Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/CLojsRSbw4Ya9aeTUdL_1Zo6gW4.roa
File: CLojsRSbw4Ya9aeTUdL_1Zo6gW4.roa (raw, json)
Hash identifier: WJTQlBTHUFLuE6X57bBXlYbWZG++Ezhs9UyqaNZFNT0=
Subject key identifier: 08:BA:23:B1:14:9B:C3:86:1A:F5:A7:93:51:D2:FF:D5:9A:3A:81:6E
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 110F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CLojsRSbw4Ya9aeTUdL_1Zo6gW4.roa
Signing time: Wed 01 Feb 2023 10:29:24 +0000
ROA not before: Wed 01 Feb 2023 10:29:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 218.210.128.0/17 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4367 (0x110f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:24 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=08BA23B1149BC3861AF5A79351D2FFD59A3A816E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c6:70:70:61:00:e7:7d:d7:0a:86:2c:fe:e9:
7e:e7:a4:13:68:8e:de:8a:f5:c7:a8:90:66:73:15:
4d:55:d8:0c:c8:f9:3c:5e:73:cb:79:4e:a7:9e:de:
20:26:1c:44:f3:21:cb:78:3d:3c:bb:e2:de:16:b5:
96:eb:42:4e:6b:00:e0:67:bc:3c:35:c9:78:d3:4f:
58:5d:1a:45:19:71:3d:9a:4e:a3:1a:41:ec:46:d5:
cf:b6:2e:b3:72:c3:28:fd:ad:8e:d0:e7:a6:9b:80:
a5:92:a8:ac:74:26:29:ff:f2:f2:dd:ef:37:ca:99:
f2:bd:6d:fb:f4:43:8e:1f:19:c8:cf:87:c4:76:25:
99:0b:a6:53:08:8a:71:85:a2:bb:35:25:46:b9:ac:
ca:9d:54:4d:29:4a:eb:24:be:9c:3c:d0:99:f6:e8:
af:01:c2:e1:40:c3:a3:3e:e5:10:66:2e:1e:55:a5:
64:87:83:97:84:e4:b3:47:b7:a8:ce:cf:97:ec:54:
83:9b:71:fb:8a:e1:c7:8d:41:44:c4:f1:d5:90:34:
f5:cb:db:35:d0:39:33:36:ac:8a:2a:e5:b6:8c:b3:
b0:46:ac:6d:83:cd:7f:3d:06:dc:98:77:72:c8:57:
00:1d:ba:6b:24:6e:c2:a4:c9:9a:03:36:2d:ea:73:
b8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BA:23:B1:14:9B:C3:86:1A:F5:A7:93:51:D2:FF:D5:9A:3A:81:6E
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CLojsRSbw4Ya9aeTUdL_1Zo6gW4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.128.0/17
Signature Algorithm: sha256WithRSAEncryption
92:72:71:eb:5b:71:d9:da:44:70:7d:8d:3a:46:c7:16:02:d2:
2d:46:17:7e:3c:bb:53:7c:59:e4:f1:40:7c:0a:ae:97:07:f8:
0e:31:5c:c3:d8:da:0a:5d:b8:8c:fe:a0:c0:be:8b:2a:12:5e:
b5:85:4c:1c:12:4e:ae:92:7b:98:21:a1:95:21:de:6f:48:a7:
7a:ba:a4:33:a6:6b:13:74:7a:c1:9b:fc:1c:5b:a6:f9:03:ac:
35:fb:ed:0d:75:fc:9e:3b:72:c7:d0:47:f2:e1:44:95:50:0d:
e0:bc:0e:c4:c2:d4:d6:94:5e:b7:cd:f9:25:f9:a6:0c:65:b0:
00:a6:79:90:87:40:df:b0:fa:a7:ec:da:4e:8f:fd:17:45:da:
fc:39:77:e0:1d:3a:84:4c:ef:74:31:da:fa:d9:c1:3c:db:44:
53:a1:e0:4b:42:d9:eb:b1:7e:97:f7:96:00:99:61:18:0c:1b:
81:9b:3b:3c:cc:cd:1c:65:a8:39:cc:ea:f4:17:99:ac:76:13:
f8:56:89:b1:c6:ff:7f:50:1b:7d:4f:88:61:80:91:2c:72:3d:
63:48:b2:1a:d2:c9:fb:5c:3f:82:39:d3:e9:e5:9c:57:a0:09:
aa:7c:72:cf:4f:6b:2c:0d:54:8f:47:88:a1:22:df:a9:39:ee:
b6:b5:58:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:50 2023 by rpki-client on console-ams.rpki-client.org