Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/TwuvM0OuggwAtaRDP0uozsusYyM.roa
File: TwuvM0OuggwAtaRDP0uozsusYyM.roa (raw, json)
Hash identifier: Bbb3FgFjqQV5fG9D8GKRlZhbV/bQsujJxl7K5pv6MNo=
Subject key identifier: 4F:0B:AF:33:43:AE:82:0C:00:B5:A4:43:3F:4B:A8:CE:CB:AC:63:23
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 106F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TwuvM0OuggwAtaRDP0uozsusYyM.roa
Signing time: Wed 01 Feb 2023 10:28:33 +0000
ROA not before: Wed 01 Feb 2023 10:28:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 175.183.64.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4207 (0x106f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:33 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4F0BAF3343AE820C00B5A4433F4BA8CECBAC6323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:08:90:72:95:31:b4:7c:54:09:74:3b:77:
84:63:0d:8a:4a:5c:36:84:4a:70:f0:af:1b:68:8e:
a5:04:03:5d:55:0d:60:cb:34:74:ea:56:04:31:ff:
ce:7f:85:9c:e8:3a:11:5e:fa:3e:a6:59:7a:56:02:
56:f2:29:f8:f3:5a:d3:1f:8f:14:cf:91:a3:02:9d:
fc:21:b0:f9:11:97:a3:d2:0b:0a:61:03:00:fe:34:
2d:11:57:80:70:ab:36:1f:36:b7:17:44:ea:12:0c:
29:19:de:f4:e2:99:b4:4c:36:22:06:91:0f:8c:a3:
db:50:5f:f4:33:61:16:fa:73:00:6f:f6:bd:0e:9f:
87:df:3c:c4:b5:d5:74:cf:0e:c8:38:2d:2c:32:ad:
66:a9:2d:22:90:3d:8e:be:7c:ce:db:59:e7:0a:4b:
15:b4:69:6b:69:2e:2b:85:0a:16:06:41:8b:ee:dc:
82:29:b0:fa:55:44:e2:21:b0:b9:43:f5:de:99:d9:
bf:dc:6c:dc:b3:59:db:5e:6d:ad:04:45:51:27:45:
0e:c2:b2:5d:74:d9:44:95:68:12:75:df:ba:98:16:
2c:9b:33:c4:27:d1:d9:44:56:84:75:65:2d:c0:fb:
5c:03:be:d3:2e:88:18:1c:ec:c9:b4:54:2f:ae:ae:
f3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0B:AF:33:43:AE:82:0C:00:B5:A4:43:3F:4B:A8:CE:CB:AC:63:23
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TwuvM0OuggwAtaRDP0uozsusYyM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.64.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:e6:98:f4:f0:f1:19:7a:3e:1f:a3:34:c7:6d:c7:3c:1f:6b:
f0:d3:7d:3e:2d:ac:06:b4:c7:4d:5e:41:0a:fb:b8:e2:ca:02:
af:eb:e5:33:64:8c:ae:e1:cd:81:cc:f9:b3:a2:4a:d5:21:c1:
72:6f:c4:2b:e0:9c:6e:1b:68:24:28:00:cd:81:6c:09:15:ed:
5b:05:41:2f:62:9e:59:87:82:a0:56:92:00:68:1d:31:56:c1:
90:74:52:6f:4e:c2:08:24:dc:cd:51:65:be:49:ab:6f:b8:aa:
8d:e0:47:64:3e:14:29:20:ba:0e:cd:40:99:e8:10:94:14:8f:
24:2b:c3:a0:e6:fd:01:7f:73:17:2e:a5:24:21:2c:4b:c6:9b:
0a:87:9a:6f:8b:f1:26:65:c2:8b:3e:84:9b:9e:f4:18:3a:14:
7a:3b:95:5e:f3:e5:f4:72:08:c3:80:2a:bb:a5:e2:5c:5a:4e:
7a:69:ce:af:43:6c:39:dd:29:53:06:b0:d7:dd:45:50:4e:38:
bc:ce:3c:19:e9:d0:fd:04:0a:0e:ab:8f:ec:93:98:7a:74:b2:
da:fa:de:72:2c:d6:70:10:2b:b1:5b:4b:52:64:76:fe:89:a8:
7b:18:22:6d:8b:6f:8b:01:5b:71:4c:3c:22:0e:4f:d4:52:c8:
f8:0d:e5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:15 2023 by rpki-client on console-fra.rpki-client.org