Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/DFrOIaaD1quHG1_D8YagFHmt-uw.roa
File: DFrOIaaD1quHG1_D8YagFHmt-uw.roa (raw, json)
Hash identifier: 5zsH4DtK4jvkbwFg/9vht13wnZknxDQA4Z3WbPZ8Eg4=
Subject key identifier: 0C:5A:CE:21:A6:83:D6:AB:87:1B:5F:C3:F1:86:A0:14:79:AD:FA:EC
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1079
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/DFrOIaaD1quHG1_D8YagFHmt-uw.roa
Signing time: Wed 01 Feb 2023 10:28:36 +0000
ROA not before: Wed 01 Feb 2023 10:28:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9922
IP address blocks: 203.190.16.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4217 (0x1079)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:36 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0C5ACE21A683D6AB871B5FC3F186A01479ADFAEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:37:ee:a3:a0:cd:0e:24:4e:6a:00:e6:42:
69:45:b6:2d:35:98:ef:f7:6f:7f:f8:18:7b:52:7d:
6a:56:0a:4a:02:4e:93:57:cf:79:64:9e:57:b3:27:
84:51:70:35:35:9a:54:cd:bc:a1:25:c8:61:39:d0:
7e:95:8c:d0:fb:84:fb:90:68:8a:07:c0:cd:b1:9a:
de:55:98:77:e4:f4:b2:3a:99:26:04:68:21:74:90:
0a:29:37:91:2f:a1:fa:c6:1d:47:fa:98:9e:94:f5:
d4:f9:d9:b5:7c:39:41:b7:68:78:c8:4b:46:16:4b:
5b:ce:36:a3:81:d3:0a:73:6f:fe:84:f1:ec:85:ed:
38:7c:45:91:ad:31:d3:dc:ed:ca:27:51:54:86:4f:
db:88:d5:34:0c:e5:fb:24:74:3b:98:5a:3b:73:36:
a1:85:b3:2a:c8:52:67:7b:e9:45:4d:b6:cd:0c:d4:
56:cd:36:ac:75:f0:a2:3c:1a:72:b2:5b:06:4c:ad:
a3:22:3d:26:f1:17:b9:aa:8b:07:2b:b9:fc:96:29:
dc:41:c9:09:8b:e0:cb:44:47:98:d9:4c:f0:f3:ec:
5b:2e:84:40:a5:ba:0a:af:56:4b:fc:64:04:12:d3:
79:a1:da:15:fb:45:84:8b:4b:eb:92:f2:c6:0e:d0:
45:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5A:CE:21:A6:83:D6:AB:87:1B:5F:C3:F1:86:A0:14:79:AD:FA:EC
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/DFrOIaaD1quHG1_D8YagFHmt-uw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.190.16.0/21
Signature Algorithm: sha256WithRSAEncryption
62:2a:1f:bf:4c:9d:b9:42:6d:32:c8:1c:11:81:be:24:27:8b:
f4:39:e6:58:46:37:c5:cf:3c:25:6f:f0:27:ae:75:3b:30:c0:
86:d6:d1:73:97:04:a1:03:f5:c9:7b:d7:5e:56:03:45:b1:c8:
1b:00:dc:e7:dd:2e:48:98:b1:98:54:da:3c:5c:ba:73:eb:af:
00:6d:fb:a5:f0:6d:95:ec:73:10:7d:a9:db:09:ab:ee:fe:fb:
4e:49:48:ee:3d:7b:bd:5e:e1:fe:d5:8d:12:df:56:22:bf:da:
e1:08:d0:99:5d:79:98:32:31:4a:75:6e:22:42:2e:e1:34:63:
a7:a4:07:bb:08:b4:98:73:ba:08:9d:c4:41:1f:8b:d6:bd:99:
ed:1a:3c:ed:dd:97:fb:c6:89:63:e1:19:05:1b:19:6b:b6:ec:
f9:59:76:12:bb:12:96:0b:b4:f4:7b:30:03:c1:78:f9:81:2d:
31:d9:66:3a:16:1d:b5:e4:ef:ea:af:70:ee:fc:6b:53:96:f2:
a2:99:dd:03:2e:ce:bb:30:59:75:03:9c:7e:1a:76:b0:11:e2:
c5:9c:ea:ec:92:e3:44:75:08:16:52:9f:66:fd:d8:d9:c6:36:
45:72:96:ba:db:85:85:2d:7e:75:43:b8:f1:d1:48:50:2f:19:
5a:b1:ac:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:50 2023 by rpki-client on console-ams.rpki-client.org