Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/FiCqm6LjwmkZDW1UnscaSVhsFls.roa
File: FiCqm6LjwmkZDW1UnscaSVhsFls.roa (raw, json)
Hash identifier: kX4SHy82KTVmjjch4MVrcf0eqghQic569HUswYfcHQk=
Subject key identifier: 16:20:AA:9B:A2:E3:C2:69:19:0D:6D:54:9E:C7:1A:49:58:6C:16:5B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1052
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FiCqm6LjwmkZDW1UnscaSVhsFls.roa
Signing time: Wed 01 Feb 2023 10:28:24 +0000
ROA not before: Wed 01 Feb 2023 10:28:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 210.243.128.0/17 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4178 (0x1052)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:24 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1620AA9BA2E3C269190D6D549EC71A49586C165B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9a:42:b9:8f:ef:5e:57:ad:18:4a:9c:81:c7:
c5:25:60:db:67:3e:74:77:d7:ba:91:61:cc:1c:81:
08:df:2e:c8:e0:12:2e:1d:57:79:db:3c:7a:98:a5:
ad:fb:88:08:dc:fd:85:07:1c:9c:38:3c:ee:9a:4a:
9b:62:08:84:9a:b1:d1:05:b6:7c:98:8b:3a:71:02:
86:fa:0a:65:17:db:8b:bb:ff:76:75:1e:f6:28:ae:
1e:1f:02:3e:4f:37:eb:f3:88:0c:07:95:ae:32:34:
24:e7:20:f9:3c:5e:4d:30:ad:a5:0b:28:b4:63:06:
a6:a4:b2:90:05:3e:1c:25:20:15:c0:d2:dc:1f:0b:
07:d9:41:01:ec:ce:fa:11:b4:9f:43:07:86:94:bd:
0d:91:2f:ef:f1:3e:5b:c0:d1:8e:3a:dd:fc:b1:02:
d7:aa:01:d3:d0:c1:eb:6b:69:bb:02:ee:b9:ee:68:
5f:b8:84:96:a3:1c:a8:2f:83:ac:12:8f:b8:ea:d6:
49:85:f0:8d:49:a2:a3:28:93:1e:9c:2c:b1:d6:0d:
84:fa:a3:e0:0c:83:62:c2:f5:5f:4d:aa:a1:15:a6:
99:aa:74:ce:64:c6:9b:f5:e1:05:4d:67:9f:5c:0c:
d8:ea:62:3a:9c:c0:e3:4c:36:93:5c:8a:32:95:ff:
09:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:20:AA:9B:A2:E3:C2:69:19:0D:6D:54:9E:C7:1A:49:58:6C:16:5B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FiCqm6LjwmkZDW1UnscaSVhsFls.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.243.128.0/17
Signature Algorithm: sha256WithRSAEncryption
11:f9:c8:58:6b:a2:0a:5c:ed:ea:24:4e:ef:e7:e0:13:05:1c:
0d:d9:04:26:81:3d:72:a3:a8:89:54:57:f2:35:11:ff:2c:7c:
8c:2c:3f:d8:b6:42:00:bc:f8:e9:1f:0a:d4:85:8e:99:1d:0c:
96:c1:26:d8:9c:93:da:2a:57:63:0c:ab:d5:20:25:a9:52:a2:
38:3b:df:2a:28:55:a3:11:14:91:c5:3c:e6:28:6a:b3:b7:e1:
e7:72:16:19:f8:08:f5:68:a4:3c:df:4b:45:46:ae:d6:08:dd:
57:42:00:64:41:e4:54:01:3b:96:50:a1:eb:4e:de:52:8f:b1:
cb:18:fd:ec:4d:28:b7:3e:07:d9:80:01:a6:b1:d3:55:6b:d2:
88:57:8e:09:42:5b:cc:ef:11:7e:a2:0e:f0:e0:ac:ea:da:a7:
66:2d:0a:be:5c:b4:cc:06:39:c5:ed:d6:50:57:62:be:64:e8:
7f:a8:6f:52:60:08:e5:21:5d:93:59:4a:ef:ea:40:32:41:a2:
77:a9:ca:80:f9:79:3a:6c:a8:29:8b:97:2f:12:2f:6f:1b:fb:
60:7a:9f:a9:9e:38:e4:8c:4c:8b:87:35:2d:9e:69:d7:4b:91:
88:40:9a:d1:de:80:d6:e4:40:f3:6f:ea:ea:f2:11:7d:27:89:
13:a6:c7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:50 2023 by rpki-client on console-ams.rpki-client.org