Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/YnC0TDu3oh4HBaPGef52pDoC_LE.roa
File: YnC0TDu3oh4HBaPGef52pDoC_LE.roa (raw, json)
Hash identifier: qeU+u0xS15eaVjWfzpsQsgdrKyxaWOhbeiDEdKYvL3w=
Subject key identifier: 62:70:B4:4C:3B:B7:A2:1E:07:05:A3:C6:79:FE:76:A4:3A:02:FC:B1
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1033
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YnC0TDu3oh4HBaPGef52pDoC_LE.roa
Signing time: Wed 01 Feb 2023 10:28:16 +0000
ROA not before: Wed 01 Feb 2023 10:28:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 113.196.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4147 (0x1033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:16 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6270B44C3BB7A21E0705A3C679FE76A43A02FCB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:8f:55:a7:1d:ec:3b:b6:a8:07:2d:83:d7:
2c:24:79:b9:c3:06:71:f0:b1:25:51:0d:c9:7e:37:
af:4b:7d:e1:5d:0b:7a:b8:21:d7:9b:25:f3:91:ac:
92:1c:bb:24:cc:a5:bd:b9:92:19:04:57:fa:8b:e0:
81:8e:aa:48:16:17:38:9f:81:98:1f:af:d1:e5:6c:
f0:20:c7:1b:dc:c5:1d:66:b6:fc:cc:74:25:f8:66:
f3:4e:53:5d:b2:d5:8c:49:0b:0d:78:b3:ac:5b:2f:
be:11:58:6d:a4:70:e7:f5:17:b7:e9:be:5f:fd:4f:
6b:2a:2a:b0:ff:c3:ef:09:9c:52:7a:a2:fb:bd:13:
d5:d8:0c:35:93:c3:88:a8:f3:98:15:bb:96:45:44:
30:7c:5e:a6:13:45:2e:49:66:38:a8:7c:18:dd:2d:
43:6e:38:91:9b:e7:bd:8e:0c:2a:fa:f7:b6:c4:1f:
1a:f0:04:4e:d0:81:f8:bb:90:95:2a:fa:88:ea:0e:
7b:a7:2c:eb:3f:45:55:39:9a:3e:0f:56:11:2a:3a:
a3:5e:89:cb:d5:5e:99:0d:e9:c4:70:92:a8:af:99:
7f:6e:9e:85:3f:3d:a1:aa:ad:64:d8:f8:da:44:48:
f9:b9:cf:ae:09:fc:46:63:06:d7:3f:b7:50:15:87:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:70:B4:4C:3B:B7:A2:1E:07:05:A3:C6:79:FE:76:A4:3A:02:FC:B1
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YnC0TDu3oh4HBaPGef52pDoC_LE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.115.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:47:1a:58:be:97:a7:c0:f9:2d:1d:a6:3c:a2:7a:27:4a:42:
66:50:62:10:98:09:6c:65:82:98:e2:59:38:3a:b7:fe:d4:44:
05:13:58:b8:b0:36:77:39:c2:a6:cc:d6:62:23:27:a1:30:c6:
43:a5:c6:90:79:5a:e2:8e:eb:7f:f6:6a:f6:72:d1:ef:47:d8:
2f:5f:4f:d9:e7:35:94:de:ed:19:3a:3f:25:eb:2c:6f:c6:42:
7a:84:90:90:83:31:57:64:df:8e:c5:1b:f3:cc:6f:e5:62:04:
9c:9e:51:57:05:0c:6d:8a:8a:46:92:f6:94:c2:c6:43:54:38:
b1:44:b6:60:14:7e:8c:2a:d8:3e:2f:cc:9c:de:54:31:b8:63:
6d:b0:bd:af:80:f3:08:95:d6:0e:55:ff:75:02:72:15:e0:66:
6b:b2:c6:77:16:84:39:5c:1c:9d:73:19:b8:4f:ce:7c:4a:06:
ad:74:63:d9:a9:3c:ee:a5:2e:c9:fe:ee:52:a0:9c:47:af:87:
0b:a1:0e:2a:b7:80:2e:76:67:9d:4e:39:d1:f0:13:39:cf:e0:
37:84:95:5a:e6:20:a2:e9:a5:96:7f:45:da:17:6b:87:63:24:
f5:57:fe:91:45:eb:24:25:c4:7d:9c:3d:b1:73:13:e0:3d:b2:
38:35:38:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:15 2023 by rpki-client on console-fra.rpki-client.org