Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/McsFO5b-jFjANzM8IsVHcDx1OjA.roa
File: McsFO5b-jFjANzM8IsVHcDx1OjA.roa (raw, json)
Hash identifier: eUwHktOTb5coeYYDn8yG8yM/ep1wThGzC6qzQ2FZ4M8=
Subject key identifier: 31:CB:05:3B:96:FE:8C:58:C0:37:33:3C:22:C5:47:70:3C:75:3A:30
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 11C5
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/McsFO5b-jFjANzM8IsVHcDx1OjA.roa
Signing time: Tue 15 Aug 2023 09:49:23 +0000
ROA not before: Tue 15 Aug 2023 09:49:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 198949
IP address blocks: 113.196.242.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4549 (0x11c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 15 09:49:23 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=31CB053B96FE8C58C037333C22C547703C753A30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5d:9b:67:fb:1a:f7:e0:2a:bd:df:c1:6b:30:
1e:f0:8b:e6:cd:cd:5a:a1:64:00:72:77:4c:05:11:
71:5f:e8:0b:86:4d:e3:d0:e6:03:45:d8:c8:54:32:
8c:22:48:5e:ac:37:52:be:16:83:c4:82:a1:13:62:
e6:d3:7f:98:b3:f2:13:66:c5:90:a2:66:6b:50:45:
60:e2:50:03:db:bf:2b:cb:e2:1e:97:9c:0e:2b:f7:
75:52:b1:ec:f7:ff:07:c0:d9:80:8a:2c:97:0e:0e:
50:ff:24:23:cb:11:0f:61:69:c4:cd:f1:25:b1:a7:
15:9c:5f:87:ed:ec:bd:9d:23:f7:0c:1c:f2:b3:29:
f7:97:3e:2a:6b:99:dd:26:8c:ad:ca:c2:70:c7:4d:
c8:6e:cb:b9:98:b8:0a:ef:08:30:84:6b:e6:3b:23:
d1:43:fb:64:db:98:29:c7:ab:02:4c:4d:7a:f4:70:
fc:20:c5:a6:75:be:f0:23:c7:0d:b6:76:f7:96:36:
72:37:dd:f7:5d:8b:51:c2:00:39:ce:76:67:3c:b2:
49:89:61:91:6a:70:89:0b:0f:8c:1c:35:bb:6a:b4:
25:f5:41:7c:63:73:c2:ec:3a:6d:b3:eb:41:f8:f0:
8d:34:03:53:0f:bb:b2:7c:c6:7f:81:52:a8:7b:5f:
33:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CB:05:3B:96:FE:8C:58:C0:37:33:3C:22:C5:47:70:3C:75:3A:30
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/McsFO5b-jFjANzM8IsVHcDx1OjA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.242.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d2:a6:4b:af:e0:33:5d:56:95:da:0f:6a:12:b8:00:ae:17:
6e:ae:75:6a:2f:28:4b:5b:ea:4e:fc:1f:5c:ea:2f:1f:3f:94:
04:1b:7c:4c:3a:17:5a:e7:59:8a:a9:fc:f8:0a:db:3a:ba:a1:
fe:e6:1d:7e:59:5d:79:98:4b:5e:23:80:8a:5a:e8:2b:9f:43:
59:16:a2:e7:5c:c0:9b:84:50:b2:72:fd:46:2c:5f:c4:93:d1:
aa:77:25:44:f3:97:0e:53:1c:44:ac:7a:26:86:c8:27:ac:67:
eb:47:52:4b:80:81:3c:fe:c4:b9:16:83:22:c1:4a:90:86:1f:
41:07:4e:32:ac:33:cb:38:7e:e0:cf:0b:eb:85:dc:51:4d:47:
54:42:d2:26:f6:d9:58:26:0b:69:de:21:29:05:e0:e7:36:29:
59:4e:41:82:e3:b8:f7:ff:d1:05:6b:18:00:c1:5c:4b:64:60:
85:64:60:3a:0c:11:39:6f:ee:db:28:a1:1d:3d:d8:5f:40:38:
11:c8:26:40:ff:5a:23:88:df:38:6f:83:f4:47:fb:15:a8:44:
81:bc:88:b6:eb:60:9a:44:ad:3a:8a:e5:2e:1a:69:00:87:59:
09:57:84:00:ce:26:44:a8:a9:eb:e8:d0:12:3f:85:f2:49:f0:
bd:ae:80:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:50 2023 by rpki-client on console-ams.rpki-client.org