Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/WSfPPJ0GC3WD-FRUEtBnXp0H49A.roa
File: WSfPPJ0GC3WD-FRUEtBnXp0H49A.roa (raw, json)
Hash identifier: +9S8R8ZaxI4/UFCkDE60T4yRLF5NFVESvknC7Wt0oB0=
Subject key identifier: 59:27:CF:3C:9D:06:0B:75:83:F8:54:54:12:D0:67:5E:9D:07:E3:D0
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/WSfPPJ0GC3WD-FRUEtBnXp0H49A.roa
Signing time: Thu 15 Sep 2022 02:42:54 +0000
ROA not before: Thu 15 Sep 2022 02:42:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 123.205.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5927CF3C9D060B7583F8545412D0675E9D07E3D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:16:7e:a4:93:6e:a0:2b:99:0f:84:3a:b6:
a8:92:81:b0:26:44:d8:ad:38:18:5e:ea:f4:b4:a9:
9a:6b:e2:c9:f9:c8:f8:75:6d:8f:7e:f8:5f:e4:2b:
ad:16:2b:c0:0f:a8:c5:1a:2f:09:46:33:35:96:fc:
34:8f:dc:6c:f9:8b:d3:c7:2b:27:3b:c0:8a:67:8f:
3f:47:17:41:c7:cc:03:fc:76:b1:fd:95:04:a8:d1:
3a:d3:78:3f:15:b3:33:5a:3b:b9:46:3d:93:02:71:
bf:dd:f7:f1:16:9c:a0:f8:3a:ce:b6:ce:c9:b0:e8:
f9:6e:5e:ba:58:8f:b7:87:9a:a3:c5:13:84:df:a2:
b7:20:cf:af:33:ea:b5:52:c8:40:f1:a0:16:48:cd:
bd:f3:72:ac:0c:a9:b7:ef:f8:17:ef:45:fc:4f:97:
ee:89:50:2d:d8:69:10:cd:85:21:18:b7:7f:bf:27:
60:d5:96:70:e0:f6:dd:ce:0f:82:32:89:42:78:c0:
d8:d8:71:d0:d6:74:8f:8f:60:59:e3:56:d8:33:06:
59:99:63:2b:4b:65:5b:80:4e:6e:ad:f4:3b:f3:d1:
d0:1f:ec:45:3a:b7:67:1b:98:e0:ca:27:f6:1f:d0:
51:04:8d:b5:11:1f:78:9b:2b:d8:56:e5:a8:44:c6:
9f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:27:CF:3C:9D:06:0B:75:83:F8:54:54:12:D0:67:5E:9D:07:E3:D0
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/WSfPPJ0GC3WD-FRUEtBnXp0H49A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:91:47:0b:4a:80:3e:7a:93:37:f2:f3:44:4d:51:01:d3:f0:
83:70:8e:8b:cc:b6:ce:25:a6:1f:48:68:ad:44:87:3e:d0:76:
23:ac:02:ac:f8:11:c4:4f:53:ab:4e:b8:27:84:4b:f2:48:c1:
97:46:a9:a5:29:78:7a:c8:db:40:21:04:89:ac:95:bc:e2:3f:
70:51:79:0e:bc:96:c7:f8:70:67:e6:24:04:67:e3:0b:5f:67:
e9:98:80:cc:87:ad:d0:92:44:28:68:4d:6a:e6:e6:5b:2a:ef:
47:7d:c5:c9:11:37:02:c8:a0:ad:42:58:e6:54:8d:e4:42:8f:
c2:79:0d:57:0b:d2:15:c0:38:5f:b0:4d:f9:d5:55:2d:88:30:
e9:f9:be:ed:cb:d7:6b:29:d9:b5:e2:f5:5d:d9:2c:e3:be:75:
bb:3a:06:2c:a3:e0:a4:63:4c:b6:ec:e1:dc:91:98:f4:dd:d1:
c9:6d:ee:37:06:69:9a:83:97:dd:03:88:f7:f6:2f:5c:48:f8:
14:7e:a0:c6:79:8f:ba:68:a2:6f:c6:6c:b9:6c:14:81:bf:a0:
8b:32:e4:75:1f:78:55:e4:f8:2a:72:9f:63:cb:5d:4b:ad:30:
2a:87:b0:51:db:a8:44:7d:cc:1f:a1:bc:82:7d:ec:45:a5:1f:
ab:05:46:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org