Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/C-G9XAOfCbmhL0MOnL1DhwBWDoY.roa
File: C-G9XAOfCbmhL0MOnL1DhwBWDoY.roa (raw, json)
Hash identifier: 9YdWeWZqWeNpX9/kiMXATULxGOfq8j2wwL8JO4IRtwM=
Subject key identifier: 0B:E1:BD:5C:03:9F:09:B9:A1:2F:43:0E:9C:BD:43:87:00:56:0E:86
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1097
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/C-G9XAOfCbmhL0MOnL1DhwBWDoY.roa
Signing time: Wed 01 Feb 2023 10:28:45 +0000
ROA not before: Wed 01 Feb 2023 10:28:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 45.64.228.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4247 (0x1097)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:45 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0BE1BD5C039F09B9A12F430E9CBD438700560E86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:42:6a:d9:69:c0:6c:3b:1b:85:67:e3:36:
b8:5d:c0:2e:ee:d3:9a:0c:72:96:92:64:79:41:15:
b0:59:d3:c3:34:b7:22:5d:73:e4:be:04:e5:69:9d:
5f:7d:4f:89:12:41:ce:99:43:8f:b0:3d:ca:66:52:
ed:5e:88:60:46:32:27:59:b7:e6:e9:16:36:97:ff:
91:5f:40:ee:05:94:30:dc:b2:7e:42:4a:3e:7a:f0:
69:eb:53:66:37:91:e3:fe:16:13:3f:3c:b7:f2:1c:
c6:ea:cb:0b:2f:10:ee:79:f4:80:c5:58:cb:d3:be:
ef:91:d1:81:c4:d8:50:fd:12:c9:45:e5:57:02:1e:
d5:fe:42:10:d2:75:9c:a4:98:e7:b0:91:00:d0:27:
d8:78:35:2d:ba:5a:34:6b:09:31:f2:e2:40:c7:08:
22:66:df:c1:f7:9d:c5:a7:81:b7:91:d3:d7:8c:ff:
bd:6f:91:7f:05:18:50:4b:76:18:11:25:4e:a6:d1:
19:24:2b:f6:a8:5e:6f:07:ac:55:64:d5:03:b5:3f:
4e:ee:8c:20:3a:81:8b:cf:d2:73:00:1a:13:91:9e:
af:22:9b:c5:48:66:7f:d2:d5:5f:99:98:ba:96:b9:
00:f4:52:8e:df:96:9c:48:76:7d:85:60:4c:a1:31:
9d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E1:BD:5C:03:9F:09:B9:A1:2F:43:0E:9C:BD:43:87:00:56:0E:86
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/C-G9XAOfCbmhL0MOnL1DhwBWDoY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.228.0/22
Signature Algorithm: sha256WithRSAEncryption
10:f1:f8:09:7f:50:f8:cd:7c:e7:74:91:5b:48:1a:4c:f5:ea:
75:1b:2c:36:6a:cb:ac:98:3c:ae:d5:5e:89:6a:5a:66:56:d2:
98:8b:76:8a:e5:07:7a:63:b0:e8:e4:19:9c:e4:ec:52:e6:33:
5f:77:72:68:c0:e7:b1:1f:31:72:89:f7:d8:13:e8:92:03:7c:
92:40:cd:be:4c:cb:04:30:4e:59:c6:82:a4:17:ed:7f:f1:9c:
de:d5:d0:2f:48:00:88:30:4f:55:c7:f8:0d:46:88:ad:90:33:
2c:2f:80:a6:a4:bb:42:c7:57:03:db:2d:58:f6:cf:7d:37:59:
0b:e5:4b:2a:fd:19:68:15:6f:2f:e2:87:f7:e6:67:11:e5:29:
c3:d2:a4:cc:71:69:e8:a8:3e:a8:49:85:b3:37:62:30:83:f9:
c2:49:c7:c4:58:cb:24:41:da:20:3b:8a:b5:88:e8:0e:c8:c6:
bb:01:47:b6:fc:13:09:1c:64:55:41:4f:d6:15:a1:e6:70:7c:
83:db:71:a9:95:b7:ee:07:9b:ea:41:ab:6d:10:7f:9b:ce:a1:
67:07:52:69:6d:a4:ac:2f:8b:2f:1b:8e:44:42:d5:53:47:0c:
d0:90:40:1f:b1:c8:ed:10:cd:29:16:6d:0c:e8:fe:d8:84:45:
4a:3d:12:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:50 2023 by rpki-client on console-ams.rpki-client.org