Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/fb8tVVGrEQtjRQeopO_hsGGhA7I.roa
File: fb8tVVGrEQtjRQeopO_hsGGhA7I.roa (raw, json)
Hash identifier: L0bQ64H3Q4dmHD71tJ0jqJO7KDeQwGKNLVJ+TopCbxA=
Subject key identifier: 7D:BF:2D:55:51:AB:11:0B:63:45:07:A8:A4:EF:E1:B0:61:A1:03:B2
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fb8tVVGrEQtjRQeopO_hsGGhA7I.roa
Signing time: Thu 15 Sep 2022 02:43:27 +0000
ROA not before: Thu 15 Sep 2022 02:43:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 123.205.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7DBF2D5551AB110B634507A8A4EFE1B061A103B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:c9:ef:51:51:fe:8e:6f:0a:39:7c:2a:27:
f2:cc:ed:13:a3:48:26:62:e2:ad:64:8c:62:b9:48:
78:94:2a:a9:1b:3c:3a:70:c2:31:3f:55:30:5f:4c:
fe:82:b2:06:fc:58:2a:e0:e0:e2:61:99:bb:44:e3:
f2:65:6f:e5:33:e9:4a:1b:b0:12:1c:e3:3f:a3:e1:
ea:7c:59:b7:57:4c:24:ca:63:a7:7e:38:5e:d2:03:
3d:fd:3c:f4:3e:33:44:2a:d4:7b:b4:22:7c:dd:ca:
49:02:3a:a1:ce:05:90:62:2e:da:3b:58:23:91:e4:
5f:97:85:0e:5c:82:98:03:ad:fe:28:83:2c:c4:2c:
92:71:f6:2d:29:51:4b:c7:af:3b:ae:27:05:b4:d4:
3d:c4:8a:8a:38:b8:d0:58:5e:8f:15:d6:9c:84:98:
63:a5:0f:7a:62:8b:6a:18:9b:49:fa:ab:36:be:f1:
a8:6e:e3:dc:3c:a4:00:f3:e0:4c:4f:b5:3d:15:a2:
1c:98:d4:55:5b:6f:67:98:20:c9:aa:79:9d:b1:0d:
31:c1:c0:15:9c:64:cc:cd:a6:dd:08:56:28:fa:d5:
30:31:56:f3:a3:33:1f:a8:45:3c:7c:44:f0:57:d4:
e3:d5:37:db:67:ee:54:97:51:65:6b:e5:0f:1c:83:
f9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BF:2D:55:51:AB:11:0B:63:45:07:A8:A4:EF:E1:B0:61:A1:03:B2
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fb8tVVGrEQtjRQeopO_hsGGhA7I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:a0:67:88:6e:3c:99:26:5d:fe:84:9e:8f:29:d6:eb:1e:d9:
68:6d:34:92:b0:fe:03:68:29:02:11:f2:2f:f4:04:23:a4:76:
92:71:63:dc:19:36:2d:a3:d9:42:5b:6f:ba:b3:0a:ad:a1:c4:
3e:d8:7b:ee:cc:4f:18:a5:83:97:52:05:28:43:18:7e:ac:6c:
92:63:be:ff:99:df:41:55:7a:9f:b6:54:af:2a:bf:66:a1:e8:
89:5a:65:67:81:b7:6d:23:6e:63:e0:4d:62:c8:b6:0c:c0:37:
93:16:cc:38:cf:ba:3c:9c:7c:06:f2:e5:88:1d:3f:60:a1:c1:
ca:2a:ef:95:fb:4c:f3:82:92:86:4e:54:e3:30:a9:eb:6e:c5:
0f:a2:2b:ab:03:1d:e7:46:34:fd:9e:cf:5a:cc:4b:3d:db:49:
5e:63:a5:b7:32:2e:87:8e:c0:c7:29:83:60:55:17:60:78:7f:
ff:a3:6f:3c:75:93:fc:6c:e2:9d:88:7e:e0:86:6e:11:e1:db:
83:2e:53:06:db:10:5e:7e:16:94:a7:c7:5d:f9:a3:0f:7d:02:
7a:dd:8b:f2:14:b1:89:ce:6c:33:c6:2b:47:79:59:e4:63:da:
56:6b:62:77:b5:5f:94:6b:e2:3e:a2:a4:4b:45:c9:0c:f9:f1:
15:e5:56:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:12 2023 by rpki-client on console-fra.rpki-client.org