Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/H-OyOZ6H1-ip9Galr7FzIUIZftw.roa
File: H-OyOZ6H1-ip9Galr7FzIUIZftw.roa (raw, json)
Hash identifier: AZYT1VboxaFBs3ccLnOCtTKblTr2FMpPbJMxnlM4sbY=
Subject key identifier: 1F:E3:B2:39:9E:87:D7:E8:A9:F4:66:A5:AF:B1:73:21:42:19:7E:DC
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/H-OyOZ6H1-ip9Galr7FzIUIZftw.roa
Signing time: Thu 15 Sep 2022 02:43:14 +0000
ROA not before: Thu 15 Sep 2022 02:43:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 103.234.40.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1FE3B2399E87D7E8A9F466A5AFB1732142197EDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:eb:66:c9:94:79:7e:5e:b4:a2:06:21:c2:
ee:6f:d7:25:f0:38:9e:f4:a4:13:ce:c8:03:84:7f:
5f:d9:53:7d:e6:da:0a:1c:fe:b3:99:2f:88:6b:7b:
6a:fc:6b:01:b2:1a:58:dd:36:10:99:62:45:a9:5c:
c0:4f:c8:bb:23:32:4f:3e:d9:88:45:4d:08:93:76:
06:7a:3c:2a:07:73:5a:c3:37:ef:02:ee:cd:71:2c:
f7:bb:7b:9c:f0:b4:26:96:b8:37:a1:dd:92:b5:3c:
98:f1:7a:10:01:9b:dd:9a:29:1a:cf:c4:ca:92:2d:
34:d6:82:4d:46:26:65:65:5e:2b:98:e0:ac:d0:7f:
3d:eb:3e:cc:3b:f7:4e:a3:66:1e:f7:6b:f5:b0:7b:
79:08:32:2a:ce:8d:9f:44:de:86:0c:35:74:18:74:
63:b2:3f:26:a5:df:22:59:34:1b:b9:2d:cd:c7:9b:
8b:9d:04:d8:c9:1f:b6:23:9a:59:42:9a:bf:78:3b:
4a:a9:3e:34:06:3f:0e:c4:fe:41:a0:da:46:42:cc:
ee:9f:e1:3b:58:1c:af:5e:da:6a:61:e5:ae:08:40:
fd:d7:a5:d8:58:4c:4a:66:05:4f:72:52:1d:d9:41:
26:b5:11:fa:6a:c6:92:f8:8c:17:16:6d:d4:8e:30:
aa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E3:B2:39:9E:87:D7:E8:A9:F4:66:A5:AF:B1:73:21:42:19:7E:DC
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/H-OyOZ6H1-ip9Galr7FzIUIZftw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.234.40.0/22
Signature Algorithm: sha256WithRSAEncryption
be:e4:cc:c4:9a:1c:b4:b4:b8:c6:18:ee:08:cc:c4:4a:6d:e4:
dc:f8:e4:fb:32:68:58:1e:b9:36:00:42:16:ae:ea:2b:e5:da:
d6:53:d7:7d:60:f8:f0:46:ec:ac:e1:5a:67:89:e3:30:04:1b:
8c:03:9c:dd:bb:25:ce:e1:ab:c2:55:0d:d2:52:9c:d9:7f:94:
91:1f:06:ba:1d:ce:ac:ec:60:00:74:d0:53:03:fa:c6:cd:6a:
16:93:bc:b4:a3:48:5e:cf:ad:e9:bb:1e:d8:94:00:7e:3e:45:
ae:1d:53:3e:31:94:59:c1:aa:fb:35:62:8f:3c:51:a3:a7:45:
4e:75:6c:d4:36:65:79:4e:70:46:41:09:e7:da:42:5d:c4:ec:
e0:c9:a6:08:c9:4d:8a:14:a0:81:b5:0f:c4:3e:8b:37:b6:03:
cd:b3:01:0a:7b:62:f7:b0:bd:98:08:74:58:84:f6:80:07:41:
33:9c:f1:fc:bd:b4:e3:47:a6:90:9f:d8:44:b3:4f:26:90:f9:
ea:45:8e:55:a2:34:98:be:09:fa:0a:a5:ca:2d:f4:5a:94:b1:
f7:1d:2a:ce:ca:b9:cd:4b:ad:88:66:e2:60:37:60:e7:93:69:
77:63:d0:8d:c2:2e:64:e0:d1:27:d8:c9:01:8d:67:73:33:58:
78:ea:17:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-fra.rpki-client.org