Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/9qyMj1LYK4fniDKiDQr_XiTBeDs.roa
File: 9qyMj1LYK4fniDKiDQr_XiTBeDs.roa (raw, json)
Hash identifier: f2LPEJbR4B03tT/eIkfuEl47a8dLyoyg+1UKDfzpYiw=
Subject key identifier: F6:AC:8C:8F:52:D8:2B:87:E7:88:32:A2:0D:0A:FF:5E:24:C1:78:3B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 102F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9qyMj1LYK4fniDKiDQr_XiTBeDs.roa
Signing time: Wed 01 Feb 2023 10:28:15 +0000
ROA not before: Wed 01 Feb 2023 10:28:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131586
IP address blocks: 175.183.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4143 (0x102f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:15 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F6AC8C8F52D82B87E78832A20D0AFF5E24C1783B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:df:db:eb:ff:28:16:d9:34:49:cc:0d:94:7e:
22:d8:92:6a:40:f3:92:db:58:5b:fc:fb:6f:ee:0b:
0e:4e:6f:23:cf:c5:79:0f:ae:3a:ca:cf:aa:bc:ea:
bd:8d:fd:27:55:97:6e:a4:85:11:9f:45:93:e1:38:
a9:e8:d2:f8:4e:e0:dc:a7:b5:8a:80:cc:34:91:bc:
0b:fe:0f:a5:6f:da:39:c8:30:d9:21:44:32:57:15:
49:3f:27:f1:c1:c0:f4:bb:17:db:a0:ef:7a:21:94:
2d:84:26:b4:4c:d9:3a:96:d0:2a:ed:0b:14:44:47:
5d:47:02:69:93:ac:4b:f9:94:2a:d0:0e:f3:45:4e:
00:4a:23:40:71:7d:e9:a4:a4:d0:05:7c:5f:20:d6:
d1:e1:f7:8c:0b:6f:a6:f5:e0:2a:f5:cf:20:b4:ad:
41:c3:c9:1b:73:17:98:b6:db:a4:40:5d:54:66:ce:
d2:b4:6b:a9:fe:cc:9c:56:44:1d:c4:89:65:19:f4:
01:9e:7f:6b:12:b1:f5:f0:0d:85:e7:7f:ac:f7:b0:
ab:76:7e:63:ad:65:f1:fb:ba:15:ac:39:86:36:33:
82:c1:06:15:3d:11:74:d3:6b:a7:6e:a5:58:af:fa:
e3:25:6d:68:8c:bc:8a:19:82:4f:3c:9c:a2:a5:af:
c8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AC:8C:8F:52:D8:2B:87:E7:88:32:A2:0D:0A:FF:5E:24:C1:78:3B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9qyMj1LYK4fniDKiDQr_XiTBeDs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.137.0/24
Signature Algorithm: sha256WithRSAEncryption
76:2b:8b:c0:7d:cb:96:d6:4f:b5:50:32:a8:aa:e7:eb:bb:f9:
81:11:8e:e8:9e:67:d0:61:7c:ac:17:73:c2:d9:47:21:75:6c:
9e:e4:2b:35:7c:1b:d8:f6:a2:d6:aa:70:e8:16:1b:88:f5:2a:
9f:5b:ea:ec:d8:ae:f7:ec:c8:dc:89:c3:a6:e9:5f:f5:73:b9:
af:01:73:75:12:26:56:a3:26:51:bd:af:1a:8c:a0:4a:50:a1:
59:5a:72:e7:6b:e3:e0:e8:c6:df:74:ce:ce:1c:2d:53:16:63:
56:81:ce:94:46:2e:48:b9:34:8a:83:6d:f3:72:d0:3e:a9:76:
a0:cf:ef:78:32:e5:e6:6a:6e:37:83:22:83:c1:54:d2:3e:23:
96:e0:d7:2f:30:a2:15:f6:f2:a2:e6:5e:40:9e:92:72:a4:bb:
e9:f9:42:40:a7:e7:1f:5f:be:ba:13:58:5e:f4:d1:82:db:3f:
21:b1:75:e3:1c:e8:00:15:70:8b:c0:18:dd:6d:0d:7f:43:c6:
07:05:a8:cc:46:66:0c:0f:dc:8a:94:3e:77:a9:95:72:7a:fb:
e9:b1:35:09:08:79:5f:9e:dd:39:b5:a6:9d:bf:cc:f2:9c:a8:
26:ba:45:b5:f2:f5:f5:82:2c:ab:9a:7e:d6:3a:3a:cf:3d:55:
d5:ff:57:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:15 2023 by rpki-client on console-fra.rpki-client.org