Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/bDRML-1svzZeU9C_K5wYUies7xk.roa
File: bDRML-1svzZeU9C_K5wYUies7xk.roa (raw, json)
Hash identifier: 1gjaV6dr0ofZzRml7q0Zn5UXGeLHSd+FeKbPAX+GuXQ=
Subject key identifier: 6C:34:4C:2F:ED:6C:BF:36:5E:53:D0:BF:2B:9C:18:52:27:AC:EF:19
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bDRML-1svzZeU9C_K5wYUies7xk.roa
Signing time: Thu 15 Sep 2022 02:43:28 +0000
ROA not before: Thu 15 Sep 2022 02:43:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 203.190.16.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6C344C2FED6CBF365E53D0BF2B9C185227ACEF19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:c7:17:d8:c2:72:8b:59:c3:20:3b:e4:ef:
bb:fa:4b:d6:3f:f7:b2:0b:a5:0f:0b:a4:84:52:6d:
a9:90:cd:a4:3f:25:24:b9:bb:cb:08:83:eb:cb:a4:
35:7e:26:bb:43:65:d9:6c:77:84:57:58:90:77:7e:
c9:92:7a:c8:ca:c3:96:ec:b6:ca:ba:8b:67:7c:9d:
9b:d5:f2:ee:e0:24:5f:53:1f:f0:52:e2:32:95:b7:
ad:81:3d:33:d5:6e:79:11:c4:d5:83:34:94:fe:27:
25:6e:47:31:84:41:b4:bd:b6:4a:d6:4d:40:71:c2:
f1:3d:c5:34:b8:e0:31:f6:37:8d:a0:2b:1f:57:e0:
17:2b:ae:aa:bd:3f:c0:63:87:4f:2c:f9:17:91:17:
32:02:5b:ce:01:13:19:8c:d4:f4:2a:2b:14:e6:b7:
7b:3f:9b:8d:f7:40:e7:60:c2:bd:e3:b9:3f:2e:71:
b5:32:da:fd:97:fb:5c:c6:00:5a:6a:42:11:27:5a:
8b:de:6e:76:da:a9:a7:7f:b2:13:03:cf:0c:2f:20:
a6:7e:a6:00:34:6a:9d:c2:6e:76:bb:e2:03:87:8a:
49:e7:0f:60:02:90:4e:48:c3:df:d4:d6:96:70:f8:
0c:f1:81:d6:1a:1e:0f:57:99:85:5d:2f:cc:d8:aa:
db:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:34:4C:2F:ED:6C:BF:36:5E:53:D0:BF:2B:9C:18:52:27:AC:EF:19
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bDRML-1svzZeU9C_K5wYUies7xk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.190.16.0/21
Signature Algorithm: sha256WithRSAEncryption
56:cf:e6:31:d7:ed:b0:3b:3a:a3:2c:29:ea:ac:0f:9b:67:82:
15:b7:5b:a7:1d:32:89:05:9a:b9:83:d4:34:8c:a7:14:4c:c5:
df:12:52:93:e9:9e:94:c6:d9:50:0c:2c:05:0e:8c:85:09:87:
84:05:9b:ff:87:af:38:a8:8d:28:a3:7c:05:cc:e3:3d:cc:35:
d1:ee:77:58:1b:77:db:51:05:14:67:aa:67:8f:52:ab:bd:36:
2d:19:9c:a2:35:98:75:b5:52:64:c5:fb:97:c9:9c:79:a8:0a:
e0:c5:a0:b8:4d:46:27:12:a9:2b:95:33:d2:19:c5:d0:c4:c8:
43:6f:fd:9e:6e:b6:d6:f8:d2:f0:8c:13:9b:e2:46:0d:1f:39:
16:99:fd:59:8d:f0:7d:43:a5:1e:e1:b3:be:1b:0a:ea:46:1b:
9a:1e:59:c5:53:ca:29:0a:9c:97:0a:7b:6f:d0:14:6c:c5:c4:
91:57:b8:84:bc:39:c8:58:e0:b5:e2:48:8b:b4:60:e6:fc:d6:
05:e4:0a:38:ae:6c:b2:12:72:e2:b1:eb:50:a3:74:4d:c0:0a:
ea:cb:a2:b2:08:1e:95:4b:bf:03:1f:ff:e4:27:94:58:db:d6:
f7:db:dc:94:4e:19:e2:f7:98:c9:58:86:92:9e:13:b9:61:cd:
05:b7:02:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:12 2023 by rpki-client on console-fra.rpki-client.org