b:06:5e:bf:fb:c4:ee:cd:c2:de:37:06:6e:47:23:12:ef:
85:99:cd:a4:ff:bd:50:d9:09:83:c5:e4:92:91:10:88:7a:97:
e9:36:bd:47:02:36:3f:b3:92:c7:8b:b8:9e:c7:94:49:bb:2a:
93:47:5a:3c:3a:3e:e7:b5:2e:7c:3f:81:02:1b:c2:dc:c5:53:
ff:ae:2d:9a:e9:fb:9d:1f:bf:b2:20:72:b6:50:ee:50:a7:0b:
e8:c9:6a:fe:b5:17:d7:0e:75:73:f6:3c:1a:ce:0f:8a:c2:26:
0f:09:4a:39:8e:af:4b:e4:d6:cf:90:02:68:53:a8:fb:3b:39:
05:92:66:82:6c:44:fa:43:bc:73:e9:de:81:aa:51:b2:25:14:
4a:85:47:a1:99:6a:ae:9e:63:81:be:41:87:24:64:91:4c:5c:
cb:88:77:60:89:f5:1d:88:fd:ee:7f:96:7f:66:83:25:52:e3:
56:41:62:d8:c9:7d:dd:fc:c7:e2:7e:91:15:0a:74:79:27:a9:
1d:d9:c3:da:e0:3e:96:b6:82:7b:62:8b:93:05:51:fc:e1:cb:
7a:8c:f4:3c:f3:19:55:86:73:ab:c6:62:2d:b0:0d:9d:f6:1e:
e6:af:82:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org