Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/OaXqBpX62xToE-H3ps3ldRSSTSQ.roa
File: OaXqBpX62xToE-H3ps3ldRSSTSQ.roa (raw, json)
Hash identifier: z6zmzBK76wtOH8sU96Z6HywXxkpZW8rStylRc0aXl1o=
Subject key identifier: 39:A5:EA:06:95:FA:DB:14:E8:13:E1:F7:A6:CD:E5:75:14:92:4D:24
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/OaXqBpX62xToE-H3ps3ldRSSTSQ.roa
Signing time: Thu 15 Sep 2022 02:43:32 +0000
ROA not before: Thu 15 Sep 2022 02:43:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 123.205.56.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=39A5EA0695FADB14E813E1F7A6CDE57514924D24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:dc:f0:4b:0f:c1:83:46:70:22:43:6d:15:
da:f8:35:fd:10:bf:a5:c5:84:7c:e2:ac:7f:53:ce:
af:2e:c6:80:8c:23:d6:3c:ba:ea:ef:0d:e3:45:29:
e8:56:0f:18:9d:0c:26:ce:b8:67:42:20:0e:55:10:
16:8d:4b:c5:c3:97:40:ae:85:a5:37:90:e3:ee:58:
66:e5:b7:a8:24:a3:73:32:ae:6e:3c:7c:1a:d7:66:
1b:71:3e:cc:51:2b:78:9b:cd:1b:2e:74:ac:7d:d7:
2a:93:7b:6d:41:c2:ca:fb:82:40:69:a9:17:63:11:
3d:15:8d:72:49:07:29:27:d8:84:c7:d5:23:94:67:
c5:55:b6:f3:8f:bb:85:7b:b7:16:d4:f5:56:49:48:
50:f8:ea:7c:06:52:c3:8a:46:d5:32:42:3e:07:a8:
3c:23:17:05:da:f2:0b:33:01:f2:7f:0e:11:25:e2:
dc:e3:4e:4b:2f:1d:08:b8:ed:c4:e8:bd:6d:f0:88:
a1:74:e7:99:24:66:6f:bb:e9:ab:2a:b9:f5:b2:fd:
e2:93:a8:34:0b:bf:71:37:1c:ff:9a:02:c7:4a:a3:
76:0e:38:58:25:ae:9b:67:54:1b:18:2c:5a:69:ac:
d7:73:03:14:3a:b0:f2:e0:c6:15:71:34:dc:9e:5d:
c7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A5:EA:06:95:FA:DB:14:E8:13:E1:F7:A6:CD:E5:75:14:92:4D:24
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/OaXqBpX62xToE-H3ps3ldRSSTSQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.56.0/24
Signature Algorithm: sha256WithRSAEncryption
69:a5:77:5d:11:5a:47:d5:4f:2b:e9:bd:04:c9:2a:c6:9e:c9:
86:ee:be:7c:40:a0:b0:b4:aa:cc:98:9a:10:08:11:90:8c:c8:
31:de:4f:5b:23:62:ca:fe:bb:6b:19:0a:f7:18:be:2e:23:67:
5c:b7:81:d5:67:a2:10:0e:89:bf:d3:65:db:b9:16:1a:92:74:
49:c5:d5:00:5a:7c:b2:b7:ea:7d:09:19:8e:59:7a:6d:0b:23:
07:98:ef:f6:1e:33:1e:38:84:bf:73:50:29:8b:d9:75:2b:29:
e9:36:cf:89:fe:cc:c1:c1:9b:76:1f:39:3c:a3:59:ce:29:84:
6b:60:9e:75:4a:6e:0e:b0:3e:cc:6d:f7:8a:55:ff:74:55:c4:
a3:9c:15:ea:7e:5b:b9:86:e8:ac:24:c1:a8:75:1c:2f:86:21:
de:e0:f6:f2:29:48:84:47:0e:bd:7d:12:e5:a1:d3:db:92:78:
47:8b:38:a1:c5:84:30:2e:e2:4c:8c:c7:2c:32:80:7c:c8:bd:
34:08:e4:db:e5:41:93:c6:c6:88:35:8b:74:b2:ea:de:f2:8d:
39:38:c0:43:9b:d8:e8:04:09:8a:1d:f0:8d:2b:dc:eb:c0:c8:
4f:db:a0:94:82:9a:52:f8:14:b9:cc:b9:a8:de:6d:45:ba:b2:
55:8c:e6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:59 2023 by rpki-client on console-ams.rpki-client.org