Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/DXHtY_xPFoMAy_MGa_xzDrQqZ00.roa
File: DXHtY_xPFoMAy_MGa_xzDrQqZ00.roa (raw, json)
Hash identifier: mrYzm40FsoGaZTGS681EnjNGhcHXJq1fNu0MD0Y2L50=
Subject key identifier: 0D:71:ED:63:FC:4F:16:83:00:CB:F3:06:6B:FC:73:0E:B4:2A:67:4D
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10B2
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/DXHtY_xPFoMAy_MGa_xzDrQqZ00.roa
Signing time: Wed 01 Feb 2023 10:28:54 +0000
ROA not before: Wed 01 Feb 2023 10:28:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 115.30.64.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4274 (0x10b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:54 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0D71ED63FC4F168300CBF3066BFC730EB42A674D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ec:aa:ad:e8:54:8e:de:89:93:49:62:87:7f:
ab:b5:72:64:f4:bb:a3:b5:40:f5:8d:01:36:7a:0a:
1c:8e:14:e2:a9:8f:dd:40:80:81:52:71:68:95:12:
e2:55:cc:db:dd:63:44:60:07:cc:2e:76:28:8e:19:
28:a6:2c:2c:46:88:3f:fb:2b:0a:72:da:65:dd:27:
bc:dd:72:fc:86:bc:46:69:d8:83:7a:c6:02:97:07:
d1:64:bf:83:4a:1b:4c:72:e1:f8:3b:88:41:ab:18:
64:62:bf:23:2d:5d:a6:99:4d:58:3d:fb:bf:ec:54:
55:ca:a0:e9:35:ca:79:73:1c:bf:f4:8f:0f:fc:36:
56:a2:41:f9:6d:48:be:5b:8e:16:71:c2:11:c6:cf:
6b:b2:dd:1b:9f:e6:2d:69:89:9f:7b:03:33:7e:45:
0a:0f:0e:cb:e6:99:a6:71:65:84:55:81:3b:4a:6f:
1d:8d:f8:3b:8a:06:dc:8b:e7:55:dd:fd:18:92:4b:
40:0f:7b:5e:92:28:fd:88:95:ee:a4:67:64:b3:67:
74:a3:6f:19:dd:06:ad:26:86:6c:2c:10:49:62:01:
b0:cf:97:e1:6f:21:0a:57:15:5f:0e:cd:5f:fc:12:
f8:29:5d:b2:1a:80:07:52:b2:4b:8b:e9:7b:cb:16:
7d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:71:ED:63:FC:4F:16:83:00:CB:F3:06:6B:FC:73:0E:B4:2A:67:4D
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/DXHtY_xPFoMAy_MGa_xzDrQqZ00.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.30.64.0/18
Signature Algorithm: sha256WithRSAEncryption
59:0e:eb:a0:05:55:20:29:37:53:f4:14:e1:64:c6:1e:5c:0c:
b5:61:32:82:a7:0b:06:ac:5a:24:fc:e1:54:db:7a:c7:57:cb:
b6:3a:35:7c:57:e3:9a:ea:e8:07:e8:ad:36:0a:cc:3a:ad:23:
0e:19:a1:7f:41:2a:16:e7:96:39:5d:6a:62:c7:8d:a0:31:b5:
29:9f:8d:0b:da:43:23:e8:d1:ba:2f:3d:1c:a3:05:bc:bd:1a:
b5:6e:d2:d5:dc:98:a8:ce:80:21:fe:a7:bb:fc:99:9f:9c:2f:
dd:c6:54:a2:44:22:e5:b0:25:b7:d6:75:b0:76:6f:d2:90:e4:
31:b2:45:55:8d:6d:52:dd:31:77:fa:10:3b:1b:45:af:ac:b1:
48:f1:72:83:83:33:24:23:bc:45:be:b1:fc:9e:32:63:cb:31:
78:2a:c3:e5:93:8a:40:63:75:36:b7:0e:6f:6d:7a:f0:42:5b:
17:d7:db:b5:56:94:63:1c:17:06:8d:67:4e:d1:66:59:22:b5:
14:71:ad:bc:e2:41:03:e4:3b:ac:5f:78:a2:6f:8f:52:6e:3e:
79:3f:d0:3f:b9:69:e2:a5:bc:08:99:8d:94:33:99:4c:5d:73:
98:7c:06:1a:ec:59:7f:77:3b:75:fc:12:38:6c:26:06:6b:2d:
fa:ab:a1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:50 2023 by rpki-client on console-ams.rpki-client.org