Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/RMyI8WofoVBeKn7gTpkq7oVUiGw.roa
File: RMyI8WofoVBeKn7gTpkq7oVUiGw.roa (raw, json)
Hash identifier: Ti5BJhwu3aXUDHbR/gWHXEVrzWxG9apEOLoeKKVofoY=
Subject key identifier: 44:CC:88:F1:6A:1F:A1:50:5E:2A:7E:E0:4E:99:2A:EE:85:54:88:6C
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/RMyI8WofoVBeKn7gTpkq7oVUiGw.roa
Signing time: Thu 15 Sep 2022 02:43:28 +0000
ROA not before: Thu 15 Sep 2022 02:43:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 113.196.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=44CC88F16A1FA1505E2A7EE04E992AEE8554886C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:6f:da:19:62:4e:ba:4c:e6:a5:2c:1c:69:
b0:8f:b2:90:a4:31:84:ac:42:74:68:88:44:ed:99:
c7:9d:b6:8e:5e:8a:7a:c8:22:4b:4b:33:42:0e:d8:
01:7c:da:e3:02:a9:44:38:35:9c:20:cb:ba:51:60:
39:79:04:b4:9b:7c:d1:d5:b2:c2:42:d4:29:16:43:
84:3d:15:a7:52:81:21:8f:11:24:19:d2:b5:d5:d6:
ed:e5:5f:a5:7a:f4:25:bf:4d:59:4d:07:ed:7d:52:
44:ae:61:d5:1a:9c:93:5b:e0:35:6a:bc:9f:c6:89:
b8:fa:a2:96:e2:1d:1c:e7:f0:50:43:9f:c6:96:59:
9d:7a:f9:c3:89:99:1e:af:43:53:cc:d9:2a:00:0c:
af:42:1c:eb:e1:c6:8d:a9:3c:4f:d7:31:fe:45:bb:
8e:cb:e3:1f:f0:66:37:6b:b0:61:66:1e:ed:3d:30:
ed:a8:ea:13:c8:d4:6f:e7:f3:a1:02:bc:40:8f:95:
6f:49:3e:fb:6a:40:66:f3:34:f7:a4:5b:cd:f1:92:
b9:ba:8f:bc:c6:46:99:5f:ff:f8:2c:d4:04:c8:42:
01:bd:38:ef:a5:9f:b2:78:c8:f5:6d:06:7b:50:e5:
fc:fd:d4:12:a3:22:9d:54:7f:dc:44:18:1c:ad:5b:
1c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CC:88:F1:6A:1F:A1:50:5E:2A:7E:E0:4E:99:2A:EE:85:54:88:6C
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/RMyI8WofoVBeKn7gTpkq7oVUiGw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:2d:c7:3a:90:28:e3:26:7e:ef:db:23:26:0e:f4:91:27:86:
8f:a0:b1:90:4e:94:80:76:58:fa:7a:21:26:28:1c:68:02:1b:
dd:b7:cb:1b:27:2d:4d:2f:2d:fd:1c:9d:5f:a8:7b:47:2a:70:
49:40:c5:8f:35:5b:03:b3:9c:78:ca:2e:59:ca:66:99:e7:78:
b2:bb:7c:a2:78:7c:a7:49:4f:9e:7f:8f:6c:28:ec:fb:e8:92:
45:39:68:2d:92:7e:2a:fd:62:87:76:a4:61:b6:54:cf:b9:dd:
ed:49:f2:af:2a:82:ff:61:ca:c1:85:43:7b:59:45:9b:3e:df:
1a:de:82:44:1d:04:0f:d7:19:ea:cf:cb:7b:6c:9d:b0:21:3e:
49:a0:db:ad:8d:f8:85:c6:e8:d9:74:3d:49:f3:cf:5e:ef:22:
ca:7c:81:67:36:47:1e:31:77:2f:ad:c9:44:ad:9a:ac:f6:95:
e1:d3:0c:40:14:ee:fc:77:6d:f8:db:9d:a1:48:7b:54:75:fd:
ee:af:3a:49:b1:c4:d6:ca:56:9f:8f:67:f8:89:48:7b:60:33:
60:3c:ee:fd:d6:62:e2:91:5f:16:b1:f8:e7:89:0d:1d:1c:11:
82:7e:0b:34:01:af:e2:11:8d:2d:53:2d:ef:1a:20:8a:f2:d6:
5c:37:5f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org