Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/cJcM7xWKGqZIf-WsekeGEPexukk.roa
File: cJcM7xWKGqZIf-WsekeGEPexukk.roa (raw, json)
Hash identifier: jd6Tzql8/b/LMCo/6LgDyjjudBeVDTybjX5V4cMCpAw=
Subject key identifier: 70:97:0C:EF:15:8A:1A:A6:48:7F:E5:AC:7A:47:86:10:F7:B1:BA:49
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 115C
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/cJcM7xWKGqZIf-WsekeGEPexukk.roa
Signing time: Thu 06 Apr 2023 06:51:28 +0000
ROA not before: Thu 06 Apr 2023 06:51:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131602
IP address blocks: 123.205.160.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4444 (0x115c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Apr 6 06:51:28 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=70970CEF158A1AA6487FE5AC7A478610F7B1BA49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:18:e8:e5:c9:6c:4a:68:e3:f2:fb:77:73:e1:
c7:41:b3:83:9c:d8:6c:cd:32:b1:2d:7b:4c:c7:d1:
ef:a2:e7:1a:89:de:70:08:2d:3c:ff:30:41:9c:a9:
19:8e:21:73:0e:06:84:2e:11:ac:9c:06:10:1c:5e:
37:d5:e5:b5:bf:e7:da:13:34:d7:c9:c2:4b:6b:10:
8d:c8:1e:9d:cd:f4:b8:75:82:2b:67:a1:17:b6:09:
64:e9:bd:1f:f4:c7:6d:6d:8f:45:ac:4b:b2:0d:94:
5f:06:c1:30:8e:21:39:2c:2f:b8:d7:d2:1e:26:6b:
65:57:50:75:6d:39:50:41:d7:6f:e5:e1:df:14:5c:
e9:ad:a0:3e:62:9c:bb:7b:96:50:88:88:f5:89:c0:
14:08:ee:e2:a2:4f:82:09:58:4d:c4:08:7d:49:02:
d7:bb:8e:81:0d:45:de:54:7e:cb:45:f4:1d:9c:2a:
de:9e:59:9a:e4:e9:2f:07:86:6a:25:52:b9:57:7a:
07:db:af:63:3c:80:31:f1:dd:24:51:e8:3e:79:7c:
47:eb:09:80:66:8c:29:9c:51:54:05:98:b1:56:39:
39:03:0b:0a:9e:b0:b9:37:69:69:db:2a:32:f0:0e:
41:08:87:a9:84:bb:93:b5:86:0a:b7:f1:76:54:ef:
6b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:97:0C:EF:15:8A:1A:A6:48:7F:E5:AC:7A:47:86:10:F7:B1:BA:49
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/cJcM7xWKGqZIf-WsekeGEPexukk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.160.0/20
Signature Algorithm: sha256WithRSAEncryption
61:4d:9b:86:3b:7d:1c:97:b5:f6:74:c4:0e:cf:c8:37:07:a5:
51:eb:e6:66:a3:c8:26:0a:1f:dd:49:44:f4:d1:34:79:be:02:
59:fb:d3:99:7c:0a:f2:11:37:f0:a5:58:79:72:27:89:dc:a4:
1e:1c:5d:75:f7:46:7c:f0:92:af:9e:71:23:01:a6:dc:8d:ec:
da:52:ce:18:7d:91:3c:49:3b:50:17:72:7b:91:3c:30:95:27:
f8:0e:3b:05:59:fc:d1:4b:c0:cc:4a:c4:62:c0:56:ad:fc:3d:
57:7b:7b:55:dc:1a:d2:e3:7a:b4:d5:6f:0e:b5:b6:5e:de:b3:
97:53:29:98:90:09:97:45:ef:51:5d:8f:73:a7:47:ae:dd:f3:
fe:74:31:c6:6e:b9:b6:50:3c:40:a3:7a:85:bf:45:55:ab:19:
42:3c:d0:bd:6d:3c:10:4d:a6:2d:06:63:74:30:85:c5:46:dc:
3f:c8:3e:b7:eb:9b:63:50:8b:25:a0:5e:12:d7:d7:c6:03:58:
fb:c9:dd:d5:0e:11:69:3d:e3:d4:1d:6e:d9:22:7d:5f:f1:b2:
64:6b:1b:64:03:c1:4d:af:85:6b:eb:55:28:25:d3:ef:78:c5:
7b:ae:bc:68:51:f3:cd:c0:02:b7:5a:d2:12:a9:15:8d:7d:92:
bc:73:a2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:15 2023 by rpki-client on console-fra.rpki-client.org