Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/JTwzvk-JnG4PtXkimjEiMxUANX8.roa
File: JTwzvk-JnG4PtXkimjEiMxUANX8.roa (raw, json)
Hash identifier: 4cLF9wRGP9dJxS6BBBpgQKJltpb1DJP3Gp1hv2LituM=
Subject key identifier: 25:3C:33:BE:4F:89:9C:6E:0F:B5:79:22:9A:31:22:33:15:00:35:7F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10CB
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/JTwzvk-JnG4PtXkimjEiMxUANX8.roa
Signing time: Wed 01 Feb 2023 10:29:03 +0000
ROA not before: Wed 01 Feb 2023 10:29:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131586
IP address blocks: 175.183.136.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4299 (0x10cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:03 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=253C33BE4F899C6E0FB579229A3122331500357F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:66:9c:81:a3:cb:38:68:8f:61:8f:5b:48:43:
47:0f:66:f6:6d:97:03:80:44:8b:08:16:34:47:51:
5e:83:09:af:1e:12:0c:81:e4:79:dd:f8:d0:27:f6:
15:de:40:d7:96:51:1e:4b:0c:96:30:a2:b8:fd:f0:
30:2c:0a:33:a1:1b:38:3b:ca:e4:50:47:9c:11:1f:
15:b3:b4:48:10:07:6b:74:df:f6:2e:52:9e:8b:dd:
5b:aa:69:8f:65:20:24:7e:1f:6b:8c:40:f6:e4:92:
45:6c:77:26:7f:fc:f5:84:23:2f:5e:ef:66:3f:79:
ea:0b:fd:a5:73:9d:ac:ac:da:53:9d:c3:44:a8:01:
1c:d0:54:3f:ed:a3:54:d5:0c:6c:6b:fe:8c:75:80:
0c:ae:5f:81:bf:fb:4b:b3:d5:2f:a0:44:a7:96:84:
5f:e7:7b:99:65:73:3c:82:e1:2d:e4:49:d3:f1:93:
59:ae:08:50:b1:97:a4:7d:6b:2b:cb:fb:ec:a7:0d:
1f:ab:67:0a:25:0a:4c:51:c1:34:f7:52:a7:f2:df:
70:ad:59:2e:8b:77:32:5e:09:39:8d:c4:d1:13:71:
06:6b:d0:7e:29:27:99:7f:6b:7f:56:59:10:f4:20:
07:9b:2e:d7:33:7e:5d:c8:4d:f4:f4:e2:ec:67:7d:
4c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3C:33:BE:4F:89:9C:6E:0F:B5:79:22:9A:31:22:33:15:00:35:7F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/JTwzvk-JnG4PtXkimjEiMxUANX8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.136.0/24
Signature Algorithm: sha256WithRSAEncryption
18:28:1e:a1:12:2a:54:8b:1c:9c:2f:04:5e:cb:aa:d4:68:9b:
80:2c:02:c6:12:b8:9f:3a:c3:24:85:1a:82:ed:14:f5:23:d4:
48:08:19:de:a1:63:64:8e:9a:c5:e3:24:fa:fd:5f:ad:fc:55:
81:0b:28:91:c7:0d:30:ad:c7:72:65:6f:97:81:ca:2a:6e:de:
03:73:71:68:7c:64:38:3b:a7:18:1e:f5:2c:c5:ce:04:04:e8:
37:15:ba:4c:38:9a:21:25:66:ed:e0:7d:69:34:96:54:f3:69:
d4:58:24:27:a9:ee:99:c2:b7:c4:4c:91:f9:5d:36:0b:ac:3c:
4c:cd:a2:ff:85:25:f1:4d:a7:23:1c:f3:4c:5c:56:ae:6b:95:
be:12:b2:49:4f:7f:c0:cd:c8:46:1b:c6:9f:33:53:5f:d9:c1:
9e:2b:f0:93:87:56:f8:e6:e4:0a:cf:fd:be:7e:01:42:9c:e7:
6b:32:83:da:39:1b:83:4c:63:27:28:8a:77:f1:e9:ad:28:4b:
42:46:ef:57:4a:3c:ca:d0:61:3e:8d:09:27:c5:f9:19:56:47:
bf:36:d0:3a:e2:57:c8:05:e2:bd:1f:af:db:21:a9:c1:b0:76:
75:ad:83:3f:66:31:c6:49:d3:0f:79:94:24:ef:d9:ee:7b:be:
a3:2b:69:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:15 2023 by rpki-client on console-fra.rpki-client.org