Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Fp3ltCOXGJhaVi-n2kbBYodKDfY.roa
File: Fp3ltCOXGJhaVi-n2kbBYodKDfY.roa (raw, json)
Hash identifier: j6BnoXNNu7ybKwd3I6lG32mv5z8E0MvWfljENHnNvIs=
Subject key identifier: 16:9D:E5:B4:23:97:18:98:5A:56:2F:A7:DA:46:C1:62:87:4A:0D:F6
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 103F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Fp3ltCOXGJhaVi-n2kbBYodKDfY.roa
Signing time: Wed 01 Feb 2023 10:28:19 +0000
ROA not before: Wed 01 Feb 2023 10:28:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 133747
IP address blocks: 115.30.64.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4159 (0x103f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:19 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=169DE5B4239718985A562FA7DA46C162874A0DF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4c:61:c7:0d:a5:0d:c2:5a:05:8d:dc:52:8c:
0e:17:6c:8e:13:90:cc:58:e5:43:c5:c7:f6:08:5c:
1a:41:95:9e:f3:f2:25:5a:83:fa:e5:b0:21:d6:d1:
27:ce:3a:33:b4:4b:1f:6e:9b:01:ab:2e:2d:64:e9:
d6:d9:fb:9c:bd:be:7e:29:d5:b8:a3:d9:ce:ca:a4:
92:df:6a:80:0e:a5:15:97:73:1c:be:95:af:a9:2b:
4c:ea:b5:b0:3f:8d:59:13:17:d1:9e:99:05:4a:27:
8d:7d:09:d5:92:e8:af:20:4c:49:83:2d:52:6e:8f:
91:19:0e:3e:ae:17:6d:34:2c:c1:44:15:cd:33:ce:
5c:89:1b:d6:59:97:6b:3a:32:f7:c9:90:5c:8f:67:
01:41:0d:f7:6b:b9:f1:63:69:dc:d6:b2:14:71:04:
ef:9e:85:00:cf:4a:eb:03:9a:41:78:fe:4e:10:d7:
10:a3:eb:4c:b7:1c:64:92:57:27:e0:97:44:80:c0:
9f:3b:f8:12:1f:41:1b:ae:12:a4:53:65:bb:14:df:
94:31:f3:22:79:79:e1:1c:1d:69:f8:fb:28:ca:01:
1d:51:44:53:19:9c:24:02:7a:48:3e:f3:f0:2f:47:
19:fd:95:38:e0:18:2e:45:c4:97:cb:ae:0b:e0:9d:
89:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9D:E5:B4:23:97:18:98:5A:56:2F:A7:DA:46:C1:62:87:4A:0D:F6
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Fp3ltCOXGJhaVi-n2kbBYodKDfY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.30.64.0/23
Signature Algorithm: sha256WithRSAEncryption
78:a7:61:99:5a:ce:5d:1a:95:27:87:69:75:f2:28:a9:90:87:
d9:1b:a5:11:49:dd:ef:11:5c:d2:2c:da:44:47:f7:8a:6d:da:
f1:d0:89:c6:8c:fb:10:e7:7f:2e:71:55:96:90:ba:12:8d:1e:
59:6c:48:bb:83:65:0b:b4:fa:51:0b:1f:d2:a1:47:20:5f:29:
4f:5e:6a:e5:fc:c4:7c:c6:5c:ff:06:b8:a8:a2:d9:2d:82:5f:
95:4e:2c:a4:17:05:e8:f1:d3:07:ba:ac:02:cb:f4:f1:80:ce:
6b:a4:71:65:62:ee:10:a3:6f:ac:97:03:34:60:c0:c8:04:d4:
a7:89:c1:ac:2b:de:14:3f:9d:f9:a5:0b:42:c1:ec:cb:b3:de:
ef:8d:f1:0c:96:87:e1:b3:75:5d:bd:00:99:d4:bf:7f:46:4a:
d1:9b:36:63:cb:3c:b3:06:4e:08:5f:82:5a:80:47:36:dc:bd:
a7:f1:49:dd:18:04:66:04:f9:7e:3c:f4:5c:80:05:bd:fd:cf:
ad:b2:7d:af:f4:9e:c0:c6:52:8b:89:c8:12:d3:0a:94:ee:f5:
68:40:ea:e3:1b:b5:ad:ab:ac:89:07:ad:32:d1:92:20:d5:dd:
10:c4:a4:52:c8:cd:2f:3c:5f:1c:ce:b0:85:8e:94:a6:9a:80:
c4:36:49:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:15 2023 by rpki-client on console-fra.rpki-client.org