Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/GbkLRnJUvoxFEPlslunsCVBWwls.roa
File: GbkLRnJUvoxFEPlslunsCVBWwls.roa (raw, json)
Hash identifier: Dp+eCj9ZOHA87y07Fv6rvIBSeZ6k9RiEgbdpjz80EYY=
Subject key identifier: 19:B9:0B:46:72:54:BE:8C:45:10:F9:6C:96:E9:EC:09:50:56:C2:5B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1100
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GbkLRnJUvoxFEPlslunsCVBWwls.roa
Signing time: Wed 01 Feb 2023 10:29:20 +0000
ROA not before: Wed 01 Feb 2023 10:29:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 210.68.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4352 (0x1100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:20 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=19B90B467254BE8C4510F96C96E9EC095056C25B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:a8:98:4f:eb:42:b4:2f:fa:6f:52:53:4d:
11:d0:db:ce:6f:13:49:fb:23:bc:7c:e1:f4:70:40:
8e:f8:53:27:31:dd:06:10:c0:59:6b:4a:bc:c4:79:
9e:fd:34:92:23:91:18:88:c4:9e:b8:2f:4b:6b:63:
3b:d6:20:56:06:22:90:cf:d9:7a:5d:48:15:58:de:
47:76:48:2e:fd:fc:36:7c:06:8f:e6:49:d5:fd:c4:
60:c7:6a:73:b6:3c:c6:05:6c:60:ec:30:6d:04:18:
ce:0a:18:06:94:46:ee:fc:df:44:91:b5:fe:ca:59:
b6:b0:9f:fb:05:b3:19:c0:76:68:13:d5:fb:72:71:
f3:9c:9e:d0:a1:15:94:66:45:5c:2b:8a:d8:48:28:
a5:35:99:78:c7:cc:e9:1b:67:8e:e2:8f:4a:68:83:
44:d8:a3:ce:4a:8a:2a:30:8a:c7:9b:76:73:07:cf:
d0:79:2e:ae:4d:3b:9d:60:16:ea:77:3d:5e:33:e3:
5d:24:5b:78:af:f7:e1:06:07:28:b4:88:14:3e:9d:
54:a5:c8:80:75:9e:5d:5d:4f:cb:b7:e3:09:b3:44:
a5:74:7e:7a:f1:23:fd:62:12:36:f3:ae:be:e5:c5:
4c:5f:42:e8:c6:82:d1:38:fa:31:73:c0:b5:f7:83:
dd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B9:0B:46:72:54:BE:8C:45:10:F9:6C:96:E9:EC:09:50:56:C2:5B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GbkLRnJUvoxFEPlslunsCVBWwls.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.68.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:4e:30:01:29:20:2a:ca:a9:4e:d7:22:53:69:f4:dd:e1:1e:
b1:05:db:9a:6d:83:a8:52:8a:70:dc:f2:68:6c:37:70:a6:76:
68:84:3e:15:ed:c7:61:f3:e3:67:ba:9f:35:31:5f:52:71:76:
25:4f:f4:3c:87:ef:5e:13:bc:d1:d8:d6:e1:b7:3f:43:6e:d5:
fd:c8:b4:aa:9d:c9:4f:d2:30:ce:22:b5:d6:4a:5f:81:58:87:
fc:93:a8:20:5f:d3:79:e7:51:dc:54:49:8f:88:2a:b1:1a:1b:
09:0a:e0:12:60:a1:cf:e0:98:c2:5a:18:4a:3b:0c:f7:b1:f7:
b3:4f:88:1a:40:ae:5d:b9:59:4b:35:60:22:67:45:0f:7d:87:
3f:b2:1a:ba:47:02:eb:e5:7f:8d:ce:88:46:6f:1f:09:9b:ca:
42:7b:d0:29:8e:3e:10:a5:31:1f:1d:25:ec:34:5d:4b:31:4b:
48:1b:34:c3:15:27:57:d7:91:8f:fb:ca:a4:8b:3a:3f:ed:c1:
4a:01:ba:a8:b5:01:c5:0c:ab:71:dc:d2:a1:c3:0e:97:d0:0c:
31:cc:05:b5:b7:08:1e:7a:70:f7:85:f8:8d:37:65:8c:a6:fb:
f7:a2:47:09:c4:04:e1:9b:10:81:aa:43:28:cb:69:93:9f:9b:
40:ad:a2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:50 2023 by rpki-client on console-ams.rpki-client.org