Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/98VRVN5NJLBov82LXE0jvnBj4Uw.roa
File: 98VRVN5NJLBov82LXE0jvnBj4Uw.roa (raw, json)
Hash identifier: ztDs/XRrgJKl20CaBXCL+dcjN7YNo9jJjkYJXK/P064=
Subject key identifier: F7:C5:51:54:DE:4D:24:B0:68:BF:CD:8B:5C:4D:23:BE:70:63:E1:4C
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/98VRVN5NJLBov82LXE0jvnBj4Uw.roa
Signing time: Thu 15 Sep 2022 02:43:38 +0000
ROA not before: Thu 15 Sep 2022 02:43:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 175.183.0.0/17 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F7C55154DE4D24B068BFCD8B5C4D23BE7063E14C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:10:ed:99:35:72:3e:f5:e2:fc:62:fe:66:46:
89:af:32:7c:5d:75:7a:85:ea:8a:b4:d6:db:f9:e1:
5c:bb:d1:59:05:55:11:72:db:15:59:56:39:9e:27:
b8:af:58:ba:33:78:2a:17:d1:bd:92:c3:5c:1c:0e:
ad:5a:b9:43:a2:73:d9:f4:c2:0d:4f:04:bd:10:73:
a6:22:37:86:ca:5a:69:6a:87:94:10:0d:81:ac:66:
d5:83:4a:f0:37:8a:ed:bc:4e:78:d0:28:6d:cc:e0:
87:9f:c8:02:73:f3:51:a9:1a:93:af:a1:d6:10:bb:
6a:43:1e:91:a7:07:80:fb:58:2a:a6:b3:9b:91:03:
53:15:86:0e:24:91:48:6f:eb:ca:75:6d:6d:3e:e7:
8e:43:e3:7c:a6:24:08:5d:ce:de:ad:2b:00:ea:d2:
88:71:b2:a9:9e:e7:12:08:8c:d8:b9:77:5b:e2:2e:
e4:32:62:45:a9:5c:b5:0a:3a:f0:35:89:31:a8:5d:
7b:27:06:b7:18:20:65:fa:53:04:8e:a6:9c:0c:0f:
25:ed:cd:67:29:de:76:7e:8a:2b:38:d9:c0:6c:8f:
8e:da:19:49:eb:bd:64:5a:c1:eb:a9:dc:ff:c5:18:
8f:c3:eb:ea:31:fd:b8:1d:42:58:b1:2f:f5:c2:fd:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C5:51:54:DE:4D:24:B0:68:BF:CD:8B:5C:4D:23:BE:70:63:E1:4C
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/98VRVN5NJLBov82LXE0jvnBj4Uw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.0.0/17
Signature Algorithm: sha256WithRSAEncryption
7e:66:9b:eb:38:e1:80:b8:ad:20:76:7d:cc:88:bd:2a:7c:f2:
a9:8e:d5:c9:c2:fe:c4:b2:af:0e:f6:3b:3c:9a:64:06:70:69:
90:44:06:5c:35:29:09:7a:3e:36:c5:ab:f8:ba:ba:90:8f:41:
92:f5:65:17:1f:b0:a2:d5:ac:0a:1e:28:5b:90:4b:e0:bd:ac:
ea:54:44:6b:7d:05:f7:d8:6c:66:cb:ed:fd:0c:9b:e9:48:b1:
9a:93:71:9d:8c:e3:99:72:61:a9:52:4f:e4:12:f9:63:b5:9d:
c0:1f:1e:89:72:ae:78:18:ea:5d:0c:b3:a5:3a:bd:1c:2e:2b:
e6:c4:00:d1:73:4f:86:de:4d:99:6b:b9:24:19:18:52:db:b6:
e1:14:84:59:24:e8:b2:0a:28:88:14:a4:dd:ac:d6:db:01:0b:
41:5e:2b:32:49:92:12:a3:a6:f7:e1:16:52:c3:15:40:58:6b:
5e:35:e6:67:a5:83:f2:b7:18:c0:65:4c:6f:38:f6:72:38:7c:
07:49:37:9a:79:ba:aa:f8:0a:4c:7e:90:c3:76:15:b8:e8:ee:
e5:4c:c3:4a:88:f9:72:97:b0:79:55:24:bb:9e:59:72:01:a9:
f4:7d:e2:01:0c:ca:b7:81:ed:21:8d:c8:38:db:8c:5d:55:5b:
dc:0c:63:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org