Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/AssdxYxLGiumFC6F2EfyTMhAxyI.roa
File: AssdxYxLGiumFC6F2EfyTMhAxyI.roa (raw, json)
Hash identifier: 3RpgPhCoPGEGHAYzAnCHKGfQb86FduU/TOwuDxbIWW0=
Subject key identifier: 02:CB:1D:C5:8C:4B:1A:2B:A6:14:2E:85:D8:47:F2:4C:C8:40:C7:22
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10A5
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/AssdxYxLGiumFC6F2EfyTMhAxyI.roa
Signing time: Wed 01 Feb 2023 10:28:50 +0000
ROA not before: Wed 01 Feb 2023 10:28:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 211.78.160.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4261 (0x10a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:50 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=02CB1DC58C4B1A2BA6142E85D847F24CC840C722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d4:ff:f1:d9:a3:6b:fc:28:28:d6:8c:58:df:
dc:93:89:b0:9e:f2:e9:67:28:b8:04:dc:2d:b2:32:
e8:f4:7f:ee:2d:61:a7:07:eb:01:3b:61:01:c4:ba:
b7:ac:f1:91:1e:7c:c0:14:25:cf:24:9c:dd:d5:9d:
52:c4:9c:b3:68:6c:68:07:23:a5:da:d9:e1:0b:54:
d0:f1:cd:85:f7:37:69:27:76:77:0e:e5:1d:87:59:
12:0b:e5:44:1a:95:4f:17:4a:2e:12:d6:e4:0e:0c:
4b:38:36:70:5f:8a:8e:18:3a:58:db:d8:d5:36:ab:
b7:ba:c2:a7:43:5c:d1:c0:c6:37:2a:ed:dd:c9:c5:
4a:07:cd:c9:fe:f4:d6:4b:5e:2c:07:eb:ea:53:33:
61:55:61:6a:ec:77:4c:31:f6:0e:96:f5:48:1b:46:
31:1c:51:01:69:40:57:f1:0b:cd:8b:04:2f:31:fe:
ad:37:c1:ab:d1:40:8e:a2:17:fa:b4:9c:2c:db:e6:
ab:a8:1b:6e:a5:94:ee:4b:08:c6:09:da:fe:be:2b:
0d:0d:63:9b:03:42:a9:68:98:2d:57:62:37:f5:21:
47:50:6d:2d:e4:1c:50:44:92:ed:09:9a:85:e6:21:
29:af:02:b7:1d:5d:32:94:d5:e0:9c:ac:a0:83:eb:
25:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CB:1D:C5:8C:4B:1A:2B:A6:14:2E:85:D8:47:F2:4C:C8:40:C7:22
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/AssdxYxLGiumFC6F2EfyTMhAxyI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.160.0/19
Signature Algorithm: sha256WithRSAEncryption
2b:4b:e2:27:62:95:f2:9d:a7:f3:98:bf:90:15:c2:bb:60:47:
1c:6f:0e:b5:73:9d:ea:5d:6e:71:f1:fd:35:73:ab:27:4f:cb:
09:36:ce:39:3f:36:de:6c:20:c8:27:72:a7:ca:ca:65:ba:29:
f8:85:1c:00:fa:51:bf:c9:50:b8:05:56:da:a7:4b:a4:36:69:
f0:5e:a8:43:d3:05:d2:b9:63:f8:2f:d7:3b:b4:96:62:61:9e:
93:7b:9a:04:1b:9d:8d:7d:de:7c:1f:1c:60:df:49:7b:8a:c5:
9c:5b:cb:6f:7a:78:69:d4:99:b1:64:74:b3:b8:a6:a1:fc:82:
08:69:cb:d9:0d:3b:17:46:bc:23:2c:52:c2:26:1f:2c:b9:95:
79:04:74:2e:3d:00:60:fe:60:b9:4f:12:02:0c:3b:a5:7a:f5:
93:79:64:ee:1c:30:c0:cd:0c:34:3e:14:da:27:2a:94:29:b5:
5e:6d:63:4e:eb:40:0c:bd:0c:4a:5e:9d:2c:27:cd:6e:ee:6f:
00:b4:1e:30:e7:8a:cd:06:6a:65:50:2d:44:3f:aa:25:a8:c1:
90:07:eb:0d:6b:0e:6c:9c:c3:78:c9:c0:5a:99:57:78:fb:d7:
52:ef:dc:6b:4f:f3:66:74:cd:c0:3d:5a:1b:ef:3e:37:4b:05:
e7:e6:15:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:50 2023 by rpki-client on console-ams.rpki-client.org