Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/EotC2FIXT9tY48YDy7YLPhhA_TA.roa
File: EotC2FIXT9tY48YDy7YLPhhA_TA.roa (raw, json)
Hash identifier: 2H8Hd8lGJA27oGqwD5nhNre3NsZ2ocVlLCaou3Xh7uA=
Subject key identifier: 12:8B:42:D8:52:17:4F:DB:58:E3:C6:03:CB:B6:0B:3E:18:40:FD:30
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/EotC2FIXT9tY48YDy7YLPhhA_TA.roa
Signing time: Thu 15 Sep 2022 02:43:39 +0000
ROA not before: Thu 15 Sep 2022 02:43:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 220.229.96.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=128B42D852174FDB58E3C603CBB60B3E1840FD30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a5:b8:c5:6d:c4:44:77:e0:e1:38:13:63:83:
c3:c9:40:5f:6f:1a:34:94:d4:7c:93:fe:b5:5e:f2:
e3:3a:c8:81:e0:9b:6d:6d:9d:d0:fa:37:ea:e4:06:
7f:05:e8:73:7e:d6:5c:3f:d7:51:f3:70:eb:aa:03:
00:f2:2f:fd:db:c8:c6:a7:27:b2:0b:05:cb:9b:be:
6f:50:50:32:c5:95:7f:fb:1b:9b:27:5a:26:9f:90:
1c:5c:13:aa:9e:43:bb:53:1f:42:fb:64:58:95:28:
33:7c:13:13:d3:3f:cb:53:0d:a5:d1:6a:38:84:15:
8c:70:4c:81:6d:6a:1d:b2:57:a6:b3:f2:a6:d2:f3:
f6:74:02:e7:e7:d6:80:b3:64:7a:c2:a8:12:f8:32:
e2:f1:3a:04:6b:83:9d:6f:91:8d:18:cd:c2:d7:65:
97:be:d3:a8:fd:8b:3f:c7:dd:12:af:90:d9:f0:9d:
fd:7a:5d:d9:86:0e:9d:80:ce:12:07:35:b1:f1:bb:
94:a3:cc:3b:6c:ab:f0:3a:96:92:ac:43:bd:f7:d6:
11:2e:4f:77:fa:e3:5e:95:06:8d:7b:79:dd:89:2d:
63:6c:2a:2c:5f:fc:6c:c1:31:66:4a:0c:2d:08:6e:
05:09:63:7b:e5:42:a4:8a:64:b4:c1:10:2c:37:b3:
a6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8B:42:D8:52:17:4F:DB:58:E3:C6:03:CB:B6:0B:3E:18:40:FD:30
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/EotC2FIXT9tY48YDy7YLPhhA_TA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.229.96.0/19
Signature Algorithm: sha256WithRSAEncryption
b1:d9:74:2f:b7:dd:c9:4f:aa:28:29:de:08:eb:fa:a5:5b:cf:
0a:de:65:f2:20:cf:cb:01:34:db:f1:9c:15:7b:d7:97:e5:3a:
9a:5e:b5:7e:10:34:16:5f:37:c4:8c:52:18:79:e5:a8:4a:aa:
3a:d7:a0:e8:48:2f:f2:5c:32:11:e6:61:e3:31:fb:0a:b3:11:
c9:80:be:32:a9:6b:af:38:bf:0b:cd:e8:6c:d9:e5:37:51:a4:
c4:b7:ad:aa:03:1b:13:96:1c:f5:83:98:2c:3e:39:a0:a2:fb:
83:e7:27:ca:76:ee:45:eb:0e:ab:43:3a:fd:01:3e:3c:2c:85:
a6:3f:61:ab:ec:84:06:25:a2:77:38:6e:e6:06:7f:36:16:fb:
90:d2:e1:2e:09:fe:35:3b:ee:cf:9b:4f:60:e2:de:95:ff:9c:
64:ed:29:c4:1b:5d:99:52:8b:73:43:15:7e:53:fe:58:f3:d8:
78:ca:66:65:15:0c:24:41:2a:e5:cc:ea:a0:dc:6f:89:97:e7:
46:41:d6:d0:8b:f4:0b:0f:41:90:43:a0:f0:82:07:c9:a3:e1:
9e:e6:c0:d6:e2:8d:23:80:88:8d:ac:3a:ac:12:fb:0e:b6:83:
c5:fe:2b:77:3e:8e:ba:21:20:1c:fa:1d:33:ef:c1:83:89:b6:
24:e1:55:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org