Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/L0L8CDBiK0f_wEGg3xIh1vnllGI.roa
File: L0L8CDBiK0f_wEGg3xIh1vnllGI.roa (raw, json)
Hash identifier: QtSqGpBeb7wh/TfnJiRvU9QtCBPGmjmtBxqVZuRfKlg=
Subject key identifier: 2F:42:FC:08:30:62:2B:47:FF:C0:41:A0:DF:12:21:D6:F9:E5:94:62
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10A0
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/L0L8CDBiK0f_wEGg3xIh1vnllGI.roa
Signing time: Wed 01 Feb 2023 10:28:48 +0000
ROA not before: Wed 01 Feb 2023 10:28:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 45.64.228.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4256 (0x10a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:48 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2F42FC0830622B47FFC041A0DF1221D6F9E59462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:79:22:fe:19:54:30:08:6d:93:3a:6b:7d:9d:
ba:08:3a:be:69:82:6f:c9:20:02:be:61:3e:2b:fe:
06:f7:3b:57:e9:7c:75:82:50:cb:a2:94:18:d6:d3:
41:51:eb:d1:1b:aa:0b:9b:13:20:d1:1d:c8:fe:5b:
23:58:a1:40:8b:17:d3:5d:c2:0f:fb:4e:9b:87:ca:
90:bb:b6:a6:0e:4a:85:2a:e5:a4:22:70:4b:28:47:
88:0d:c2:28:65:85:a8:a5:73:76:8e:dc:d7:53:0d:
8f:79:73:88:7d:de:c1:93:70:cd:c3:98:00:85:f7:
ed:6d:02:a2:9a:a8:ac:ed:d1:65:17:30:ce:8a:ad:
ca:7b:94:03:ae:60:4b:eb:35:8f:23:db:fb:20:74:
21:11:7d:f0:00:f1:b5:c5:2a:98:bd:0b:d2:b7:7d:
e4:53:91:50:d5:b8:bc:55:c9:a9:f3:a2:e8:09:b9:
13:b3:5a:6b:5f:78:18:14:31:29:4a:b7:a2:2d:0b:
6d:8b:bc:97:3a:7d:fc:e6:21:e7:3d:37:6e:1d:29:
39:0a:79:d3:bc:c3:60:1f:53:31:6a:59:c3:56:13:
21:41:62:d1:86:7a:bc:85:b6:67:89:34:3b:a1:40:
25:d4:b3:e0:78:fc:c0:e9:e6:3c:8c:e2:52:29:d3:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:42:FC:08:30:62:2B:47:FF:C0:41:A0:DF:12:21:D6:F9:E5:94:62
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/L0L8CDBiK0f_wEGg3xIh1vnllGI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.228.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:fe:78:83:92:90:fd:62:22:77:5d:d2:1d:47:e2:d4:95:a1:
0d:4e:8f:01:55:3a:9c:c7:16:12:cb:fb:b2:2e:52:ce:e3:b1:
32:db:e6:39:b6:6c:75:ee:12:77:1e:ac:bb:18:e8:5a:ba:36:
91:49:e2:7f:02:d8:68:79:a7:79:e8:54:80:72:77:c8:b8:ea:
e0:4e:d0:10:ab:0d:73:98:4f:20:6d:c4:66:8e:85:3b:f1:cb:
b6:ad:6f:40:d8:ea:92:4b:82:75:80:e1:17:48:84:30:e1:56:
a7:c4:b0:07:41:f3:5f:12:5a:87:24:e6:8f:01:d1:56:28:16:
78:84:94:07:a6:a5:41:c4:b5:c1:10:11:d9:87:a8:4d:b9:a1:
bb:36:74:93:58:6c:6e:b0:f7:2a:0c:26:c3:4e:a8:44:bb:9a:
95:e6:f8:67:a8:a3:53:eb:28:9e:c8:8e:ce:ee:93:ea:ed:ef:
1d:a3:4c:22:89:f7:2c:51:45:1f:51:c1:80:8d:aa:df:fa:ca:
64:ee:ad:db:a2:a1:1e:db:65:29:fe:a7:b9:d2:de:7e:4d:ed:
0a:d6:34:11:d5:cd:9f:a4:ec:22:e5:68:31:51:e8:44:ee:30:
d4:eb:c9:42:d0:35:05:93:c7:f6:23:3e:62:e4:23:ad:f8:c8:
33:d9:01:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:50 2023 by rpki-client on console-ams.rpki-client.org