Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/SV5QSu4W0uYsW-XPDvyy5Rl1WSs.roa
File: SV5QSu4W0uYsW-XPDvyy5Rl1WSs.roa (raw, json)
Hash identifier: bLh4Z7S6Ka8u8pVHqd/+DIPab1obVClYw7O5x7BTPj4=
Subject key identifier: 49:5E:50:4A:EE:16:D2:E6:2C:5B:E5:CF:0E:FC:B2:E5:19:75:59:2B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 105C
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/SV5QSu4W0uYsW-XPDvyy5Rl1WSs.roa
Signing time: Wed 01 Feb 2023 10:28:27 +0000
ROA not before: Wed 01 Feb 2023 10:28:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 122.146.0.0/15 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4188 (0x105c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:27 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=495E504AEE16D2E62C5BE5CF0EFCB2E51975592B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:5c:29:b9:c5:2c:de:18:71:b8:ef:fc:5a:
24:af:ca:7c:25:60:50:f6:c8:f2:96:e4:6f:e2:17:
1b:95:3f:78:38:89:e5:23:60:78:1b:d3:24:b6:90:
d1:79:d1:6b:00:17:d0:43:80:29:d3:14:42:1a:59:
26:d5:c5:73:42:7b:c2:4d:b0:cc:e9:ab:47:71:97:
2f:41:31:25:80:58:f8:47:ab:8f:ee:a5:64:02:4d:
dd:6e:96:e6:e9:9f:16:39:3a:dc:60:be:33:cf:ab:
b2:5a:0b:e6:8d:2e:10:d9:65:21:60:29:34:09:4c:
81:29:fa:8b:a6:e7:0c:df:bc:57:a1:bd:32:41:ac:
18:5e:40:de:0d:25:81:df:f4:f9:81:93:81:12:c8:
c2:bd:92:64:fc:42:07:e0:0a:ef:99:c8:84:ac:74:
b0:d2:cc:94:8d:7c:07:37:ac:b8:6d:9c:1b:bc:b6:
90:7c:ea:52:b6:45:0e:25:fe:05:62:c1:83:fc:39:
20:08:a4:d7:43:c0:1c:6d:c6:4f:0d:38:21:4a:52:
02:ec:48:0a:44:58:e7:24:70:ea:c6:1b:4d:d2:5a:
fc:8e:78:b2:17:41:ea:c0:6e:6a:e8:1d:29:ac:ba:
ff:d6:95:c1:17:61:0c:45:1d:61:28:b0:fb:8c:c3:
2b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5E:50:4A:EE:16:D2:E6:2C:5B:E5:CF:0E:FC:B2:E5:19:75:59:2B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/SV5QSu4W0uYsW-XPDvyy5Rl1WSs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.0.0/15
Signature Algorithm: sha256WithRSAEncryption
0d:20:a9:67:52:bd:6b:0c:5f:2e:3e:1f:28:23:1b:60:49:86:
d0:89:3b:72:3c:97:8d:27:45:96:0e:64:39:db:1c:a0:92:d3:
ff:63:24:b1:b3:07:e0:c4:e1:b0:d0:b4:ec:dc:d9:a3:04:98:
44:6a:2e:c7:71:a4:e3:d5:85:99:11:75:5b:fa:b9:5a:01:bd:
d7:da:a1:ca:e0:1d:00:67:17:b1:2b:16:01:cf:90:ba:53:c1:
eb:6f:af:b9:7c:87:e0:a9:df:57:c9:a3:26:f7:c1:13:14:ca:
43:c9:19:e5:60:52:86:e8:53:48:10:c1:e9:2f:78:e4:3d:1d:
14:cc:67:60:84:6f:0f:38:6a:d3:c1:bc:cd:c7:ff:2c:4c:ed:
51:d4:20:b9:35:9c:ec:f1:a2:98:19:a2:1c:8b:c4:6a:de:ad:
88:a7:d0:3a:f8:1c:cf:f8:98:00:69:eb:99:ba:dd:23:2c:bf:
93:f0:22:bd:9d:87:84:a9:0c:2b:fa:7b:49:9d:05:5f:36:a0:
57:2d:b8:bb:bd:82:6f:dd:be:48:df:e4:ee:90:82:cb:89:d4:
b8:b8:12:00:a7:50:4b:ae:b9:08:a8:d3:79:8c:20:b9:e8:54:
b9:70:d5:36:c2:01:d1:ae:1d:ad:7d:6e:33:f9:8d:1e:38:ff:
33:16:3e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:50 2023 by rpki-client on console-ams.rpki-client.org