Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZLy6DImJpgQD329SWCaQFm5K1dY.roa
File: ZLy6DImJpgQD329SWCaQFm5K1dY.roa (raw, json)
Hash identifier: QguQVxj2L4ewsg+9Taxhi8hm4Eg/mVy/pigFvr1O41c=
Subject key identifier: 64:BC:BA:0C:89:89:A6:04:03:DF:6F:52:58:26:90:16:6E:4A:D5:D6
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10B5
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZLy6DImJpgQD329SWCaQFm5K1dY.roa
Signing time: Wed 01 Feb 2023 10:28:55 +0000
ROA not before: Wed 01 Feb 2023 10:28:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 218.210.0.0/15 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4277 (0x10b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:55 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=64BCBA0C8989A60403DF6F52582690166E4AD5D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:0d:12:a6:6b:97:8e:aa:49:a7:b0:7f:14:
09:2e:49:a8:2f:b8:c1:54:5d:2c:ce:c0:66:26:d7:
15:9a:35:42:7b:84:56:2e:d2:0d:02:af:04:3b:60:
17:d7:72:2e:50:ec:34:72:9e:9b:77:5b:2a:6c:3d:
bd:5c:c3:bf:2d:b8:3a:b0:70:eb:dd:a2:cb:fe:93:
63:7c:c0:84:f6:33:b2:69:71:d6:4e:6c:83:93:38:
ce:83:6e:bd:57:e9:95:e6:18:c6:94:30:52:43:57:
13:c9:dd:21:d5:ea:98:a4:e0:38:e9:79:5d:3f:bd:
19:cc:a0:92:9e:fc:bb:b0:f3:65:29:e2:5b:b5:c5:
69:69:2a:6d:63:ca:7e:28:38:c6:b8:b0:b0:ff:17:
62:60:8f:2c:19:af:58:89:6f:ef:d9:d6:78:06:fa:
42:6f:37:da:73:87:e2:3f:f2:8f:84:5d:45:a6:93:
2f:47:0d:ec:7d:63:1d:04:12:f6:4a:2a:b9:e5:d4:
51:08:e7:81:6a:55:f2:2e:8e:c6:bf:c5:dd:19:2a:
c6:0b:c1:b5:7b:9e:94:87:d1:1b:4b:0c:39:b2:6b:
94:78:f2:74:fd:34:26:d2:af:96:20:9b:0b:11:a2:
ea:52:67:c1:b1:b9:9c:8a:ce:91:e3:d3:41:10:30:
b0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BC:BA:0C:89:89:A6:04:03:DF:6F:52:58:26:90:16:6E:4A:D5:D6
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ZLy6DImJpgQD329SWCaQFm5K1dY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.0.0/15
Signature Algorithm: sha256WithRSAEncryption
0c:95:88:bd:38:f5:0d:56:b4:4e:82:86:79:23:de:7e:4f:a7:
be:ce:29:9c:4f:b0:2a:d5:aa:e0:88:5b:b7:4a:89:02:06:3f:
48:f4:12:f0:0e:51:a1:97:67:1f:65:8b:51:1c:ff:fb:43:e9:
60:a5:94:af:de:7b:9f:e5:d1:1f:02:fe:4c:e6:0c:d0:aa:b0:
c5:21:ff:1f:a5:8e:c7:46:15:00:b9:07:23:81:9b:63:58:b8:
0f:94:f7:c2:64:77:09:95:bb:ff:35:7a:cc:cf:90:fb:b4:21:
fc:7e:08:3d:50:7d:2e:3c:b1:f4:9f:1d:0b:c6:d6:d3:ef:9c:
f0:ed:c8:d0:b5:11:08:b3:24:05:38:94:7a:e6:b0:cc:9d:07:
b7:02:08:ce:52:54:c8:c5:bf:f9:64:1a:34:27:ff:a3:a7:f3:
d3:22:f5:0a:8b:68:c3:01:bc:50:3e:2f:50:21:67:4e:3c:20:
91:3e:44:36:40:3b:6b:3a:7a:53:94:3b:60:57:08:50:16:06:
1d:90:3b:2d:f1:e5:55:a4:ed:e8:f2:f7:de:12:9e:f8:34:d8:
fa:28:99:2d:d2:a6:59:2d:18:7a:ab:86:64:f7:44:28:2a:53:
96:c4:5d:66:74:2a:22:4f:22:38:5f:a7:e5:9e:48:36:be:fb:
2b:52:c6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:51 2023 by rpki-client on console-ams.rpki-client.org