Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/d5U59Nf59LC-ywqIwiSkjUMTAqI.roa
File: d5U59Nf59LC-ywqIwiSkjUMTAqI.roa (raw, json)
Hash identifier: oTxlPO14qCSNrKJnEskVLsEBV/+EdHeVxgZfek7clH8=
Subject key identifier: 77:95:39:F4:D7:F9:F4:B0:BE:CB:0A:88:C2:24:A4:8D:43:13:02:A2
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 107B
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/d5U59Nf59LC-ywqIwiSkjUMTAqI.roa
Signing time: Wed 01 Feb 2023 10:28:37 +0000
ROA not before: Wed 01 Feb 2023 10:28:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 2001:4580::/26 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4219 (0x107b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:37 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=779539F4D7F9F4B0BECB0A88C224A48D431302A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:45:bb:43:61:01:87:aa:1e:15:1b:4a:e7:d2:
8a:9d:18:88:bd:f6:25:8a:9a:28:f3:46:e8:43:af:
5c:ec:0a:97:5f:d2:dc:a5:f8:e6:25:a9:89:9d:89:
06:e6:7e:8a:b7:ea:b0:c6:5f:8b:57:a2:3f:55:c3:
1c:95:e5:fd:86:bb:46:00:7a:13:fc:76:c0:00:93:
ca:16:cd:68:e2:16:ac:eb:9e:2c:91:31:3d:82:09:
5e:86:d5:0c:24:97:95:c1:09:56:32:36:71:cd:67:
f3:ef:80:f0:6d:b6:a9:66:89:11:c3:6a:67:6b:fe:
99:9f:43:82:09:47:76:cb:f3:2d:63:4a:0c:2d:24:
37:15:37:08:1f:07:20:f0:03:47:dc:c8:b1:04:fa:
2f:f0:63:6e:6b:09:4a:d9:ee:0e:74:41:a2:4b:7d:
87:b1:aa:0f:13:fa:17:1e:6f:87:10:49:66:a4:ef:
84:0f:2c:e1:a7:f5:15:f0:3b:0d:8e:08:bf:aa:ea:
a5:83:a5:42:1e:e0:55:f2:1e:3d:f4:cc:ae:47:5c:
ef:07:47:17:d0:ca:38:79:dd:06:a8:07:41:e1:53:
ac:5d:5f:47:ce:94:b2:8d:fa:02:13:5b:3a:e1:c2:
24:62:52:70:d8:a5:48:b0:57:91:e3:74:f8:c9:9a:
25:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:95:39:F4:D7:F9:F4:B0:BE:CB:0A:88:C2:24:A4:8D:43:13:02:A2
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/d5U59Nf59LC-ywqIwiSkjUMTAqI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:4580::/26
Signature Algorithm: sha256WithRSAEncryption
05:0b:2a:66:d2:cd:90:22:32:8c:24:cb:72:2c:52:56:8f:88:
68:91:5a:42:32:33:79:6e:6e:d4:65:27:80:5c:7c:fc:65:26:
ec:1f:05:f4:ac:95:ec:53:c9:d5:9e:0d:89:51:65:bb:97:13:
6c:2c:bc:fd:6a:a9:3d:e0:f3:64:bd:9b:d4:74:5b:44:af:67:
45:54:26:26:2c:74:fc:e8:67:fe:c2:7d:a0:c9:63:5f:ed:ef:
83:75:98:90:33:e4:34:5a:07:44:d5:3d:55:d1:81:b9:90:69:
5f:d9:7f:95:af:19:c8:34:16:43:ea:9c:61:94:39:4c:61:72:
88:04:e0:01:31:33:c4:5c:eb:60:5e:04:69:70:79:15:a9:4a:
8b:78:87:c8:79:e4:69:2e:2d:af:ce:a1:fa:82:8b:61:5e:5c:
3a:24:ce:3a:7e:88:26:f4:34:35:f2:61:30:31:63:d5:a0:5d:
40:36:17:37:d3:22:4b:b1:29:c5:5f:ae:03:ae:41:13:46:5c:
7c:6d:8e:80:8e:a2:2b:65:bb:18:3a:36:05:c7:04:41:2e:21:
d2:7a:79:64:83:be:be:32:6a:b7:9c:b0:46:08:ab:81:89:22:
6d:a0:c0:ea:60:61:f7:e2:4f:f0:23:d2:df:3c:e7:24:ed:51:
8f:1f:0c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:15 2023 by rpki-client on console-fra.rpki-client.org