Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/BUA1iwDzdi_d7pqxsTLioN_-RoM.roa
File: BUA1iwDzdi_d7pqxsTLioN_-RoM.roa (raw, json)
Hash identifier: j69HCCnuLMBV9mO3bdctB+84/K5IZVRsCYLkHFIjwpw=
Subject key identifier: 05:40:35:8B:00:F3:76:2F:DD:EE:9A:B1:B1:32:E2:A0:DF:FE:46:83
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10F0
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BUA1iwDzdi_d7pqxsTLioN_-RoM.roa
Signing time: Wed 01 Feb 2023 10:29:14 +0000
ROA not before: Wed 01 Feb 2023 10:29:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 123.205.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4336 (0x10f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:14 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0540358B00F3762FDDEE9AB1B132E2A0DFFE4683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:87:5d:fd:68:c1:09:9d:10:17:a0:8d:7f:22:
b0:25:b5:9b:29:77:88:46:61:dd:10:af:dd:29:99:
34:3d:02:3b:a0:cf:9f:0a:2a:38:55:c7:f0:64:a0:
f1:ef:3e:88:08:bf:2f:34:ba:e0:12:1f:5c:c4:1f:
1b:de:f2:06:e8:96:82:c3:eb:87:2e:36:c6:0d:95:
85:bf:9c:ae:5d:e9:67:fc:3a:08:26:3e:5c:d3:c7:
6f:4b:7e:df:e9:ff:16:94:eb:36:41:1c:4c:a6:90:
ed:34:5f:ac:79:32:d5:4b:3a:c9:c9:16:99:64:d7:
9c:a1:d9:b6:02:c4:cf:36:10:7e:1c:85:82:d5:3b:
dd:07:46:92:9a:69:8c:37:05:ca:27:54:18:cd:e8:
45:69:0f:37:83:d2:d9:cd:b6:3c:f6:58:03:a6:96:
ec:36:2a:35:ad:75:00:62:04:29:23:48:8b:64:f7:
9f:b5:eb:1b:f6:55:72:79:7f:4c:04:4d:ef:b6:ef:
18:95:7e:a4:1d:a5:a9:df:97:4e:89:61:cd:78:3c:
49:38:9a:a1:bd:5f:82:2e:cc:08:c9:f3:15:dd:4d:
e5:f5:67:de:6a:8a:af:32:a3:cb:65:36:b1:fa:80:
19:1e:37:8a:5a:23:44:10:b1:ec:01:9e:cc:d4:e4:
5b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:40:35:8B:00:F3:76:2F:DD:EE:9A:B1:B1:32:E2:A0:DF:FE:46:83
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BUA1iwDzdi_d7pqxsTLioN_-RoM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:3e:23:dd:9f:bf:08:55:2b:14:8d:e6:3f:37:f7:d7:86:db:
b2:d6:90:c2:62:2c:4a:e7:6b:02:29:86:b0:2b:9a:42:33:fa:
42:75:af:bd:34:c3:76:09:04:01:9d:e0:49:05:6d:95:76:52:
fe:0e:98:2d:b3:1c:2d:ba:d7:02:f3:3b:97:1c:be:d1:4f:fa:
76:ee:03:3c:af:76:f9:ee:45:61:1b:10:b7:7b:3b:2c:7f:d0:
17:35:d5:76:48:44:51:e0:01:66:46:82:93:14:07:6b:b7:d7:
9d:5f:22:ad:e9:99:75:2e:4d:dc:8e:7c:8d:91:70:7f:74:3a:
98:c1:10:ce:ac:42:ab:ee:90:f5:30:9f:a1:33:3f:36:9e:b0:
27:d9:ca:52:93:c0:c5:70:98:4b:c9:b1:3b:32:5e:b7:33:9a:
d7:5a:63:c4:c9:2e:23:83:89:81:b2:d1:b2:97:d6:a0:2b:37:
05:c8:bb:10:b1:52:9c:f1:fd:0b:e8:4f:dd:58:75:01:84:86:
f5:7d:d9:78:26:ac:f4:e1:43:e4:78:b9:fe:cf:f2:80:34:c4:
d4:65:7b:14:5b:42:46:2c:71:51:2e:c5:10:0c:ee:a2:55:40:
71:34:28:35:da:20:00:95:48:22:7a:9e:88:e6:ac:06:21:89:
91:32:01:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:50 2023 by rpki-client on console-ams.rpki-client.org