Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/QYMOzJuJCNtHhZPpmuLt-ffkSvk.roa
File: QYMOzJuJCNtHhZPpmuLt-ffkSvk.roa (raw, json)
Hash identifier: D0x/FhQvqq9BFtZ8jGxBjOtKtpATO+SZ27yIijst1Qg=
Subject key identifier: 41:83:0E:CC:9B:89:08:DB:47:85:93:E9:9A:E2:ED:F9:F7:E4:4A:F9
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QYMOzJuJCNtHhZPpmuLt-ffkSvk.roa
Signing time: Thu 15 Sep 2022 02:43:22 +0000
ROA not before: Thu 15 Sep 2022 02:43:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 115.30.64.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=41830ECC9B8908DB478593E99AE2EDF9F7E44AF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:f6:11:26:eb:f6:8f:1e:da:17:e1:62:5f:
44:5e:7f:32:42:bb:e2:f1:97:40:94:34:52:86:48:
73:d7:55:73:f4:1c:7d:fd:47:83:dd:7e:e7:35:ef:
d6:91:e0:00:92:85:d7:e8:af:58:43:00:de:f4:53:
57:03:f3:da:92:7c:d2:a7:e0:bc:54:e8:85:41:82:
57:a0:48:fe:8d:8f:b7:56:1e:cf:38:75:56:96:8a:
82:ed:1d:a1:30:b6:3b:eb:4c:34:5f:70:e7:0e:9f:
b2:4d:7b:5d:ca:89:6e:7a:25:29:e7:08:0e:c5:f6:
c0:29:d1:d8:6a:ca:36:f6:5f:dc:ee:5d:21:16:70:
8a:d8:0d:3b:64:53:e9:a1:65:b8:52:28:cf:49:a3:
ba:f1:6f:d7:81:70:11:86:10:04:65:88:31:35:c6:
7b:3d:5a:9a:70:4d:94:8c:81:6e:02:c6:6e:02:fa:
30:3b:2a:b2:df:11:f1:9c:9d:fb:81:bd:1a:0f:bd:
09:95:35:4e:f2:d1:3f:35:db:4d:0b:d8:98:c9:ac:
e5:6f:f1:76:d7:bb:10:00:c6:b4:90:bf:9c:61:19:
c3:48:d1:7a:9f:24:36:f2:9d:79:ef:9b:79:e1:c4:
c6:e3:98:de:bf:ce:68:a2:01:a9:3e:1e:04:85:b9:
b7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:83:0E:CC:9B:89:08:DB:47:85:93:E9:9A:E2:ED:F9:F7:E4:4A:F9
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QYMOzJuJCNtHhZPpmuLt-ffkSvk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.30.64.0/18
Signature Algorithm: sha256WithRSAEncryption
84:a3:ab:b8:01:d9:52:42:60:c3:ab:c8:e0:59:92:22:d7:db:
27:9c:69:12:1c:3d:ce:1f:ca:0d:65:9e:1f:9c:83:04:2c:d8:
a7:71:c1:04:39:2e:c3:b7:09:8b:63:73:e5:8a:47:26:f1:f5:
62:43:6d:fe:b3:00:9f:84:d6:b5:ed:6a:52:9e:81:a6:c2:51:
d4:44:c9:9f:be:9e:6f:f8:7b:e9:9e:9e:f4:6e:08:12:bb:aa:
12:36:37:9c:b3:9c:8e:d2:c2:4f:60:c8:67:cf:3e:6f:99:18:
8f:cc:dd:73:f1:1e:63:0e:0f:a2:ef:d5:19:20:b0:d8:45:b9:
87:fe:f5:68:87:8c:8f:75:0d:44:f3:b8:34:ef:2d:b1:bc:6e:
87:be:b6:42:b2:2c:5b:d5:3b:09:83:53:cd:98:c2:67:3c:4d:
49:19:40:49:da:d2:b3:99:a6:f7:92:7b:1e:d0:43:f2:ef:bf:
1a:8c:93:65:bd:5e:33:b8:06:27:e2:be:23:ef:82:82:a0:2d:
0f:a4:19:e8:1c:2b:f1:99:1f:cf:ad:f2:ae:2b:9d:f4:88:31:
89:6d:c9:0d:8f:a8:5b:ad:e3:53:63:63:ee:8e:f5:eb:1b:75:
9f:f2:c0:c0:3b:3f:73:a8:ba:1f:d1:20:5b:6b:d1:31:b2:13:
b3:3a:09:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org