Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZIsQvzUCFrkYVluLnqIIDuU4zWA.roa
File: ZIsQvzUCFrkYVluLnqIIDuU4zWA.roa (raw, json)
Hash identifier: h6+IeJbNHoQ0+e6WDjBANUBvnjYiQBFAIOjSrXRhITQ=
Subject key identifier: 64:8B:10:BF:35:02:16:B9:18:56:5B:8B:9E:A2:08:0E:E5:38:CD:60
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 115A
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZIsQvzUCFrkYVluLnqIIDuU4zWA.roa
Signing time: Thu 06 Apr 2023 06:49:58 +0000
ROA not before: Thu 06 Apr 2023 06:49:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131602
IP address blocks: 123.205.144.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4442 (0x115a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Apr 6 06:49:58 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=648B10BF350216B918565B8B9EA2080EE538CD60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:40:73:35:a6:78:14:90:55:d8:2b:8a:e4:cf:
e3:b4:e8:77:b6:d4:05:4d:2c:4e:67:71:f1:96:e9:
9d:55:06:36:2b:13:98:4b:e2:73:5e:87:45:a9:de:
4b:72:8f:5b:94:5f:1f:0a:c0:94:52:3f:f7:07:c0:
d3:b2:ca:d1:b1:19:7c:1e:36:3a:af:b2:a8:21:1f:
7d:7d:88:40:ef:8d:23:15:b5:2d:45:1f:46:f3:bc:
5a:6d:50:1e:6d:52:b6:03:ba:ae:e2:aa:13:30:ed:
a3:ae:74:7c:27:45:45:a9:3f:71:19:92:2d:44:cb:
ce:ff:76:13:00:2c:10:40:f4:52:c5:41:58:f7:fc:
ed:5f:17:87:ff:e0:e9:51:02:76:a1:44:a1:2d:16:
c0:5e:be:97:c9:94:f8:43:fa:2c:3f:44:a4:75:b2:
e5:61:fb:3c:01:27:c9:c0:90:43:52:9d:50:68:f1:
8b:e6:d3:47:bd:32:3a:8c:87:05:da:92:25:08:b5:
bb:4c:44:69:71:bd:7b:c2:9c:cb:ee:f1:94:22:27:
0f:9a:ec:b8:a9:94:27:89:69:5d:00:7e:25:d7:8b:
07:50:30:20:64:36:c7:7f:8e:49:cc:99:d1:de:6b:
74:f0:ce:27:2f:3b:64:cf:26:52:6e:cd:4c:20:c8:
7d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8B:10:BF:35:02:16:B9:18:56:5B:8B:9E:A2:08:0E:E5:38:CD:60
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZIsQvzUCFrkYVluLnqIIDuU4zWA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.144.0/20
Signature Algorithm: sha256WithRSAEncryption
56:0b:ff:27:8a:5b:0b:52:dd:34:1b:4e:7a:3c:38:d8:48:20:
7f:16:e1:f2:01:a9:8d:af:1d:1d:5f:7f:fa:ff:b2:0f:76:6f:
57:2b:c1:9d:43:c8:66:d5:80:55:01:97:01:5a:07:67:88:a1:
6d:d1:8d:f1:d5:bc:54:56:e0:23:1c:33:b9:45:37:d6:a1:f8:
b1:1f:ce:fd:1d:ea:1b:9b:77:9f:77:53:c3:1f:49:83:4a:01:
e1:3c:89:3e:cc:60:d3:28:21:72:50:2f:aa:7c:86:1a:0f:f8:
b7:cf:69:c9:bf:23:2c:6d:ea:81:fa:c6:63:24:78:75:66:47:
69:08:5f:c6:c9:d8:6a:16:b1:2a:22:1e:06:aa:15:aa:cb:1b:
94:8d:25:40:cd:71:21:21:ae:bb:c9:00:2a:17:79:26:a5:62:
bf:45:63:91:64:c3:51:b4:43:b7:89:fd:80:53:ac:17:57:74:
a0:dc:2f:cd:6c:3c:c0:2c:16:25:51:ad:6d:a9:d0:85:fe:fc:
8f:6a:30:f5:44:45:42:67:9b:40:f9:32:39:51:c8:56:39:4b:
ec:ab:5e:c8:03:c8:da:d9:3f:79:22:2d:eb:2b:29:e6:15:f8:
fa:a5:32:d7:64:92:e8:09:1a:b8:72:28:ad:41:af:65:af:81:
21:c1:0c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:51 2023 by rpki-client on console-ams.rpki-client.org