Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Dko6GJxTZHbYZQk-z3tnNobzt8E.roa
File: Dko6GJxTZHbYZQk-z3tnNobzt8E.roa (raw, json)
Hash identifier: 7FrWA5oShH9pfi5PaDiSfJs3JtA49ONqDcaHtEBEo2k=
Subject key identifier: 0E:4A:3A:18:9C:53:64:76:D8:65:09:3E:CF:7B:67:36:86:F3:B7:C1
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Dko6GJxTZHbYZQk-z3tnNobzt8E.roa
Signing time: Thu 15 Sep 2022 02:43:08 +0000
ROA not before: Thu 15 Sep 2022 02:43:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 175.180.0.0/14 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0E4A3A189C536476D865093ECF7B673686F3B7C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:31:69:e8:69:63:cf:0a:76:e8:14:72:f4:
d5:5c:af:93:e3:ca:d5:79:e2:44:9e:7d:34:d1:72:
9f:57:77:54:be:04:a1:2c:c8:85:ba:b1:d0:07:1d:
08:d5:34:ff:df:08:ea:53:57:39:ed:df:52:e5:77:
ad:05:25:e2:f8:3c:3e:4b:e5:fe:ce:e7:1d:ee:2e:
bf:83:39:85:f7:0c:8d:8f:22:63:e3:b8:87:55:dc:
2d:43:76:27:cc:67:2f:a8:3e:29:f9:fe:12:ef:20:
6c:fc:df:18:fd:90:5d:a3:7e:11:1c:4d:1a:2c:2f:
11:07:3f:82:36:e9:b3:07:33:fe:5c:cf:34:98:ae:
8a:41:60:17:9d:63:e6:5c:9a:40:19:db:eb:a2:05:
e8:39:00:d6:59:84:83:d9:82:72:b9:dd:97:e1:a0:
65:e6:6d:d7:dd:5d:eb:28:62:28:58:79:f3:6a:01:
d4:47:ed:17:4a:d7:7e:c7:4d:7f:e2:7e:ce:ec:45:
ce:ab:ba:e1:ea:d7:04:67:24:dd:c6:73:d4:51:47:
e3:68:f2:4e:4a:bd:3f:12:54:71:49:35:7f:ed:19:
6a:87:2c:d7:23:53:15:98:37:70:b7:e3:57:44:44:
87:59:5e:ad:af:c9:9c:66:a6:38:7a:c4:53:c0:40:
15:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4A:3A:18:9C:53:64:76:D8:65:09:3E:CF:7B:67:36:86:F3:B7:C1
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Dko6GJxTZHbYZQk-z3tnNobzt8E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.180.0.0/14
Signature Algorithm: sha256WithRSAEncryption
3f:3d:4a:4f:01:56:98:b5:07:86:fa:b8:90:3d:7a:77:6c:9a:
c5:e7:2e:ea:45:f3:84:ec:63:36:7c:3e:92:06:1b:f6:13:85:
63:21:db:1a:b6:9f:f7:80:06:b7:da:7e:50:c2:0e:0b:35:7b:
96:cc:1d:8f:12:61:3b:28:76:9f:e5:5c:a2:e1:f3:f9:23:06:
fe:09:e1:a4:03:e0:e5:85:b3:76:17:0d:38:96:4e:89:8e:88:
1d:5d:85:9b:b0:4a:ca:cc:87:4e:bc:1a:da:15:cf:51:50:dd:
16:0a:11:6f:cc:4c:6b:33:e8:9a:b3:a2:5b:76:ee:80:58:26:
49:41:6f:f6:dc:b6:5b:5c:31:77:a1:89:1b:a8:21:7e:9c:8b:
af:31:4a:63:aa:e6:2a:b8:3e:9d:a3:a2:cd:cb:6d:1d:86:f4:
53:dd:9a:a5:b1:e3:e1:7b:08:03:09:9c:e0:d2:3e:0c:40:b8:
e3:7f:fe:7f:13:db:34:f1:98:28:c7:87:8b:a4:16:f2:ce:9d:
d9:cd:18:a6:a4:48:9c:4d:27:58:5a:43:e2:6b:fe:4a:3c:6e:
e6:d4:4a:14:c2:cf:f7:c6:8d:c5:a0:25:95:46:a7:e5:cc:33:
8d:db:bf:5d:fc:f4:69:89:fb:ff:e4:b9:b5:4f:e6:35:54:c0:
32:7a:51:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-fra.rpki-client.org