Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Q4PAB7-rtS8ko-Hrt4T8gfYzsA4.roa
File: Q4PAB7-rtS8ko-Hrt4T8gfYzsA4.roa (raw, json)
Hash identifier: niQ3rndTfBt7FKWJJg3MRRUOiFAS9MJpaT3XnHq6fXs=
Subject key identifier: 43:83:C0:07:BF:AB:B5:2F:24:A3:E1:EB:B7:84:FC:81:F6:33:B0:0E
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 107D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Q4PAB7-rtS8ko-Hrt4T8gfYzsA4.roa
Signing time: Wed 01 Feb 2023 10:28:37 +0000
ROA not before: Wed 01 Feb 2023 10:28:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 220.229.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4221 (0x107d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:37 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4383C007BFABB52F24A3E1EBB784FC81F633B00E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:72:24:97:d1:46:9f:2c:25:a6:49:46:41:
b1:d5:34:15:ec:af:f2:2f:37:ac:9d:38:fc:e5:a3:
6e:6b:66:18:04:6a:ad:c7:cf:7f:1a:58:d1:a5:9f:
dd:22:b1:24:31:a3:47:07:75:3d:5f:18:7f:67:ae:
dc:27:fb:d8:72:20:ce:91:58:8c:11:a2:d0:78:af:
93:0d:df:88:70:b5:a1:58:fd:48:72:ca:5d:54:07:
46:db:71:a9:88:37:0e:03:be:6c:62:c0:34:26:c0:
db:24:88:d9:0b:ba:5b:d3:32:a8:35:5e:d5:03:1a:
f8:40:f8:49:a5:43:12:13:31:a3:91:b7:0f:29:b2:
b7:5b:ec:12:ed:57:8b:88:fa:65:12:91:0d:0e:90:
38:76:24:9b:0e:dd:9c:ec:af:e4:10:24:6a:bc:02:
9e:ff:09:9d:4c:a5:2c:97:0a:a8:1b:7f:84:6b:fc:
72:2f:a8:bd:be:e6:0b:39:bf:ec:c7:96:f1:7a:2b:
2a:85:03:3c:c1:43:c9:67:f4:f1:68:a8:33:f1:da:
80:a0:77:bf:55:57:92:a5:e4:a5:00:27:e7:94:8c:
63:c4:88:e7:41:55:ab:bf:f7:31:03:1d:a3:5d:3e:
44:c8:82:2c:8b:51:a1:c6:98:00:9d:0c:66:d6:1c:
01:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:83:C0:07:BF:AB:B5:2F:24:A3:E1:EB:B7:84:FC:81:F6:33:B0:0E
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Q4PAB7-rtS8ko-Hrt4T8gfYzsA4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.229.65.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:df:5c:75:92:2c:46:2d:af:17:c9:c3:e6:da:2e:85:d2:a8:
35:6b:8e:8b:03:86:2a:5b:9b:e1:86:95:c9:9c:b9:e5:b8:48:
ce:05:b5:ac:17:91:30:2e:ff:b9:cb:27:e5:9e:de:0d:85:ed:
1f:1f:57:7b:3c:db:59:ed:fd:dd:6a:49:e2:6e:08:bc:54:e5:
41:bd:02:47:42:0b:cc:de:78:fd:ff:43:8f:8a:e5:86:08:b6:
a8:34:c5:6c:a9:55:65:43:4b:75:80:c9:99:bc:53:ba:bf:3d:
ad:2d:01:76:68:02:1b:e1:41:f6:3e:d5:f5:b6:d0:9b:d1:84:
ba:0a:28:5a:65:3a:68:3f:fb:9c:5a:2f:89:c0:56:fe:69:f9:
11:78:48:d6:c1:4f:df:a4:b0:b1:5c:ec:19:b3:1b:ce:90:55:
bd:3e:5c:17:2a:55:ba:7f:8b:cb:29:7d:52:dc:7b:93:4b:3a:
e8:c9:05:63:a4:24:33:13:08:70:f1:cb:28:92:3f:33:19:79:
9b:50:d4:ea:cb:71:5f:d9:5f:80:ff:fe:a2:e5:39:3e:99:39:
2d:3a:6c:5a:c5:b1:c0:5f:1b:da:0e:cc:08:2f:d6:be:a7:94:
ef:20:7b:36:5f:72:65:79:97:2a:c1:ac:85:86:55:db:8e:e0:
c4:97:fc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:15 2023 by rpki-client on console-fra.rpki-client.org