Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/VbHGAmDclkh-vVr7NJAF0qUCE6U.roa
File: VbHGAmDclkh-vVr7NJAF0qUCE6U.roa (raw, json)
Hash identifier: 5TpUAl4mhdCxGXOL9A8WXjEXdK6n/kUQvpU0jokIsEA=
Subject key identifier: 55:B1:C6:02:60:DC:96:48:7E:BD:5A:FB:34:90:05:D2:A5:02:13:A5
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VbHGAmDclkh-vVr7NJAF0qUCE6U.roa
Signing time: Thu 15 Sep 2022 02:43:11 +0000
ROA not before: Thu 15 Sep 2022 02:43:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 175.183.254.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=55B1C60260DC96487EBD5AFB349005D2A50213A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:77:ec:8d:2b:f0:86:91:69:c8:d1:49:92:87:
1e:fe:03:aa:8c:df:a1:9e:f0:b1:3d:e7:fe:5d:b9:
db:dd:15:9d:4d:cb:67:12:4b:45:ad:30:ee:06:25:
07:f6:ea:a1:3e:cd:e5:80:46:46:14:b6:dd:73:0d:
11:cd:a8:3c:09:6b:5c:da:6c:85:61:ab:98:1c:1d:
6b:59:26:61:3a:e1:ce:45:59:58:0e:3d:0e:e0:93:
96:8a:8f:20:41:d1:0b:d5:37:5d:bc:9b:40:c7:30:
d4:28:cc:b6:0e:c9:3b:cf:b2:ae:13:38:e7:72:ad:
52:de:37:29:d5:38:fd:49:1c:32:d2:6f:fa:97:12:
41:56:a9:d0:72:e4:af:6f:09:0a:ae:80:7a:5d:e4:
59:03:20:17:05:b4:bd:3d:6c:23:29:e3:66:fd:93:
aa:24:a1:57:da:d6:a9:03:98:57:d2:b2:ad:d9:2c:
59:24:55:6d:3d:bb:61:d0:2f:33:fa:50:e1:57:49:
54:5f:c6:4b:10:84:06:6e:62:b7:c8:7d:21:f9:bd:
a4:f1:be:8a:17:32:52:b4:50:20:14:4b:46:38:b8:
7d:2d:8a:d0:b5:96:c3:41:75:3a:16:75:b5:2d:84:
d1:ff:72:a8:b0:fb:d9:29:09:cc:36:13:6d:72:76:
a4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B1:C6:02:60:DC:96:48:7E:BD:5A:FB:34:90:05:D2:A5:02:13:A5
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VbHGAmDclkh-vVr7NJAF0qUCE6U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.254.0/23
Signature Algorithm: sha256WithRSAEncryption
89:32:91:64:69:a6:3a:35:b6:6d:7a:6b:cf:c0:cb:23:ee:23:
be:18:4a:22:69:77:4e:77:e9:46:c4:e3:db:98:a1:6b:57:4f:
c6:c9:10:93:ed:c8:39:99:f3:9c:70:54:47:ad:07:e0:5d:35:
c4:86:00:c3:31:59:59:4c:1e:7d:6f:5a:86:02:89:de:99:d7:
81:ec:f0:30:55:a9:55:8b:40:47:33:40:19:24:b4:32:19:93:
58:9a:e9:d4:de:8a:75:56:d1:df:d5:20:03:8e:19:6f:90:43:
a5:d1:cc:e4:04:f0:2e:25:31:03:32:fe:63:ce:f7:ac:9b:ba:
54:19:6c:62:c6:31:fa:7c:d4:a1:fa:2f:98:77:18:19:fd:a9:
eb:e0:05:96:17:51:1d:70:c1:52:59:4c:22:f2:9d:74:6f:eb:
65:d4:ea:1f:93:0d:ce:3c:d9:73:7a:c1:69:59:bb:6d:6f:a3:
1c:1b:b7:b9:3c:4b:6d:90:0e:62:27:de:4e:a8:5f:24:7f:81:
a6:bb:9b:c7:77:ec:28:3f:b9:3c:ac:9b:5c:d8:44:e0:3b:c6:
92:5a:a7:d5:9f:89:6c:78:40:bf:3d:d6:14:f1:55:45:93:8a:
fc:e6:5b:ca:42:65:c3:f3:69:6d:0e:b7:9e:29:84:30:87:03:
83:c5:15:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org