Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/G6qcWBLeDuhW-iIqFYhNzB2L8tg.roa
File: G6qcWBLeDuhW-iIqFYhNzB2L8tg.roa (raw, json)
Hash identifier: 3ezQ+2RyGbBT4g9JdtFLCax1xDCH/LVqQ2wawJvaCHo=
Subject key identifier: 1B:AA:9C:58:12:DE:0E:E8:56:FA:22:2A:15:88:4D:CC:1D:8B:F2:D8
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/G6qcWBLeDuhW-iIqFYhNzB2L8tg.roa
Signing time: Thu 15 Sep 2022 02:44:00 +0000
ROA not before: Thu 15 Sep 2022 02:44:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 221.169.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:44:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1BAA9C5812DE0EE856FA222A15884DCC1D8BF2D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:54:e5:1e:78:52:ac:57:11:f1:70:63:1a:
76:08:70:eb:03:a4:e0:25:79:42:75:68:70:17:48:
38:49:cc:e0:ac:c9:ef:80:e5:a7:9b:42:af:51:53:
51:56:23:51:b4:d0:fb:82:01:1b:6d:5c:b4:c5:8c:
fd:69:3b:25:5c:fc:5b:ba:74:8a:9f:5e:2d:48:10:
fb:82:13:9d:de:2e:22:05:54:a5:31:f5:c7:2d:b7:
f7:72:f9:a9:74:b3:71:ac:34:94:13:f6:12:4b:b7:
d0:04:e7:e6:5c:a0:dd:58:de:31:1b:a6:d8:c7:c5:
7f:2e:c9:dd:56:18:4e:4e:33:0a:6f:f5:f0:4a:fc:
04:e5:3f:2f:51:2b:18:8d:e9:64:b7:46:2c:85:f5:
c0:92:e5:6e:c8:1f:1f:71:aa:36:a2:d2:80:96:ae:
e4:a5:92:e9:ee:f2:bb:09:b9:7b:ec:c0:69:16:cd:
11:4d:96:d1:0f:7a:05:c4:d5:c1:15:43:19:46:92:
c9:30:c5:01:ce:d2:0e:ff:27:26:8a:6e:2b:10:ee:
58:2f:9e:23:1c:a5:06:3e:01:6c:6a:3c:b2:49:27:
16:f8:65:e3:0c:c5:e6:52:23:74:5a:5e:c8:b3:e8:
99:82:33:7f:d8:68:b6:e1:17:f4:30:1d:fe:c1:9d:
ec:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AA:9C:58:12:DE:0E:E8:56:FA:22:2A:15:88:4D:CC:1D:8B:F2:D8
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/G6qcWBLeDuhW-iIqFYhNzB2L8tg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
221.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:af:a7:f9:c7:a2:82:8a:ba:fc:6f:46:3d:9d:53:f1:4f:52:
cc:4b:3b:80:89:04:af:3a:62:b9:46:0f:dd:d0:66:aa:3c:ea:
9b:18:f4:ec:b9:9f:2c:e6:91:06:6f:7e:c9:af:0a:65:8a:c1:
f6:6e:31:cd:cb:d3:cf:da:57:d4:08:92:f6:2e:2e:81:74:49:
6d:64:f1:e9:4d:9b:45:92:ed:d7:96:e8:7c:99:2a:e5:ce:89:
93:5a:ee:88:14:db:6a:23:01:7b:5a:d5:70:44:9b:64:cf:ca:
79:c1:a7:5a:ac:2e:1c:76:a3:e8:5e:a8:33:dc:78:ec:1c:d6:
61:84:b9:28:72:4e:14:d2:00:d8:a8:36:f1:e2:e7:6a:85:0e:
4e:31:59:1e:e6:8a:cc:44:ae:8c:56:04:cb:83:37:65:66:ff:
d3:cc:69:aa:7b:96:3f:dc:4c:df:f7:83:f3:cc:63:fa:f7:49:
da:47:b7:e1:26:09:7b:e6:5a:eb:40:58:ae:de:e6:06:0f:6b:
86:fe:fe:86:30:53:ed:19:5a:1e:b9:e7:a1:f9:fe:1a:8b:9e:
8e:78:53:52:53:9d:32:60:86:ef:bc:58:ac:0b:5d:e8:82:c4:
bc:04:83:16:8e:a5:5a:47:13:30:7b:97:9e:e8:0e:a1:3e:4f:
dc:09:28:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org