Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/N6QfWQhbtj8Ak8OXu8Yoe5GMfo4.roa
File: N6QfWQhbtj8Ak8OXu8Yoe5GMfo4.roa (raw, json)
Hash identifier: 83HTL7LNsRd2YuwscseYK0p8cQDjh8X/9RlZKZr46xI=
Subject key identifier: 37:A4:1F:59:08:5B:B6:3F:00:93:C3:97:BB:C6:28:7B:91:8C:7E:8E
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1101
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/N6QfWQhbtj8Ak8OXu8Yoe5GMfo4.roa
Signing time: Wed 01 Feb 2023 10:29:20 +0000
ROA not before: Wed 01 Feb 2023 10:29:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 112.104.0.0/15 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4353 (0x1101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:20 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=37A41F59085BB63F0093C397BBC6287B918C7E8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:28:60:2c:b8:99:3c:ae:a0:28:f1:88:f1:92:
30:ba:2e:4e:15:ae:dd:5c:94:dc:03:41:c9:ac:d0:
20:36:4c:6b:04:0f:3d:88:96:46:e9:16:a4:e0:48:
0d:6a:2e:5d:ad:37:b4:ea:04:f6:d6:95:3b:7b:bf:
c8:b0:a1:78:ad:a9:23:d1:88:b2:b3:5e:35:0b:74:
34:87:02:e5:f7:65:c2:85:3d:e1:44:3a:83:9b:e5:
f8:83:79:09:85:ad:de:73:c9:f4:a2:ef:95:e4:50:
89:cb:e9:9e:fd:52:fd:51:ce:06:b5:73:97:53:10:
54:8a:b3:4d:a0:6f:61:d2:70:ee:83:2a:53:18:08:
96:4e:e6:a8:9a:c0:5e:6c:83:1e:3e:56:d9:d4:a7:
43:6a:99:20:5d:44:06:51:c7:40:42:bb:b6:c3:84:
27:0f:f0:8c:a6:a8:82:b0:ca:ec:ec:9d:45:3c:ac:
54:a7:06:51:3d:98:87:d9:15:60:9f:8d:1a:26:92:
52:9e:ad:00:3d:0a:d4:24:c9:3c:2c:05:74:66:94:
3d:5b:67:ee:d0:a7:6f:b8:46:31:45:4e:18:1b:7c:
21:b9:99:d2:2c:78:0f:8c:37:c4:2c:41:19:c4:df:
b1:22:82:39:30:c8:a7:ad:a6:d8:35:3a:10:28:27:
7b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A4:1F:59:08:5B:B6:3F:00:93:C3:97:BB:C6:28:7B:91:8C:7E:8E
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/N6QfWQhbtj8Ak8OXu8Yoe5GMfo4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.104.0.0/15
Signature Algorithm: sha256WithRSAEncryption
57:e9:a6:c8:1c:70:34:f3:bc:d7:58:06:23:7e:8c:84:d8:aa:
52:fa:27:96:c3:25:29:a2:46:35:f9:9e:c9:d4:d4:2c:d9:1b:
5f:88:db:04:0c:b3:e6:63:42:45:69:62:63:26:d4:e6:9f:c5:
a4:e2:45:04:fa:9b:96:b1:b3:f8:af:f5:18:2c:7a:ce:ee:56:
a6:2a:1d:d2:39:f9:9a:de:df:2e:81:9b:a3:42:3f:01:63:10:
03:00:6a:82:db:a3:cf:6a:2e:b2:62:c5:36:d5:23:87:46:13:
00:8b:db:11:ec:53:43:3d:70:9d:39:fd:9e:e0:12:95:e4:f8:
51:f5:f8:9b:44:c4:93:b7:7f:aa:91:f8:ce:08:19:f6:08:10:
60:25:ae:9f:bf:72:55:db:c0:09:66:20:4e:1e:f8:02:df:60:
d0:d0:ad:37:c1:d3:27:02:7d:9a:9f:58:ca:5f:82:1d:ec:5a:
f9:45:68:09:63:d0:3a:5d:9b:09:1e:70:75:b8:19:01:d5:59:
0c:37:9e:39:57:8c:73:90:a8:cd:9c:c3:6b:25:68:8e:d4:95:
9f:5e:2a:b9:c6:9c:97:7a:8d:e1:68:8f:85:a3:f9:b8:72:32:
5b:82:5b:d5:de:20:5d:fb:d5:47:39:31:37:da:f3:b6:62:79:
38:41:81:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:50 2023 by rpki-client on console-ams.rpki-client.org