Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/dMTUqgPhnFwr56ISCHHdcixETbg.roa
File: dMTUqgPhnFwr56ISCHHdcixETbg.roa (raw, json)
Hash identifier: jI8cDhrA/sLksrC0xVTGPav5uYD4+SxhM2w1BEkm5v0=
Subject key identifier: 74:C4:D4:AA:03:E1:9C:5C:2B:E7:A2:12:08:71:DD:72:2C:44:4D:B8
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 109A
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dMTUqgPhnFwr56ISCHHdcixETbg.roa
Signing time: Wed 01 Feb 2023 10:28:46 +0000
ROA not before: Wed 01 Feb 2023 10:28:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 103.234.40.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4250 (0x109a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:46 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=74C4D4AA03E19C5C2BE7A2120871DD722C444DB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:ef:52:f4:2e:43:12:27:e6:f8:9c:17:08:
93:ad:fd:d3:b8:f8:ff:51:2a:43:d8:77:fe:e0:d0:
c2:84:78:f6:bf:ae:cb:fb:54:a9:84:8e:16:27:5e:
43:59:ea:6a:64:7d:48:26:52:72:1a:96:10:13:f3:
cd:09:66:7b:98:50:eb:f8:2f:ff:dd:30:62:e2:0b:
28:3b:15:1d:5e:a9:88:a8:e7:ff:9c:06:9a:77:30:
14:87:c6:ec:6e:48:a0:13:d6:c4:4b:60:1d:15:22:
88:e1:8e:19:9a:6c:e4:98:e8:fa:e9:31:e3:4f:c8:
13:1b:30:6b:43:93:b4:77:05:59:31:13:b5:b2:3f:
66:73:70:36:32:54:f5:2d:8f:5b:a9:4f:46:84:1d:
f9:ec:f5:dc:e0:00:7f:db:64:6e:6e:b6:08:4b:e3:
dd:f8:5a:3d:1b:25:15:a0:94:19:98:de:af:00:27:
e3:05:ca:5d:a8:f1:c8:bd:05:e3:bc:29:d2:0c:80:
c9:36:2c:68:de:07:d5:01:81:b9:06:c5:f2:4e:20:
a7:73:b0:24:e8:6b:49:81:74:6d:0f:59:25:5d:1e:
bf:38:00:8c:12:97:35:04:e1:58:af:19:f3:b6:02:
7f:bc:98:60:cb:fa:76:f6:63:e1:70:28:27:e0:09:
83:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C4:D4:AA:03:E1:9C:5C:2B:E7:A2:12:08:71:DD:72:2C:44:4D:B8
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/dMTUqgPhnFwr56ISCHHdcixETbg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.234.40.0/22
Signature Algorithm: sha256WithRSAEncryption
57:bc:52:9f:06:2d:a3:32:f3:3c:7a:2a:60:bd:c5:1c:ef:58:
51:c7:fc:e5:06:31:12:ba:b2:ae:cd:60:6e:5f:0b:c3:4a:28:
14:17:49:0f:d4:73:ed:b3:f7:b5:18:e6:24:44:78:6d:b1:b1:
90:04:90:77:36:7f:22:0a:61:49:92:5b:f6:6e:56:91:0b:11:
55:6d:8b:62:d9:c0:49:81:13:f3:85:a3:45:9f:ba:d0:c3:77:
55:32:60:f5:25:08:3a:73:cb:3b:ce:a5:58:aa:f8:14:68:53:
4b:24:09:28:e9:bf:f1:48:23:40:db:5b:85:b4:5a:b4:39:a4:
0e:e2:42:0c:7e:64:ad:01:de:b4:8a:e4:81:ad:24:eb:0b:41:
3c:ff:02:52:ce:d5:c1:e3:39:0a:9e:ce:e0:9c:c9:92:4a:40:
70:75:fe:b7:81:ca:7a:3d:c8:8f:f7:0f:76:d7:0e:51:eb:67:
a2:a0:11:2f:e2:06:d4:d2:a5:1b:f1:05:96:a0:83:b2:c5:47:
77:da:0e:f9:b1:a3:fe:e0:76:13:77:95:5c:37:d7:a6:57:54:
ed:3d:ba:ff:8e:40:b6:80:0b:43:b0:77:dd:23:b6:25:b9:a6:
78:16:06:d0:86:27:db:6b:6b:f3:42:1e:08:d4:c2:bb:79:63:
09:72:57:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:51 2023 by rpki-client on console-ams.rpki-client.org