Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/MQD6n8Vr56KihIsSJUltR-HOqiU.roa
File: MQD6n8Vr56KihIsSJUltR-HOqiU.roa (raw, json)
Hash identifier: zkbIwnBpMrlQzCAdYrG3jKDggJzL2xQu4Y308kXx7S4=
Subject key identifier: 31:00:FA:9F:C5:6B:E7:A2:A2:84:8B:12:25:49:6D:47:E1:CE:AA:25
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0C6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/MQD6n8Vr56KihIsSJUltR-HOqiU.roa
Signing time: Thu 15 Sep 2022 02:43:32 +0000
ROA not before: Thu 15 Sep 2022 02:43:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 192.72.4.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3183 (0xc6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 15 02:43:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3100FA9FC56BE7A2A2848B1225496D47E1CEAA25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:7f:44:09:74:8a:29:e0:88:72:78:2b:75:
be:f8:68:ae:17:d5:dd:ee:a8:16:b6:8c:31:e7:cc:
c2:1a:62:be:fb:1d:49:af:d4:58:29:c2:83:3c:03:
e0:02:94:6b:e1:4f:0b:ef:f8:b1:62:87:35:6f:e1:
09:2a:b1:dc:9e:1b:dd:a3:61:2a:d1:8b:d0:e9:51:
bc:94:0b:87:7b:57:d2:c5:34:32:e4:ed:e3:a3:19:
f2:38:61:fb:7a:52:1d:8d:77:15:04:3a:7e:91:d9:
4e:4c:1b:b7:b9:0f:d5:d6:27:d7:d3:cf:12:42:fa:
70:20:ce:56:38:f4:70:e9:56:bc:ea:80:cd:c9:18:
f5:0b:79:98:f7:55:b4:f2:d5:f8:52:a7:ce:21:08:
9f:3a:8b:60:bc:40:36:e0:a0:d2:c2:11:03:e1:11:
90:19:f9:46:d7:b9:4c:9e:c7:78:96:49:39:4a:0c:
8b:be:a5:d5:99:e0:e3:ab:ba:9a:9c:e8:0b:ea:bd:
aa:ad:f9:ce:89:b8:37:8a:76:09:e5:50:09:22:ba:
68:22:be:5f:c1:b9:fc:69:8f:7f:4d:a4:9b:a8:20:
df:84:e7:d6:b7:b6:ab:a7:da:04:cc:b0:9e:3c:b4:
12:16:f8:cd:cf:fb:0a:30:63:47:67:12:d8:21:17:
92:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:00:FA:9F:C5:6B:E7:A2:A2:84:8B:12:25:49:6D:47:E1:CE:AA:25
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/MQD6n8Vr56KihIsSJUltR-HOqiU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.4.0/22
Signature Algorithm: sha256WithRSAEncryption
22:7f:d3:b1:17:3f:d6:ca:88:b7:05:d7:6e:18:5b:a3:1a:60:
78:65:e2:f5:f7:b7:87:8c:c7:65:93:6f:66:23:8e:65:5e:42:
02:d0:c6:e3:0a:b7:54:80:a2:6d:fb:bc:1e:6f:1a:ee:70:37:
c3:b2:61:b3:b8:6f:c3:32:5c:9c:75:32:11:ac:28:88:a8:c9:
6b:55:ba:8b:65:68:3a:19:88:cb:12:4b:12:5f:5d:ee:ed:e7:
f9:91:46:5a:bd:40:5e:d5:57:74:83:5d:f9:3b:b4:58:08:a8:
1f:33:69:12:a3:4a:b5:72:0b:fe:de:78:fd:dc:f8:6c:69:ba:
58:3d:c3:af:8b:ff:6c:07:bd:da:8a:11:3d:6f:95:f2:75:61:
25:9d:95:bf:8b:36:20:44:f4:50:a6:ad:c2:86:6a:06:7f:2a:
4d:41:aa:1e:5a:91:55:83:55:ee:3c:7d:81:d1:ae:ff:0b:a8:
22:fd:a3:2b:3f:4c:5b:1b:3d:f1:6f:9b:a6:82:f6:86:65:0e:
c2:8b:7f:d8:ee:71:de:78:79:ff:40:bd:85:24:c3:ab:7e:4e:
55:9f:2f:1c:fb:59:8d:09:cf:08:a3:87:68:e2:31:dd:c9:14:
ee:c7:32:df:e7:4d:a6:3a:43:7e:93:42:fa:ca:8b:48:c0:dc:
1e:e9:4c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:59 2023 by rpki-client on console-ams.rpki-client.org