Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/NP2y1PgOrTsaEtugKlFNkeSu2fo.roa
File: NP2y1PgOrTsaEtugKlFNkeSu2fo.roa (raw, json)
Hash identifier: /dOYoOxp3vYp6mmQzjABJK5Fp34PaTg3o5pssJRhlrg=
Subject key identifier: 34:FD:B2:D4:F8:0E:AD:3B:1A:12:DB:A0:2A:51:4D:91:E4:AE:D9:FA
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1102
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NP2y1PgOrTsaEtugKlFNkeSu2fo.roa
Signing time: Wed 01 Feb 2023 10:29:21 +0000
ROA not before: Wed 01 Feb 2023 10:29:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 175.180.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4354 (0x1102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:21 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=34FDB2D4F80EAD3B1A12DBA02A514D91E4AED9FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d5:ed:2a:f8:ed:7a:53:8c:d8:dd:7c:6f:0e:
f6:3d:12:06:84:e4:55:9e:00:2f:ca:46:04:68:71:
83:73:da:35:7b:67:1d:03:2c:b3:3c:11:0f:1b:65:
55:cf:35:a2:73:7a:c3:cd:61:da:57:06:c7:7d:20:
37:d8:ec:25:c4:e6:26:45:43:19:95:e3:74:72:c6:
1c:16:dd:3d:b3:21:88:e5:c8:23:a0:59:e0:17:59:
41:78:e3:ab:e6:50:8e:8b:6e:76:c1:b2:0a:67:aa:
85:8b:b4:b6:53:48:2d:93:d7:30:fb:e2:28:14:54:
27:54:cf:18:26:72:9c:15:0d:d6:1c:f7:47:d6:18:
13:36:e9:e2:9c:09:9b:7b:e8:47:a3:49:b1:83:e4:
59:04:9a:93:d0:83:30:24:ab:24:ab:ff:38:e7:a9:
81:80:19:3e:a2:60:1b:40:1b:69:e4:72:1b:5b:a4:
b5:50:2c:0f:4d:ce:40:f6:f8:99:5d:de:53:b2:a0:
53:a9:22:b8:10:e0:47:54:b3:3c:b0:cc:33:89:e8:
69:6d:2e:b4:c0:42:ac:4e:68:a3:54:be:f8:58:cb:
bb:06:c4:c9:7e:6a:86:c6:2b:43:77:1b:14:0d:d9:
90:3b:24:72:7e:b2:ad:4c:a2:32:79:2c:0e:92:e7:
23:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FD:B2:D4:F8:0E:AD:3B:1A:12:DB:A0:2A:51:4D:91:E4:AE:D9:FA
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NP2y1PgOrTsaEtugKlFNkeSu2fo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.180.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:f3:5b:b4:83:37:4b:12:37:96:c8:95:75:48:38:fb:54:4b:
33:6e:5c:10:fc:08:ed:3f:3c:ea:a4:bb:81:0e:be:1c:ff:fd:
03:cb:77:99:f0:b9:01:9e:bc:a9:11:7e:1f:f6:ec:08:04:c2:
c0:24:94:7f:2c:68:da:ed:00:b6:0a:bc:8b:69:0a:e4:e6:d1:
46:66:55:a3:a8:1a:85:08:ef:dd:07:19:08:6e:c6:36:f8:81:
08:1c:aa:7a:92:27:52:dd:ed:af:c1:f1:31:1b:8a:bf:0e:1d:
74:69:18:29:7b:d7:e7:b8:70:fa:c1:b3:1b:dc:f9:42:6d:65:
c2:7b:6b:23:78:3d:a1:4c:bb:2c:24:9e:37:6c:ab:53:60:33:
19:49:b5:d4:00:f0:d2:a1:d2:19:10:63:73:cf:b4:b3:53:6a:
f7:dc:fb:bb:1d:ce:ce:56:39:08:b0:3a:c4:94:fd:97:e2:65:
6d:45:1d:7b:9e:5c:5f:04:ec:66:af:50:38:15:14:ea:11:17:
36:3f:22:b6:ce:bf:c8:ee:b9:41:4a:79:a1:ec:16:5a:75:73:
81:31:a4:15:19:28:54:58:60:ae:b2:fd:94:86:99:6c:b7:85:
bd:ee:2e:8f:dc:74:89:d6:18:b7:39:ee:d2:1e:e8:f8:c1:17:
96:04:ab:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:15 2023 by rpki-client on console-fra.rpki-client.org