Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/X0Smo5vmNm3hB97TOYeh-YABjHA.roa
File: X0Smo5vmNm3hB97TOYeh-YABjHA.roa (raw, json)
Hash identifier: d8g3645N66KNwo2aket401KU4A63jU8UHaH2rwgDnL0=
Subject key identifier: 5F:44:A6:A3:9B:E6:36:6D:E1:07:DE:D3:39:87:A1:F9:80:01:8C:70
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/X0Smo5vmNm3hB97TOYeh-YABjHA.roa
Signing time: Thu 15 Sep 2022 02:43:20 +0000
ROA not before: Thu 15 Sep 2022 02:43:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 218.210.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5F44A6A39BE6366DE107DED33987A1F980018C70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:d9:60:90:98:a5:e9:5f:88:7c:7c:79:c7:
37:58:ad:4d:20:cc:3d:af:86:4a:f1:de:8e:a3:6e:
d3:cd:04:15:41:8d:99:df:0e:07:58:05:dc:5c:b2:
41:4c:9e:1a:82:5f:1a:41:d6:1c:a7:88:2a:5e:1b:
90:4d:2e:2f:c4:ed:ed:21:76:e4:4e:ff:58:90:e4:
e4:af:61:44:80:e9:45:1c:00:3b:c1:19:79:3c:a9:
87:13:6e:1d:90:35:9b:4c:18:54:0b:3c:7b:0e:2d:
e0:af:b6:a0:c8:04:30:a2:0f:8c:ee:0e:85:27:7b:
aa:9f:df:4e:ff:5d:ba:70:ed:eb:8a:a5:4c:56:31:
6f:69:ee:d8:0d:4b:35:3f:81:d2:e3:6c:00:0d:e4:
5e:8a:64:5f:3b:10:b4:3b:92:82:e4:d6:2a:8d:0d:
96:14:3a:54:63:26:7d:ed:14:4c:d5:09:a4:f5:2d:
7b:42:b2:04:d7:07:86:99:71:86:77:5c:1b:e3:e2:
dd:27:2e:95:ee:e7:d7:48:85:56:78:8f:cf:f1:be:
bc:9b:34:41:2d:d4:d1:df:e0:99:87:5b:ab:be:a6:
71:1a:1e:df:13:84:c4:6f:71:42:69:4e:cf:1b:cb:
13:f5:dd:fa:24:77:a9:99:76:ea:28:b0:6d:ea:34:
54:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:44:A6:A3:9B:E6:36:6D:E1:07:DE:D3:39:87:A1:F9:80:01:8C:70
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/X0Smo5vmNm3hB97TOYeh-YABjHA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b6:ec:a1:ae:bc:b3:0f:4c:0f:c7:fe:a1:ea:af:57:f9:3f:59:
3d:78:f8:ed:fe:e0:4a:44:bc:10:18:14:de:25:20:19:83:04:
34:00:7b:c5:7c:14:53:90:6a:75:dc:b7:29:84:a4:b0:80:67:
f6:b5:0f:e8:42:9e:ce:5b:be:16:27:cd:af:8b:c4:69:81:b4:
3a:1d:fa:40:95:36:f1:77:19:cc:e1:21:e9:d7:87:64:18:ba:
7a:82:70:bd:84:dd:ef:91:f8:35:e8:e8:1c:eb:11:ae:8f:de:
17:76:b4:d6:42:7c:43:16:a1:d2:ce:f2:c1:bf:32:14:e1:44:
2c:11:a1:57:12:d8:c4:34:18:e4:76:0b:a6:c5:d9:ab:37:f7:
61:d9:13:ec:2f:10:31:fa:5f:e8:cd:47:e2:8b:48:ae:a3:5c:
c5:0a:24:c2:fe:2b:5d:f4:db:44:a4:2e:f4:da:64:d5:09:9e:
46:4f:b4:b4:ad:fa:ae:42:4b:ee:e3:51:dc:33:71:46:94:59:
81:7d:fd:b3:43:9d:92:18:e9:ef:c9:69:7a:45:b6:1b:ef:92:
32:e3:5e:7e:2c:46:84:75:f7:f7:0b:7b:e6:02:eb:c2:34:96:
ac:eb:72:ea:6a:37:85:e2:7a:ab:96:bf:8f:71:c6:6e:60:16:
ae:78:82:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org