Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/8nAbNhizvLCNTfGkrt3Y_Ze9kd8.roa
File: 8nAbNhizvLCNTfGkrt3Y_Ze9kd8.roa (raw, json)
Hash identifier: r6aYK36wab03UlTYe+tsk0x8mJyAFOcYE3z/PeaqLVQ=
Subject key identifier: F2:70:1B:36:18:B3:BC:B0:8D:4D:F1:A4:AE:DD:D8:FD:97:BD:91:DF
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1093
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8nAbNhizvLCNTfGkrt3Y_Ze9kd8.roa
Signing time: Wed 01 Feb 2023 10:28:44 +0000
ROA not before: Wed 01 Feb 2023 10:28:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 175.183.254.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4243 (0x1093)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:44 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F2701B3618B3BCB08D4DF1A4AEDDD8FD97BD91DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5f:67:ba:b1:bf:2c:fb:69:44:3c:47:99:b1:
25:49:e3:8a:9f:3d:77:48:ab:a2:7a:4c:30:ba:16:
b6:f8:64:33:85:c5:af:03:8a:1d:34:62:19:a3:0a:
09:b7:34:67:c6:97:47:94:12:33:b4:2b:9c:01:9d:
49:14:76:8e:ff:77:d2:08:2b:6b:c0:65:37:0b:14:
eb:3c:08:39:78:dc:a0:d8:35:64:8c:78:a4:f8:32:
5f:bf:bc:bd:51:e6:af:c2:9d:34:e6:ce:4e:cb:bf:
eb:89:c0:a9:60:0d:bb:8b:9b:a1:32:bf:9a:8d:71:
f4:a7:2f:cb:97:1e:5b:ab:96:d9:f1:3d:4f:62:5a:
9d:5a:5c:39:e4:80:6d:cd:ac:df:f8:75:d5:4c:d1:
69:06:3a:90:0e:cb:16:7b:fd:be:0c:60:e4:b6:ee:
71:70:df:0a:0a:99:c5:78:7d:cf:d2:22:1c:bd:c7:
d2:34:0d:16:9e:01:c4:20:13:48:0b:28:d8:7a:7d:
1b:fd:79:87:2f:e4:70:23:91:42:31:d3:73:63:9b:
a9:b4:6d:4b:6c:cd:2f:17:6b:58:1c:bf:a8:d1:ad:
16:90:49:0b:b7:1f:b5:49:d3:7e:86:93:8a:6d:96:
b0:dc:4d:18:aa:e8:48:a4:5c:b2:e6:d0:fc:bf:6f:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:70:1B:36:18:B3:BC:B0:8D:4D:F1:A4:AE:DD:D8:FD:97:BD:91:DF
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8nAbNhizvLCNTfGkrt3Y_Ze9kd8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.254.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:70:59:c4:94:4f:90:4b:2e:15:d4:e2:c2:25:25:00:d5:b9:
ad:d9:b8:2e:d7:18:7c:0e:43:90:c4:31:12:df:0c:21:28:0e:
29:0b:6c:e7:c0:05:c8:dc:83:69:d1:5d:4e:66:b8:0b:6b:d9:
6f:43:03:fc:8c:a6:4d:bb:69:79:88:a7:a1:bf:24:f4:eb:c3:
ec:b3:35:d9:27:f1:fc:93:c7:9c:2b:97:43:60:23:83:c4:99:
de:38:b1:15:4d:d6:26:fa:49:a9:ac:26:22:26:3c:82:5f:9b:
4f:b0:a1:5e:77:8f:cf:62:30:2f:c6:8a:aa:2d:99:b1:b7:aa:
81:e8:31:45:f5:43:30:48:59:2b:47:2b:15:28:da:53:99:a1:
48:2f:9a:a3:49:a2:ba:54:20:b7:64:9a:09:bc:d0:3f:f6:fa:
af:e3:77:d9:40:64:40:c7:34:4a:6e:a4:a4:e7:50:e9:06:a9:
11:b9:b7:00:3b:72:34:e7:50:b6:9e:75:9f:af:3c:1b:df:b2:
c0:b6:4f:06:cf:f6:f3:1d:a6:2c:5b:80:83:6e:01:ff:47:46:
ae:84:c8:af:de:06:30:b0:f2:b9:25:33:4b:c7:15:67:32:43:
56:a4:ec:f0:02:4c:d4:eb:90:72:27:9a:fe:3a:c8:be:2d:00:
55:3a:08:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:50 2023 by rpki-client on console-ams.rpki-client.org