Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/A_q-pwSbDPb7fi9az3Z0V2hKLLI.roa
File: A_q-pwSbDPb7fi9az3Z0V2hKLLI.roa (raw, json)
Hash identifier: 0fMEyNHF0gmqOa8WuI/dGIvKkBwQYHh8zOTdqdDwwqs=
Subject key identifier: 03:FA:BE:A7:04:9B:0C:F6:FB:7E:2F:5A:CF:76:74:57:68:4A:2C:B2
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/A_q-pwSbDPb7fi9az3Z0V2hKLLI.roa
Signing time: Thu 15 Sep 2022 02:43:12 +0000
ROA not before: Thu 15 Sep 2022 02:43:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 210.244.88.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=03FABEA7049B0CF6FB7E2F5ACF767457684A2CB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:f5:57:0c:8f:74:bf:b2:fd:ad:22:b2:4e:
00:9b:b1:a5:ed:6e:d9:5a:b4:a2:7e:73:09:d1:28:
e6:b0:51:4f:f3:76:56:9e:f2:28:33:7d:19:e3:d9:
a0:db:09:78:fb:d0:39:3a:fa:7c:a8:d5:c7:28:13:
f4:e5:8c:7c:f7:1a:7a:ca:e2:87:52:3a:ef:ab:ba:
db:c4:18:a3:7b:bb:5f:30:0e:8d:f1:7d:3a:7f:34:
32:8f:92:c0:2c:55:a1:41:2c:bf:f1:7b:34:71:aa:
d1:b6:5e:aa:f3:b5:91:b1:a9:95:78:d7:e8:5b:4e:
75:7f:da:12:c2:ce:4c:9a:aa:2f:0e:21:dd:9a:37:
6b:7a:cb:93:42:8b:0f:b9:82:f0:7d:f5:f9:2a:aa:
c8:2c:a1:f3:2e:56:83:0a:d6:87:3f:bf:f4:d7:e9:
b3:bf:b2:c0:5a:3e:27:50:e0:7a:43:b8:49:1e:ba:
d6:d4:0f:7d:ca:6d:77:d2:5e:e8:51:41:b4:ae:ed:
eb:90:7c:81:98:a3:0e:10:92:8f:fe:1f:35:94:40:
e8:09:84:91:87:1c:09:28:e5:0c:bc:da:b8:9b:d7:
ca:d7:30:bd:06:8e:56:59:53:be:47:05:a2:c9:c0:
c0:59:4f:2b:71:10:72:af:45:10:74:68:62:97:c6:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FA:BE:A7:04:9B:0C:F6:FB:7E:2F:5A:CF:76:74:57:68:4A:2C:B2
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/A_q-pwSbDPb7fi9az3Z0V2hKLLI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.244.88.0/22
Signature Algorithm: sha256WithRSAEncryption
38:40:23:de:3f:c2:93:d4:91:e7:ec:97:26:d4:71:95:38:96:
bd:38:9e:a1:99:85:2b:c7:c9:42:13:6e:77:e3:32:fc:3b:1f:
df:88:ac:6f:9c:f6:ed:89:7f:9e:77:8c:b5:95:02:2f:f0:01:
e7:49:df:ae:67:76:fb:65:ed:82:68:75:f9:2c:24:cc:76:ca:
0f:0f:d9:22:96:d1:81:21:92:85:5e:c3:11:10:52:3c:d9:2f:
45:b9:85:fd:8b:ad:1f:72:56:77:66:3e:e4:f6:17:c3:34:9d:
05:15:56:c1:99:b5:69:1b:80:5f:b6:1c:ed:f7:4f:4b:0c:05:
60:50:2d:ff:57:f6:f4:18:b0:27:a5:d1:42:89:37:f1:88:a2:
66:96:6a:22:0d:3f:91:89:60:9e:85:98:53:6d:64:8b:95:7a:
5b:37:8c:32:da:0c:3a:dd:c0:3d:67:55:24:6f:48:ee:4d:46:
38:57:83:dc:c8:c7:5e:0b:04:13:74:0d:ff:61:d9:6d:bb:71:
c2:8b:d8:6a:c6:bd:b1:0a:90:10:61:c4:50:4c:ea:7b:50:11:
a2:68:04:f9:40:e7:7c:05:a7:1e:0f:12:a6:32:d4:fa:24:10:
8a:cd:dc:ea:b1:cb:0b:9a:5f:d6:cd:18:4e:c0:64:d2:e1:4e:
b6:05:7d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-fra.rpki-client.org