Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/WsKS9ZRvypQEsHb3A45EIkW3vIk.roa
File: WsKS9ZRvypQEsHb3A45EIkW3vIk.roa (raw, json)
Hash identifier: 92HnHiqsr0pyqfmDmnLaoioJIGKYwJZM9sank6Cv7zU=
Subject key identifier: 5A:C2:92:F5:94:6F:CA:94:04:B0:76:F7:03:8E:44:22:45:B7:BC:89
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/WsKS9ZRvypQEsHb3A45EIkW3vIk.roa
Signing time: Thu 15 Sep 2022 02:43:53 +0000
ROA not before: Thu 15 Sep 2022 02:43:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 122.147.192.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5AC292F5946FCA9404B076F7038E442245B7BC89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9a:fc:9c:72:f7:ff:d3:ea:09:c5:2c:64:ff:
59:91:41:76:c7:cd:4b:30:98:1e:b6:d8:a7:3f:e3:
dd:0d:7f:14:83:8f:a3:a3:7a:b1:10:ff:c7:65:9c:
4f:28:68:df:88:06:38:21:d3:eb:36:a7:94:09:7f:
43:4a:e3:66:fd:6e:33:51:08:d1:77:9a:79:14:30:
c1:e2:fb:e9:68:10:4f:8b:12:d3:fe:67:4c:5c:ac:
41:ba:e7:61:b2:f8:40:1e:8e:1e:36:e2:06:65:9a:
22:8e:5d:14:bc:80:f6:aa:3d:12:65:58:b6:4c:d9:
f8:2a:58:17:9c:94:62:21:0e:ae:d8:1f:bd:39:2f:
89:70:9e:b3:fc:63:9d:08:ba:a7:08:06:c6:80:ae:
cd:6b:45:8f:20:26:1a:62:a2:7d:0b:18:0a:4f:46:
16:f5:95:90:cd:f5:5f:af:4e:2e:97:5a:5d:72:b7:
95:4a:6a:01:bf:19:9f:27:14:22:04:cd:0d:1a:fc:
01:e1:a8:46:21:0c:84:3d:0e:c3:5b:60:89:0f:21:
f7:aa:b0:64:af:a8:6e:af:28:12:93:d9:b4:d7:e6:
8f:5f:2e:29:89:2a:c2:90:0a:d2:8d:19:06:75:46:
02:48:22:fb:2c:c9:25:1a:3c:c4:c6:56:ac:39:2d:
1b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C2:92:F5:94:6F:CA:94:04:B0:76:F7:03:8E:44:22:45:B7:BC:89
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/WsKS9ZRvypQEsHb3A45EIkW3vIk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.192.0/18
Signature Algorithm: sha256WithRSAEncryption
41:37:0c:9e:ad:e2:c1:98:6b:c4:8a:48:51:12:29:ea:60:b7:
97:f4:c5:cb:ff:77:2d:fd:4f:84:80:f6:39:46:f4:4d:12:a5:
8d:6e:ae:47:47:c4:b5:69:4d:d6:d3:b0:27:83:2a:17:29:f8:
49:49:a8:db:13:bb:55:f4:79:cf:a4:9a:bf:b9:a8:c9:61:df:
ad:a2:7b:52:d8:d8:39:a6:d7:8d:d2:c0:8e:a3:b2:95:7a:df:
51:de:f4:57:8a:b8:f2:f6:d8:33:32:97:00:c7:d2:d2:5c:61:
0a:d3:0a:d6:f3:63:02:5b:47:13:6e:81:6e:45:fe:b4:a9:e9:
bf:cd:b6:2c:58:2c:39:50:dd:bc:c9:7e:4b:99:b9:af:98:41:
23:7a:83:22:9a:69:d1:9b:3d:3f:62:3e:c3:87:32:ee:d8:a3:
05:0c:f8:73:2e:ad:0f:2b:c8:07:37:15:b4:90:57:97:af:1f:
80:f2:87:d3:23:d6:83:fa:26:48:f5:5b:bc:c5:e9:b6:91:f3:
c1:a3:e2:1a:2b:ab:c6:98:7e:f7:b4:30:51:4c:07:85:8a:91:
5e:e3:cf:92:90:be:c8:cc:d5:79:d6:84:6c:ce:05:94:09:6f:
76:12:83:3d:0c:3e:5c:79:ab:9a:8d:28:5e:55:c2:10:77:99:
55:6d:9a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:59 2023 by rpki-client on console-ams.rpki-client.org