Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/f0IxkSav6azb_b7cMM1SDLwkknc.roa
File: f0IxkSav6azb_b7cMM1SDLwkknc.roa (raw, json)
Hash identifier: li3L4OLKKtHmFyq+TKN3r+n2GSApsBg54BAAQ2XIBBM=
Subject key identifier: 7F:42:31:91:26:AF:E9:AC:DB:FD:BE:DC:30:CD:52:0C:BC:24:92:77
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1096
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/f0IxkSav6azb_b7cMM1SDLwkknc.roa
Signing time: Wed 01 Feb 2023 10:28:45 +0000
ROA not before: Wed 01 Feb 2023 10:28:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 210.244.88.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4246 (0x1096)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:45 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7F42319126AFE9ACDBFDBEDC30CD520CBC249277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bd:81:35:32:9d:bd:49:2d:87:6b:bc:f7:0d:
46:a9:42:ad:21:ba:a2:57:34:4b:cf:06:cf:15:8c:
ab:6a:85:9b:64:a9:2b:95:e6:00:d7:c5:bd:08:6a:
c3:91:94:19:83:cb:e0:26:eb:1c:ba:31:dc:fe:9e:
2c:28:e3:0a:d9:28:da:c5:a3:1b:a3:ba:7a:bf:b6:
cb:9a:4c:ba:9e:a8:da:ca:e4:d4:4c:52:b4:3b:e7:
ad:e8:10:e0:4d:90:4a:ab:ce:c2:59:98:15:37:23:
26:a1:f3:c5:6c:b0:12:d3:de:60:5f:82:ce:b6:55:
bf:65:92:fa:2d:7e:70:38:df:ef:5c:b1:8b:a5:18:
4a:fe:dd:0c:05:92:7b:16:ca:88:4e:62:db:06:b9:
30:2c:08:0b:c8:3e:42:0e:72:e1:2e:f5:4e:af:a1:
ee:af:50:49:49:b1:2b:94:73:89:23:29:7b:86:30:
44:b2:d8:eb:3a:22:d5:87:a3:79:6a:64:74:8d:90:
9f:a8:2c:36:fa:b2:34:e7:c8:08:1b:38:c6:6a:a6:
80:fe:f6:3b:a2:cc:29:9b:03:f6:ee:4a:dd:97:3a:
7f:68:0a:91:96:c1:0f:60:7f:6c:45:a8:ce:6d:32:
07:0a:62:cb:d2:47:21:71:65:62:08:47:78:91:3d:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:42:31:91:26:AF:E9:AC:DB:FD:BE:DC:30:CD:52:0C:BC:24:92:77
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/f0IxkSav6azb_b7cMM1SDLwkknc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.244.88.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:6e:82:ca:40:8d:d6:38:26:48:42:70:61:29:c0:53:d6:cc:
60:32:62:6d:c1:5b:24:6f:84:06:fc:6b:8c:5c:ab:d9:c6:1f:
4b:2e:9f:36:fe:6f:b6:0f:73:63:64:e0:8e:19:21:84:2c:1c:
f7:fa:c8:93:d7:90:73:31:63:02:bb:17:ca:b4:70:05:08:07:
35:51:47:63:93:28:e2:2c:94:4b:2d:0d:53:b4:4e:c8:b4:31:
5b:db:53:31:bf:25:0c:8b:85:72:07:f2:47:71:4a:74:07:81:
10:c9:41:1d:b3:56:ab:e1:6e:da:bd:de:66:17:10:f0:2c:74:
72:40:44:a1:a7:2c:97:3c:20:8c:ec:93:d9:a4:a7:b5:85:70:
27:35:c4:ee:bd:71:f0:09:32:68:52:f1:07:ff:aa:09:8e:28:
eb:66:71:c4:85:19:b4:00:c4:c5:35:40:91:56:98:7c:74:b7:
5f:68:b0:dd:0a:2f:84:71:62:6d:01:66:ba:4d:36:c3:3d:1c:
c6:37:fc:61:09:15:a4:0b:7d:dc:b3:ba:3d:7e:86:78:9c:77:
e9:87:4a:01:2d:33:7e:40:b8:5b:c5:56:48:b5:2f:58:35:15:
36:12:7c:51:9f:8f:f5:f0:79:82:56:b4:ae:24:7e:d1:bc:1b:
86:cb:a5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:51 2023 by rpki-client on console-ams.rpki-client.org