Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/M0GHJRyBTsDgOvwVGS7FvL7mfas.roa
File: M0GHJRyBTsDgOvwVGS7FvL7mfas.roa (raw, json)
Hash identifier: jS/p3YDIlzfgGhTgs9phWoym1X8Z23IJdbYwG6W7p24=
Subject key identifier: 33:41:87:25:1C:81:4E:C0:E0:3A:FC:15:19:2E:C5:BC:BE:E6:7D:AB
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/M0GHJRyBTsDgOvwVGS7FvL7mfas.roa
Signing time: Thu 15 Sep 2022 02:43:43 +0000
ROA not before: Thu 15 Sep 2022 02:43:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 123.205.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=334187251C814EC0E03AFC15192EC5BCBEE67DAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:45:a1:ac:1b:50:40:ce:31:06:e8:83:23:f9:
66:33:f7:61:f9:a2:ee:4d:b9:5b:e7:87:fb:fb:30:
95:cb:1d:dc:cd:1a:57:62:dc:f6:ff:22:4b:04:7f:
94:84:26:19:42:97:04:a1:46:f5:b1:69:06:18:b3:
cd:f9:72:61:f9:f6:fb:9f:d8:85:6f:9d:26:a2:95:
4e:1a:9d:cd:04:5b:0e:60:b8:41:bd:7d:75:de:a1:
ff:58:6c:7f:86:92:cb:76:7c:62:89:a8:5e:8f:bb:
0f:5e:8d:28:a4:11:8c:30:fa:88:98:55:89:53:b7:
da:77:86:7b:c3:92:ec:1f:6b:f9:2e:16:01:93:7c:
f8:e6:0e:a5:ef:db:19:85:b0:44:57:5f:c9:c0:7b:
0a:b2:27:99:3e:8d:4e:6b:4b:1e:38:7b:52:2a:05:
03:39:df:ae:69:82:b4:ee:34:16:8d:8c:b0:38:3c:
0c:77:8b:e4:e7:a8:f3:20:e4:da:75:fd:5a:43:a3:
58:b5:99:e9:55:8e:94:76:0f:cc:6f:a0:e6:f4:a4:
73:17:3a:ec:d0:2b:90:d0:f1:17:6f:01:25:04:ea:
59:ff:09:54:b4:36:0f:3b:ee:a6:bb:8f:08:eb:93:
ed:2f:61:96:83:76:6e:94:8e:dc:93:66:47:98:eb:
25:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:41:87:25:1C:81:4E:C0:E0:3A:FC:15:19:2E:C5:BC:BE:E6:7D:AB
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/M0GHJRyBTsDgOvwVGS7FvL7mfas.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:4e:f4:dc:48:4d:67:cb:6a:ff:ab:2b:43:96:94:32:0d:7d:
a8:b2:78:4e:3d:48:31:37:3f:61:0f:64:10:dd:0c:98:86:ee:
cb:a2:b8:27:34:d9:0e:c2:cb:1c:4d:0a:ad:ec:2f:42:6a:bd:
72:93:78:fe:6f:26:6b:cb:2c:ee:79:a9:6c:b1:da:82:dc:86:
b2:e5:da:5c:f7:07:a7:7b:d3:5e:bf:08:e0:0e:74:38:2b:ca:
53:29:d3:3e:54:c7:dc:5e:bc:20:f9:79:21:50:da:1e:ea:aa:
13:9c:97:25:fd:0d:29:d5:dc:94:85:91:78:de:56:3b:b6:0f:
79:92:40:31:fb:ee:56:7a:4e:bc:31:59:d4:67:07:3e:22:99:
ce:df:9e:5b:b2:14:93:39:4f:38:6a:8e:4b:54:9b:23:bc:70:
9a:f1:dc:8e:10:c8:1c:ed:db:26:41:15:be:98:09:e5:fb:0d:
34:4f:cf:a6:36:36:37:d7:0e:fc:b7:87:2d:23:0f:be:5a:8f:
30:e4:0c:8a:19:40:e6:39:17:59:16:cb:2d:8c:30:4c:61:58:
c5:67:08:dc:c9:d5:b9:d4:68:e1:c8:cf:a9:77:73:d3:40:93:
92:93:31:94:ab:17:f6:9a:47:6f:cc:0c:d0:ce:57:69:ea:a6:
aa:49:41:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-fra.rpki-client.org