Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/K5j5F8yBsP7qXShBZCVEb_MxHWI.roa
File: K5j5F8yBsP7qXShBZCVEb_MxHWI.roa (raw, json)
Hash identifier: H3erY0ZjhVvgTJ5/3Rmpo/bB7ziUyBSrFAAJ1NKORIQ=
Subject key identifier: 2B:98:F9:17:CC:81:B0:FE:EA:5D:28:41:64:25:44:6F:F3:31:1D:62
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/K5j5F8yBsP7qXShBZCVEb_MxHWI.roa
Signing time: Thu 15 Sep 2022 02:43:52 +0000
ROA not before: Thu 15 Sep 2022 02:43:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 45.64.228.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2B98F917CC81B0FEEA5D28416425446FF3311D62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:36:d2:e5:2b:36:71:2a:26:5d:18:21:76:
7f:92:c7:7c:01:ec:a1:7f:5e:ba:aa:17:0c:97:9c:
fd:b4:94:1d:44:ee:02:6c:ff:cf:75:b8:47:60:65:
a4:18:ce:0c:0c:83:b3:7e:ea:b6:c6:a3:01:43:ed:
cb:cd:93:26:27:5c:2a:76:60:eb:2a:b1:df:9b:0a:
fa:2d:a7:0a:50:20:dc:1c:9d:08:7c:a8:2b:89:c0:
6b:dd:96:df:a7:85:35:b5:2b:db:a3:fa:cf:52:3e:
e4:43:0d:f1:38:ef:f4:ab:84:90:c7:c7:46:ab:24:
35:5b:9a:97:1e:75:02:5b:93:dd:b6:06:85:e1:99:
f4:56:2d:78:8c:eb:30:a9:4c:94:22:c2:96:e1:49:
6e:06:29:c8:8b:63:d0:37:80:5d:60:62:a1:4d:64:
cc:fe:22:8f:59:50:a5:c0:68:2f:b2:17:76:9c:65:
88:2e:65:ab:c3:64:c4:85:0d:be:12:34:97:9c:98:
2c:9a:e6:60:b9:66:f1:4d:42:f5:70:60:f8:78:d3:
d4:4e:f8:ab:ed:b0:d3:f8:68:74:96:99:41:9d:a8:
e8:9f:ba:8c:59:1e:08:35:b2:e5:e3:87:6a:6a:6c:
0a:17:05:7d:44:f2:13:48:46:7b:e1:a7:63:85:64:
32:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:98:F9:17:CC:81:B0:FE:EA:5D:28:41:64:25:44:6F:F3:31:1D:62
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/K5j5F8yBsP7qXShBZCVEb_MxHWI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.228.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:82:27:e4:10:b9:73:48:34:eb:93:f6:da:e6:5c:95:b3:cb:
6d:2b:e8:74:c5:6b:dd:28:38:f2:b7:83:60:10:10:dc:26:88:
c4:da:89:e9:5c:07:66:00:af:c9:f7:b7:27:5c:97:5a:1f:20:
e6:a3:94:a8:80:4c:4e:3a:cd:85:cf:56:f3:db:96:fc:3d:93:
9d:8d:ab:50:09:5c:2e:47:12:ca:ad:a4:c1:b4:17:c4:63:ba:
2b:25:22:79:d8:6c:83:91:ed:5c:8d:e3:38:8d:f0:e8:bf:f5:
f1:ab:97:2c:6c:f3:00:4b:eb:32:4a:d8:c2:94:80:7e:c8:b0:
01:a2:10:13:3e:78:9d:80:e1:49:71:ad:a0:ec:03:46:1b:41:
67:ff:7b:a3:2a:b7:06:c0:60:05:f0:f6:4b:37:58:22:d8:c4:
4c:05:59:33:a5:6d:f7:eb:67:80:3b:03:ed:be:0a:dd:8f:88:
fa:12:92:8e:ac:14:fe:95:f4:a1:22:1c:17:9e:20:54:56:6d:
e8:5b:f3:9b:bb:05:2d:d9:0c:a8:19:a7:2f:a1:ba:94:c8:a1:
d6:22:62:a9:24:5c:e9:7b:fd:45:a8:c8:b2:b3:69:be:54:44:
37:15:b4:77:d4:6c:01:09:8b:a3:28:89:d6:65:5f:6c:bc:fe:
1b:08:e2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-fra.rpki-client.org