Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/PQRbP-2NbQ8gjWupnrsSdinC_cE.roa
File: PQRbP-2NbQ8gjWupnrsSdinC_cE.roa (raw, json)
Hash identifier: /lR+EoKNgKPZtfS/IfGoyXsrW3pwGB0EXdvOsYP24KQ=
Subject key identifier: 3D:04:5B:3F:ED:8D:6D:0F:20:8D:6B:A9:9E:BB:12:76:29:C2:FD:C1
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1078
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/PQRbP-2NbQ8gjWupnrsSdinC_cE.roa
Signing time: Wed 01 Feb 2023 10:28:36 +0000
ROA not before: Wed 01 Feb 2023 10:28:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 175.183.64.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4216 (0x1078)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:36 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3D045B3FED8D6D0F208D6BA99EBB127629C2FDC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7f:6c:df:1c:fe:a3:33:b5:9e:47:7b:4a:83:
ec:02:df:c8:e7:b4:d0:92:fd:74:8b:44:79:73:d5:
6a:33:ab:a2:a9:3b:53:59:c5:03:d8:14:88:a1:50:
93:da:b1:42:1b:11:c2:81:8b:9a:f9:f3:01:76:02:
d1:3f:4e:f0:34:a4:42:6b:8c:f7:4e:56:a4:70:6f:
44:94:4d:5a:f4:f0:c5:94:85:ca:23:c0:22:11:b8:
fa:7d:c1:a4:fc:a0:14:e3:9d:77:15:98:3a:5e:d5:
a0:2f:68:c0:cb:8b:77:ea:4e:d1:6a:6a:92:a3:63:
f0:8b:4b:8f:53:b0:cb:be:25:94:3d:ef:1d:40:4d:
b2:9f:a2:f3:b7:e2:9d:b1:ea:89:aa:dc:fb:64:58:
cb:40:5b:f0:75:d3:78:83:14:6e:c3:b7:09:f9:3d:
8b:2c:5f:b4:bd:26:c9:c8:06:46:0f:e7:3b:9b:05:
03:95:f2:41:ab:46:92:13:be:9a:2b:39:fa:61:ee:
5f:4e:2e:1e:74:09:79:c0:fa:6b:0b:b0:42:b4:1c:
6a:19:df:75:7c:b7:69:b9:32:f4:15:85:42:3e:6d:
f4:3c:6b:66:b9:10:62:44:e3:38:f0:7f:6b:77:85:
88:a1:b3:35:86:df:82:a1:a8:d2:16:d1:3b:03:f8:
40:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:04:5B:3F:ED:8D:6D:0F:20:8D:6B:A9:9E:BB:12:76:29:C2:FD:C1
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/PQRbP-2NbQ8gjWupnrsSdinC_cE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.64.0/19
Signature Algorithm: sha256WithRSAEncryption
7a:7c:21:91:99:7a:a3:b8:c0:67:8d:90:fe:1e:59:3d:89:b5:
3f:26:d5:43:28:ba:23:8f:11:d1:64:be:df:b3:42:79:f6:db:
84:6f:fc:b6:03:07:ad:4d:b3:9e:ea:ec:fb:19:2f:d8:4d:42:
06:2f:67:3a:09:cd:08:98:06:87:90:ab:1e:1f:fb:1a:88:4d:
28:0c:92:83:e3:8a:27:8e:a6:0f:4a:41:47:d0:9d:ba:fd:ad:
8a:48:69:93:3d:ea:3b:a9:90:fc:5b:17:6b:01:40:fc:0e:12:
9c:e2:c2:2b:8c:9e:48:10:2f:42:4e:e2:56:6f:d4:15:99:84:
1e:8f:a7:11:bf:b1:61:8f:83:5b:c4:a4:ee:7e:7d:48:a7:10:
22:ae:22:73:71:87:e0:6a:e1:a1:78:82:e3:b6:d7:4e:cd:de:
27:ce:c1:c3:51:07:c9:52:bb:8e:1b:7c:d9:e0:55:8e:da:9a:
f1:d1:38:a4:ec:99:47:50:00:76:a4:39:30:45:f7:cd:6b:aa:
0a:0d:8c:ce:f6:18:2d:be:02:15:a6:9a:3c:9e:e9:f0:51:10:
83:ac:48:6a:fe:28:98:26:af:cf:ea:4e:81:77:e0:f3:48:8b:
45:27:c4:de:38:17:17:37:0d:84:21:a9:c8:c6:80:90:49:91:
ac:87:63:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:50 2023 by rpki-client on console-ams.rpki-client.org