Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/BGriLtP-pcC8PMBYJArVjDbeT7k.roa
File: BGriLtP-pcC8PMBYJArVjDbeT7k.roa (raw, json)
Hash identifier: 3/ofm4iq01+95gnrr4k6nBU0Y77OLjRsqVtVLoIJRfU=
Subject key identifier: 04:6A:E2:2E:D3:FE:A5:C0:BC:3C:C0:58:24:0A:D5:8C:36:DE:4F:B9
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0C6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BGriLtP-pcC8PMBYJArVjDbeT7k.roa
Signing time: Thu 15 Sep 2022 02:43:51 +0000
ROA not before: Thu 15 Sep 2022 02:43:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 192.72.128.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3183 (0xc6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 15 02:43:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=046AE22ED3FEA5C0BC3CC058240AD58C36DE4FB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a1:79:35:63:b6:3c:c7:7e:fd:aa:cf:1b:a2:
00:d2:7e:98:44:f6:df:55:fa:66:89:08:ab:17:bb:
9b:4d:fc:8c:14:3f:82:1c:15:f2:b0:4d:46:1c:a3:
8b:4b:5e:4b:c0:61:9a:42:31:15:76:71:f5:63:18:
47:16:ba:ba:24:7f:95:54:66:89:59:68:87:2b:36:
27:75:0f:6d:95:f4:1b:5f:d0:09:63:5d:01:c8:39:
1a:16:ce:69:5f:15:9a:40:74:33:ab:0f:7c:14:d2:
e5:24:d2:09:f9:9d:c6:cc:d1:d7:46:06:d8:7b:fe:
36:70:52:9f:83:5f:5b:84:bc:dc:24:91:df:bf:e7:
1e:15:98:8b:75:0b:e3:bf:b5:3e:5c:f0:e4:22:a5:
d9:65:e8:cc:2d:38:3f:89:8f:2e:4a:0d:b5:bc:c7:
7c:e8:37:80:5c:f0:07:1a:48:f0:2c:03:3f:3f:f4:
94:f8:8a:a3:8d:d7:70:6f:c2:b0:ea:b8:31:c7:58:
79:7f:aa:e5:73:a6:0a:89:57:99:5e:44:51:26:ce:
8d:8e:8a:c5:25:2f:f1:c3:0d:6d:54:9d:2f:de:76:
7b:89:ef:0b:a5:c4:51:70:9e:a0:2f:38:de:09:63:
46:34:80:e5:b3:4c:00:73:13:38:75:1a:b4:8c:fe:
17:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6A:E2:2E:D3:FE:A5:C0:BC:3C:C0:58:24:0A:D5:8C:36:DE:4F:B9
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BGriLtP-pcC8PMBYJArVjDbeT7k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.128.0/18
Signature Algorithm: sha256WithRSAEncryption
a2:3d:38:94:17:dd:18:a4:cf:f7:7a:33:db:ac:21:84:ed:7f:
61:7c:47:c1:8e:56:c5:e6:d4:30:0f:9d:34:78:46:2e:5e:68:
d1:a2:0f:1b:8b:86:aa:9f:3e:a1:7a:10:32:3a:fb:a0:7b:ef:
76:73:f0:fc:2a:0a:8b:82:a5:8f:ef:b4:4c:9e:fd:75:11:de:
af:0d:fc:15:0b:c8:75:f1:a0:8a:a5:e4:31:54:b3:89:20:d9:
f0:8b:33:00:c7:e7:6e:70:a4:cd:62:29:ce:0f:f6:ce:41:e7:
30:ec:86:6b:a4:6f:79:2e:eb:57:ac:27:8c:f5:d7:c5:12:4e:
5a:e2:af:55:5f:bd:39:d0:20:6a:3e:67:7b:b3:32:31:24:7f:
dc:f0:16:70:79:20:83:e6:6e:37:fe:fc:77:fe:94:db:fe:bb:
96:f3:83:1b:78:f9:da:bd:ba:ef:1a:8c:d0:0e:f5:5f:3b:10:
15:0f:28:bc:da:7a:7c:e0:24:74:93:11:7a:90:51:ed:c3:02:
a6:ac:1e:66:b6:e8:df:e7:39:b6:2a:04:56:08:aa:bd:6a:7f:
73:d0:11:aa:ba:5f:21:93:0d:35:38:e0:f5:02:67:58:38:55:
83:39:3b:48:ff:3c:44:b2:84:c2:45:98:91:04:e0:48:7b:92:
ca:ab:7d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-fra.rpki-client.org