Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/gB2jv2kWu3ZPfyCbmoehqk6-bWk.roa
File: gB2jv2kWu3ZPfyCbmoehqk6-bWk.roa (raw, json)
Hash identifier: kcTS9LTO24QWXkkRBwTbX17A917suwQpvXeAxYV8Boc=
Subject key identifier: 80:1D:A3:BF:69:16:BB:76:4F:7F:20:9B:9A:87:A1:AA:4E:BE:6D:69
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/gB2jv2kWu3ZPfyCbmoehqk6-bWk.roa
Signing time: Thu 15 Sep 2022 02:43:13 +0000
ROA not before: Thu 15 Sep 2022 02:43:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 122.147.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=801DA3BF6916BB764F7F209B9A87A1AA4EBE6D69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:91:05:c3:fc:a1:55:b1:6a:8e:cb:f7:e5:
07:3d:31:de:cb:7c:0b:ba:8d:37:2a:b9:2d:4e:34:
ee:e3:60:d4:5a:ef:b7:0e:6e:8e:92:e4:84:11:5f:
e8:94:08:68:47:1d:28:85:51:3c:fb:1c:ff:01:a3:
c6:a9:a5:c5:97:01:7d:5f:06:fc:a3:f7:63:e1:6a:
52:d8:31:53:7b:57:35:62:a9:d7:8e:03:41:1e:6d:
6a:00:a9:ae:d0:71:b7:aa:0e:7c:76:d5:b6:9d:bb:
3a:97:ab:91:52:88:75:3b:d6:05:fa:57:13:2a:af:
e0:0c:4d:3b:54:5e:be:a0:23:0d:d3:20:43:cd:6f:
d4:f9:af:dc:8c:22:33:e5:e4:09:b0:9d:19:71:4d:
96:23:a9:03:95:ff:00:58:80:17:bb:cf:64:df:ed:
16:6b:a1:da:11:61:ff:03:e9:3b:ac:74:34:71:cb:
78:ba:8c:b1:53:cf:44:01:96:b0:0f:cf:71:27:4a:
97:e8:03:9d:d6:a3:bc:dd:f0:9b:35:cd:01:9b:d7:
94:dd:8a:b2:4b:5f:72:1a:8e:0e:9d:08:7b:74:03:
76:dc:8e:cf:50:dd:19:5b:76:87:eb:c6:52:3e:35:
f0:62:cb:8d:35:85:c6:9e:45:b8:11:df:14:12:fe:
96:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1D:A3:BF:69:16:BB:76:4F:7F:20:9B:9A:87:A1:AA:4E:BE:6D:69
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/gB2jv2kWu3ZPfyCbmoehqk6-bWk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.0.0/16
Signature Algorithm: sha256WithRSAEncryption
13:8b:8e:e9:79:ed:70:40:1d:b5:b3:b2:01:ae:29:b4:7f:e0:
17:6e:6b:0a:46:be:f8:ff:2b:40:ff:df:83:19:3b:30:22:b3:
5e:c0:49:25:55:d1:e2:81:82:7e:83:3c:70:67:cb:b8:b6:06:
89:5c:4b:11:64:d8:9c:6a:2d:5c:ec:02:26:3a:b3:85:3f:ab:
99:75:28:53:4e:61:52:3a:d0:c9:bc:53:42:11:67:21:64:f0:
49:95:b5:ea:c2:3d:c1:6d:24:d1:1d:9e:fe:64:da:61:f4:52:
a3:f5:c3:d9:59:dd:4e:f8:dd:16:32:05:04:46:29:51:66:97:
1c:7b:28:2a:c2:98:3d:d7:a5:bc:2e:a7:bc:ce:12:31:34:c2:
22:49:bd:bd:96:69:68:74:a6:af:f5:6c:e9:cf:16:42:5b:16:
86:9c:45:cf:3d:20:a2:9f:9a:b5:33:ec:ad:ab:f6:32:dc:19:
23:60:68:7b:10:0b:ce:c3:61:11:e8:62:18:e4:34:5b:c1:e9:
82:20:e2:5b:7e:7d:2b:4b:12:d8:ef:57:b9:8f:d4:81:05:eb:
b4:a1:52:56:4a:c6:5b:2f:f4:59:39:28:1b:49:1b:b4:29:59:
07:86:d2:9d:d0:8b:75:55:49:32:9a:05:09:c8:87:8f:e0:e6:
0e:12:81:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:12 2023 by rpki-client on console-fra.rpki-client.org