Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Nf-Vws0GDClrF1s123k_5T6ilLY.roa
File: Nf-Vws0GDClrF1s123k_5T6ilLY.roa (raw, json)
Hash identifier: W6E/3K/gdCPhgACFakb+WgydvMZ+sGXoD3EFCv4Mbf0=
Subject key identifier: 35:FF:95:C2:CD:06:0C:29:6B:17:5B:35:DB:79:3F:E5:3E:A2:94:B6
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Nf-Vws0GDClrF1s123k_5T6ilLY.roa
Signing time: Thu 15 Sep 2022 02:43:11 +0000
ROA not before: Thu 15 Sep 2022 02:43:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 122.147.24.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=35FF95C2CD060C296B175B35DB793FE53EA294B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0d:d5:ce:ee:31:02:96:5c:16:ec:b5:52:f2:
e8:c2:ae:2a:ab:0e:69:4e:d2:37:7d:e6:16:84:c7:
fa:00:7d:c8:ac:5d:f3:61:35:11:3a:74:7f:01:de:
a0:1f:60:c2:4c:af:a8:1d:68:5b:e1:78:29:2f:5a:
66:14:8d:72:b8:90:1f:17:89:a1:55:5c:b6:d7:12:
a6:23:ef:eb:54:59:87:38:40:37:fb:f8:90:cc:42:
8f:86:83:15:b3:89:53:7a:43:8c:de:92:ff:be:60:
62:3c:65:55:db:63:c7:d6:97:ba:21:81:ca:fc:ae:
f6:3a:d7:49:b4:63:6a:07:ae:ea:69:88:a6:a0:e5:
34:e1:ea:d5:9e:3f:bb:d5:20:3a:54:d3:eb:4f:f4:
4a:b0:7e:63:aa:9b:69:af:5c:88:1b:fa:54:f4:ad:
3d:0b:81:3b:c0:3f:73:0a:2e:cf:06:a1:d6:09:33:
ab:e5:a9:1f:17:3b:c4:37:4b:bf:ed:29:c1:b1:4c:
49:c3:9d:19:5c:1a:46:f4:5f:00:e3:cc:54:e8:5f:
93:63:d6:85:70:5b:d1:ec:a4:29:81:dd:16:9e:a6:
08:50:a5:09:95:ad:d2:67:f3:58:b7:07:28:95:ef:
3e:c3:3d:2d:27:54:d8:67:1d:e6:ed:66:22:fc:fd:
db:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:FF:95:C2:CD:06:0C:29:6B:17:5B:35:DB:79:3F:E5:3E:A2:94:B6
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Nf-Vws0GDClrF1s123k_5T6ilLY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.24.0/21
Signature Algorithm: sha256WithRSAEncryption
09:0d:31:d5:6c:90:df:ff:13:cd:b7:18:ab:03:d7:68:f9:43:
80:b5:bd:f7:65:70:99:a0:6e:32:4c:54:66:fd:31:b3:e3:04:
ee:ea:04:96:37:e8:c9:20:a4:12:9f:7c:66:6b:4b:8a:be:81:
00:57:b8:95:cb:83:d2:29:b3:83:71:d9:15:8b:3d:48:79:b5:
b2:77:e4:f6:80:94:69:a4:5a:81:9e:37:40:59:07:85:84:fc:
bb:62:da:98:cd:35:4e:9f:a8:3c:ca:7e:59:0a:ef:06:44:6b:
82:9b:a1:1b:3a:2e:7f:d3:f5:d8:4c:f9:3f:6e:3e:dc:9a:c5:
49:d3:bf:d2:cf:57:a6:c7:5c:cd:ba:c5:36:5f:f0:0c:89:b4:
fd:0e:2e:df:96:fc:e9:38:50:e8:2a:c9:f9:a2:65:9a:99:97:
18:26:ed:1f:b1:be:a7:57:fe:5e:14:83:84:3e:e2:1a:53:14:
f4:05:01:4f:bb:67:40:96:07:1a:4c:0c:e7:ae:f9:c6:e4:90:
90:cf:e5:ab:bb:c1:a5:f7:3c:f9:6e:56:4f:6c:98:c5:5f:e2:
39:c5:05:65:50:07:6e:59:0b:18:c9:95:8f:86:a5:47:ee:4b:
8e:0e:05:5b:fb:03:4e:e0:e2:c0:6f:ec:88:96:77:47:5a:4a:
ff:d1:cc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:59 2023 by rpki-client on console-ams.rpki-client.org