Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/VnwcGvIGCh1CKCagdDK9VNY36Gw.roa
File: VnwcGvIGCh1CKCagdDK9VNY36Gw.roa (raw, json)
Hash identifier: DfCHynedIyBETpdWQOQzqS3M9ItsQuDfxRU8ohm95nI=
Subject key identifier: 56:7C:1C:1A:F2:06:0A:1D:42:28:26:A0:74:32:BD:54:D6:37:E8:6C
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VnwcGvIGCh1CKCagdDK9VNY36Gw.roa
Signing time: Thu 15 Sep 2022 02:43:03 +0000
ROA not before: Thu 15 Sep 2022 02:43:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 175.183.64.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=567C1C1AF2060A1D422826A07432BD54D637E86C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:68:8a:6c:c8:a5:66:a7:47:ab:cd:a0:8e:50:
a3:e0:fd:03:0d:30:4d:fa:80:cc:bb:4e:69:be:1b:
48:01:da:87:a2:fe:e1:a2:7f:75:17:cd:7b:79:36:
14:31:8c:4f:e1:5e:be:ac:b0:7d:48:5d:df:69:f2:
e6:72:dc:8d:82:f0:0a:e0:7b:ef:0b:63:65:cf:18:
2e:0b:db:31:c9:a9:12:eb:f5:a8:3b:72:83:c7:22:
77:67:5c:69:dc:9c:b1:c3:d9:b7:5b:0b:99:f5:3d:
46:37:56:ca:da:d1:e6:d9:e4:25:17:a9:69:46:8e:
9b:20:fd:3b:da:d8:16:9d:40:8e:d4:63:71:a1:42:
e9:62:94:d3:a7:ac:ba:6f:f9:ea:6c:85:8b:a4:e3:
a7:f4:f4:39:f5:bc:9d:8c:eb:1c:a5:94:76:b9:52:
a5:fe:86:9d:a1:9e:db:f0:1f:c6:44:ec:e1:d5:15:
95:6e:fe:8c:68:8b:62:76:87:9b:59:aa:c6:03:40:
0e:5b:26:c8:de:66:1b:0e:c3:46:32:4d:73:76:13:
39:0b:80:9d:2b:95:7a:8b:c7:cb:c1:2d:ed:bf:ec:
f4:8f:4f:a8:14:f1:57:75:67:9a:f8:36:64:c6:c2:
14:a8:0a:9a:28:03:09:ac:ca:ff:9e:fc:8c:29:b9:
32:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7C:1C:1A:F2:06:0A:1D:42:28:26:A0:74:32:BD:54:D6:37:E8:6C
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VnwcGvIGCh1CKCagdDK9VNY36Gw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.64.0/20
Signature Algorithm: sha256WithRSAEncryption
76:d7:1f:fd:e0:0e:39:5f:10:96:0d:3a:bb:6f:c3:6c:b1:76:
1d:1d:c1:45:59:db:5d:38:c3:ea:be:1c:65:de:76:f3:0c:50:
d9:e6:af:21:d7:9a:f7:06:68:95:93:39:70:ee:16:1d:a0:67:
1a:24:11:49:27:f5:be:40:08:39:41:bb:78:82:bd:32:95:5b:
a6:83:d6:2a:8f:1a:4e:c8:b2:7d:93:19:4d:0a:36:44:4a:bb:
29:a0:c8:d1:cb:5c:69:3b:f7:dc:db:0c:2f:68:08:0d:71:5b:
f4:61:51:56:ae:30:9a:0d:79:d2:57:6e:8c:a1:a2:d2:b8:53:
58:de:06:ae:36:a5:22:ef:fb:04:97:97:fe:60:16:f2:e0:e1:
0f:86:16:2b:e3:45:68:b8:a1:03:44:e6:e2:77:70:10:0d:64:
47:13:cc:88:c4:4f:81:7f:87:77:7b:0b:30:a2:5e:e2:a1:34:
57:d5:ba:6d:e9:4a:74:87:ff:9d:88:ae:5d:c5:38:a2:74:a5:
79:8b:fd:3e:ce:32:49:f7:3b:a6:c9:bb:f2:4a:a5:5f:bc:d5:
3d:4e:56:a6:c4:ed:40:2a:70:1e:7e:21:31:0d:ca:58:a4:5c:
0a:31:6f:85:4e:ca:ec:a0:aa:aa:2b:bc:82:44:7c:2d:9f:e7:
20:bc:7c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org