Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/c00q--4LGQPPPMkqN3Mv5Pj8d0w.roa
File: c00q--4LGQPPPMkqN3Mv5Pj8d0w.roa (raw, json)
Hash identifier: ae2Sm2O8MsD1JswZNhTLw96hKb5idr7DLVV0qb9/QpA=
Subject key identifier: 73:4D:2A:FB:EE:0B:19:03:CF:3C:C9:2A:37:73:2F:E4:F8:FC:77:4C
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1109
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/c00q--4LGQPPPMkqN3Mv5Pj8d0w.roa
Signing time: Wed 01 Feb 2023 10:29:23 +0000
ROA not before: Wed 01 Feb 2023 10:29:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 122.146.110.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4361 (0x1109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:23 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=734D2AFBEE0B1903CF3CC92A37732FE4F8FC774C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:bb:e8:66:c2:8f:76:b9:c9:77:fb:53:29:cf:
35:ef:55:01:87:34:48:b1:e1:e4:69:4a:a1:3f:ff:
61:d6:ff:32:74:05:b1:b4:18:e4:9c:b7:3c:3d:b3:
b5:de:4f:c3:34:ee:d3:78:1c:29:b9:01:c7:5f:49:
ca:ae:fc:64:20:6a:c3:57:1a:1c:db:c3:07:71:dd:
f7:dd:57:fc:50:bd:da:14:4f:b2:a1:73:62:a7:ce:
32:5b:61:d6:0e:34:07:10:e6:63:35:80:a3:4d:a6:
29:90:3c:d4:62:0f:84:61:30:cd:a1:54:9a:58:9a:
cc:91:74:36:af:b6:31:90:8c:03:ca:d6:d7:8a:8f:
52:4a:e0:23:ee:a4:9d:49:3c:31:53:f9:51:22:80:
ee:d4:a1:2f:9d:4a:42:62:2b:65:5e:47:51:cb:92:
77:91:27:b6:8c:31:f9:fd:d9:28:40:1a:70:e6:a4:
09:82:b9:d4:0e:81:c8:85:06:f5:76:40:28:70:95:
d1:1e:31:ac:52:8e:60:6e:bd:03:36:0d:84:3e:75:
86:4b:4c:62:79:20:b0:06:a1:54:7c:cb:46:ed:5e:
f7:7e:c6:93:8c:ad:17:cd:ff:91:df:50:05:87:ef:
d4:c6:5c:37:45:40:1c:26:62:2d:b9:16:9d:51:d6:
1a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4D:2A:FB:EE:0B:19:03:CF:3C:C9:2A:37:73:2F:E4:F8:FC:77:4C
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/c00q--4LGQPPPMkqN3Mv5Pj8d0w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.110.0/23
Signature Algorithm: sha256WithRSAEncryption
24:e7:9e:d1:57:8e:45:46:0a:47:22:77:b2:f4:f3:6e:32:d7:
da:9a:04:9e:30:ab:16:ee:ad:78:10:62:72:07:90:ce:29:30:
b7:97:ff:dc:a4:cf:65:53:32:3b:65:de:82:46:4e:d5:96:6e:
cc:d8:cc:fd:ba:25:2f:b6:85:12:48:07:25:d5:da:57:8b:af:
16:06:bb:c0:e6:96:15:b5:41:2c:d9:99:31:01:40:c8:de:d2:
f4:8c:4a:6c:e6:78:67:b0:d0:73:ac:a4:3b:80:1f:a6:2d:51:
4d:c2:30:b4:55:ab:5d:b0:9d:c2:cc:6a:0c:86:68:5c:bd:f4:
7a:93:65:8f:ed:2c:90:52:74:9b:1a:9f:66:14:08:fa:0e:6a:
5a:82:a2:bb:db:46:9f:d0:e7:34:f8:ad:dc:3a:3d:55:b9:a0:
34:a5:d1:f8:92:98:68:90:40:9a:d6:a4:d2:e3:70:75:22:04:
1d:90:d0:6c:e5:43:66:77:ad:c4:94:3d:10:28:d2:6c:e5:0a:
d9:db:3e:94:b4:df:84:d8:19:73:83:5e:05:1f:c4:8a:7f:d8:
c5:12:83:1c:fe:d2:ec:ed:17:6d:eb:0d:53:c9:7a:7d:b3:88:
61:24:57:4c:23:12:a5:f6:09:f9:5a:31:8d:58:f1:a3:bb:18:
aa:1d:da:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:15 2023 by rpki-client on console-fra.rpki-client.org