Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_RS9zTuH_r89l93alO-W0Bc7i_Q.roa
File: _RS9zTuH_r89l93alO-W0Bc7i_Q.roa (raw, json)
Hash identifier: xGOdRkFoTCXKC4jE0/C3NwYjL97DEVWZJfqjSh5Ckg8=
Subject key identifier: FD:14:BD:CD:3B:87:FE:BF:3D:97:DD:DA:94:EF:96:D0:17:3B:8B:F4
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_RS9zTuH_r89l93alO-W0Bc7i_Q.roa
Signing time: Thu 15 Sep 2022 02:43:23 +0000
ROA not before: Thu 15 Sep 2022 02:43:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 113.196.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FD14BDCD3B87FEBF3D97DDDA94EF96D0173B8BF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d9:f1:fa:7d:7d:68:a3:2a:1f:b0:f2:8e:be:
a2:54:c0:da:ee:4e:e2:0d:c4:ba:dd:47:6e:ca:ca:
40:c1:ee:15:55:9a:1f:56:2a:7b:0c:59:76:de:f5:
5c:f0:ee:a8:d1:aa:c6:69:90:a8:3e:9c:40:7e:8d:
b4:22:bd:c3:91:bf:2e:1b:c8:c8:7c:b6:9c:8e:40:
56:67:79:0f:ee:f7:5e:d5:a6:52:bb:f4:09:2c:bb:
d6:57:9c:65:b2:9c:65:6e:46:2a:26:73:d3:8c:2c:
57:9f:bf:66:15:09:96:95:77:6f:6e:7f:df:5d:ce:
3b:6e:a1:02:96:cb:75:d0:da:44:74:14:55:ac:9f:
1d:b8:7b:ce:46:2e:5d:cb:d0:66:6b:08:00:68:65:
cd:c4:07:c4:9a:69:75:15:9d:bc:16:57:15:db:d6:
4d:ef:19:d1:33:c7:91:10:f9:da:40:b1:bc:08:0a:
ae:cd:4d:c6:fe:df:03:89:19:1d:1b:95:52:d9:53:
5d:15:34:6a:76:01:7b:af:00:dd:a2:a1:db:be:29:
bc:e0:09:02:91:cc:15:aa:11:bd:6d:19:bb:0a:65:
b2:d9:f6:84:e9:c1:82:81:60:c6:89:19:06:b1:f6:
ee:92:0f:7d:40:a8:5f:ca:0a:a4:08:c1:ad:05:f1:
67:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:14:BD:CD:3B:87:FE:BF:3D:97:DD:DA:94:EF:96:D0:17:3B:8B:F4
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_RS9zTuH_r89l93alO-W0Bc7i_Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bd:0f:14:f5:fd:94:38:b1:5c:6b:4a:57:15:b9:80:16:13:47:
07:dc:cd:d8:e4:3f:d7:95:dd:f9:31:88:aa:00:73:6a:1a:14:
ed:b6:87:19:93:6e:84:f2:36:37:44:d6:71:2d:23:56:f6:2c:
bf:41:b9:14:f2:b7:ad:e0:a9:da:2e:57:4e:f5:80:39:bb:5e:
c8:88:5b:be:80:fc:50:4e:4c:fa:8e:4d:0d:db:fb:a1:d7:74:
ae:f5:8c:b4:c3:5c:be:eb:8f:ac:44:ae:4f:d6:9a:68:a7:6f:
d8:03:3b:d6:53:af:7e:30:31:4c:cf:27:a3:16:41:5e:71:d2:
88:bc:9b:e6:a1:f3:19:92:bd:d5:98:07:86:e2:04:30:f0:c0:
d8:81:46:19:ab:c0:06:76:8b:e9:92:30:ba:95:32:31:e0:ce:
50:2f:b5:77:60:87:45:01:d5:26:8c:bc:87:00:30:95:a0:ae:
3e:15:5d:1f:68:8f:b5:af:39:2f:e0:61:e5:80:14:2b:e3:10:
6b:58:27:b2:01:44:4f:3c:3f:c9:2d:a2:23:19:fe:97:85:c5:
71:04:ea:59:dc:7c:5a:6f:2a:f5:12:83:07:42:a3:9d:65:8f:
60:80:ed:d5:5f:7c:fd:26:7e:bf:3d:e1:4e:d3:3d:38:4b:a4:
59:7d:7a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:00 2023 by rpki-client on console-ams.rpki-client.org