Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/IZ4UOq4BR6vHYcyHu1wFxbjCC9s.roa
File: IZ4UOq4BR6vHYcyHu1wFxbjCC9s.roa (raw, json)
Hash identifier: j5FB6wH4qU8GGZduMM80Hfqhi9qKHAT0aIwfKvew6FA=
Subject key identifier: 21:9E:14:3A:AE:01:47:AB:C7:61:CC:87:BB:5C:05:C5:B8:C2:0B:DB
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IZ4UOq4BR6vHYcyHu1wFxbjCC9s.roa
Signing time: Thu 15 Sep 2022 02:43:40 +0000
ROA not before: Thu 15 Sep 2022 02:43:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9922
IP address blocks: 122.147.24.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=219E143AAE0147ABC761CC87BB5C05C5B8C20BDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:95:f7:05:91:a4:e9:2b:00:f4:14:83:49:
cb:b9:66:c0:ec:53:bf:49:d8:64:c3:18:cc:96:b8:
d1:fe:38:c7:99:b8:51:86:33:b0:aa:3a:a1:3f:85:
cb:ed:47:a4:29:e6:18:94:2c:a6:67:fa:a6:95:71:
b5:f9:ed:0c:1e:a5:97:d3:3d:81:83:32:d2:d4:b7:
46:56:ff:e1:5e:6c:32:af:d4:0c:e8:99:c1:47:63:
86:ea:d6:ab:c2:4b:e2:16:de:2c:17:06:37:60:66:
72:0c:93:2b:23:5b:f9:b5:9d:ad:98:1a:8d:92:98:
90:de:76:1d:ad:e5:7b:3b:ed:54:58:53:92:ba:a8:
83:58:32:ef:69:c5:59:0e:a4:c3:d8:fd:04:b0:bc:
a8:55:c6:1b:78:ad:17:a5:fc:97:f7:1f:a1:f4:5c:
fa:cd:18:ac:e8:c0:2d:51:dc:17:91:7d:71:c5:90:
91:d6:2d:f0:be:c3:0f:a6:38:97:cd:d2:e1:ac:a2:
12:f6:3c:8a:25:65:65:42:9d:9b:c7:fb:ee:90:52:
9c:20:6b:1b:30:01:ca:0b:1b:17:c2:19:11:71:1f:
bd:0e:e5:3a:7a:b2:4a:b8:20:01:9d:92:7b:05:f8:
be:4f:3d:cd:fb:b8:42:68:80:9a:97:df:26:d2:af:
1b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9E:14:3A:AE:01:47:AB:C7:61:CC:87:BB:5C:05:C5:B8:C2:0B:DB
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IZ4UOq4BR6vHYcyHu1wFxbjCC9s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.24.0/21
Signature Algorithm: sha256WithRSAEncryption
04:30:20:09:89:0e:51:b7:71:b9:6a:4f:8f:b8:25:55:3b:75:
48:b4:6f:a1:c2:b2:7e:f1:d5:fe:a6:cf:d2:12:45:09:0e:76:
a2:5f:f0:03:32:24:a0:10:f5:6c:23:7c:0d:aa:5e:08:73:03:
8a:f7:de:e0:f8:7a:53:1b:95:b1:59:c0:83:5f:14:0c:91:64:
c3:09:3f:84:7c:e4:19:3f:fc:cb:6a:63:25:1f:bf:f9:37:f7:
d2:ea:4d:58:00:79:01:d5:3a:3c:97:7d:d2:8b:42:99:04:5a:
07:f0:b8:61:76:5d:a5:2f:52:84:38:f3:54:e9:c3:ba:18:bd:
bc:d8:23:73:bb:8c:e5:70:68:2e:f7:7e:8d:a1:71:07:87:7d:
7f:ee:b7:90:f6:75:73:43:e1:4b:53:d1:ce:43:35:02:ad:28:
bc:ce:3d:e1:45:7a:90:84:2f:48:f7:5b:99:f6:b1:27:d0:9f:
b7:de:cd:71:00:56:54:73:42:25:91:c5:5b:98:32:04:f2:bd:
7b:9f:23:53:dc:8e:ce:8c:9d:f0:c2:51:31:1a:ba:fd:4d:82:
cd:16:eb:c7:55:64:b0:28:f5:2e:4e:6a:f7:c8:f1:33:bd:1e:
41:02:7f:60:be:60:bc:ff:ba:81:62:53:81:e5:b8:50:2b:1d:
2b:b8:09:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org