Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/NzKDww2YeoHeURuFHppr2AOATpE.roa
File: NzKDww2YeoHeURuFHppr2AOATpE.roa (raw, json)
Hash identifier: qZUMQwr9xgkYbh+3BSpr8hylQfH+2M/HWwsH1GepCwc=
Subject key identifier: 37:32:83:C3:0D:98:7A:81:DE:51:1B:85:1E:9A:6B:D8:03:80:4E:91
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NzKDww2YeoHeURuFHppr2AOATpE.roa
Signing time: Thu 15 Sep 2022 02:42:41 +0000
ROA not before: Thu 15 Sep 2022 02:42:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38851
IP address blocks: 122.146.108.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=373283C30D987A81DE511B851E9A6BD803804E91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:19:f6:70:33:1a:61:b9:3b:78:bd:f2:88:4f:
06:01:cf:45:47:2e:9e:0f:84:a2:54:6a:2e:ba:ed:
63:16:8f:c6:3c:76:d1:51:ea:8f:47:fb:5f:e2:6d:
8a:a3:6a:01:83:b2:ee:a7:af:3d:be:c9:f5:6f:cc:
9f:7d:02:09:1b:32:79:3b:d3:3e:0c:67:58:30:2c:
61:1c:ab:c6:38:8e:d0:1a:b3:e9:98:05:05:73:f8:
e6:d2:75:ba:7e:21:c4:a0:3f:88:a3:81:c2:ea:e8:
bc:41:69:66:b1:50:c1:d4:d5:0b:ec:80:f7:f7:3d:
41:ef:5a:6f:1f:50:0c:45:d4:d7:75:e7:e3:86:4f:
15:3d:dd:c3:bd:22:2d:61:da:69:cc:9d:20:8d:5e:
93:50:1d:9e:05:0a:46:87:a9:98:53:95:d4:ae:07:
68:9f:4e:9e:27:5e:ca:5f:b8:7b:70:d1:cf:48:68:
5e:90:cf:00:83:d9:91:73:e6:3b:c9:41:94:a2:c2:
4e:07:dc:c5:b6:10:7b:51:f1:c4:f5:6f:be:a7:0a:
a8:ef:7e:93:3d:ed:3b:e3:c5:45:34:89:79:0f:5c:
5a:6f:67:5f:26:f6:ce:b1:4c:ca:f9:b9:a0:14:69:
a0:ad:be:84:1a:67:28:ad:6f:26:e9:b7:01:01:77:
f2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:32:83:C3:0D:98:7A:81:DE:51:1B:85:1E:9A:6B:D8:03:80:4E:91
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NzKDww2YeoHeURuFHppr2AOATpE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.108.0/23
Signature Algorithm: sha256WithRSAEncryption
93:8d:77:0e:8a:f5:41:77:1a:2e:bb:f6:d5:2f:64:f6:17:3e:
5f:d5:4f:65:7d:d2:b7:eb:22:5a:9f:46:0e:d7:8b:b8:de:a8:
c9:9f:45:b7:70:ba:12:62:c2:5f:af:e8:6f:03:fb:f8:60:52:
49:ed:ca:82:c5:6f:81:7a:48:94:58:54:59:9c:f1:97:a1:7d:
6c:f3:c1:6f:83:0a:bd:03:2d:5e:3d:0e:c2:7e:40:26:3d:9b:
81:19:33:56:80:b2:32:f5:ed:7d:85:3f:c4:f0:09:64:d2:24:
0d:7d:52:29:4c:36:85:1e:07:20:71:46:fc:c3:ae:33:2b:2d:
86:e4:c1:f5:0d:1e:0d:f5:74:87:ba:b7:d1:83:1c:89:54:50:
58:e6:4d:92:62:ec:c1:dd:21:00:4c:4d:d9:1a:8b:73:d4:20:
e6:00:41:c9:19:3f:05:94:7c:60:fc:48:95:36:bb:cf:d4:70:
80:08:a2:38:95:ed:a2:6d:7d:98:ed:cc:70:f5:79:d6:d3:5f:
cc:ed:0e:23:db:6e:69:c8:2c:cc:ba:e3:04:88:40:b7:3d:cb:
1f:a1:97:62:c3:77:e9:8d:f9:98:01:c5:ea:5d:dd:c5:1b:99:
ba:ab:41:14:ba:a1:14:b2:0d:1a:1e:72:2c:a6:31:68:5c:54:
e0:4b:44:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-fra.rpki-client.org