Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/h1Q49CUYYCWkmh441hRzMbT5hIQ.roa
File: h1Q49CUYYCWkmh441hRzMbT5hIQ.roa (raw, json)
Hash identifier: hYLT82Iekqr3VxD5/XqPEkg6ocoAL19usYnLwPmgMNs=
Subject key identifier: 87:54:38:F4:25:18:60:25:A4:9A:1E:38:D6:14:73:31:B4:F9:84:84
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0CE4
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/h1Q49CUYYCWkmh441hRzMbT5hIQ.roa
Signing time: Wed 01 Feb 2023 10:29:13 +0000
ROA not before: Wed 01 Feb 2023 10:29:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 192.72.32.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3300 (0xce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Feb 1 10:29:13 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=875438F425186025A49A1E38D6147331B4F98484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0c:22:10:f0:fc:63:3f:10:ff:14:ee:30:5a:
00:3d:cb:75:64:99:e9:64:c7:d5:fc:96:17:b9:33:
1b:d9:ea:28:1f:bf:34:cc:ed:76:97:9f:ed:15:5f:
19:3c:b3:88:dd:43:1f:58:67:4f:c6:67:37:51:78:
f1:e5:16:61:5d:91:be:5e:17:2b:63:1b:45:fb:9f:
99:2d:3e:e6:c7:b1:64:b8:e0:7e:89:4b:c3:f9:74:
20:1a:aa:2e:2a:09:76:0a:0e:10:42:53:18:85:40:
05:70:88:84:c9:50:1e:3f:97:ba:b0:b0:32:64:27:
1b:f9:5f:97:44:c4:75:50:c3:88:b9:f7:98:17:de:
34:43:d7:45:1f:75:44:4b:4f:da:76:8b:a9:25:62:
53:ef:e2:cb:d0:86:f8:fb:3b:38:3b:f6:43:a6:67:
44:df:41:93:98:38:6d:e3:d4:9f:8d:d4:f2:e4:74:
ae:15:e5:81:53:23:95:ea:0d:50:75:de:81:7e:88:
c9:09:63:03:33:63:6c:1a:f8:08:36:48:77:3a:12:
ca:2a:95:93:56:30:2c:56:48:e7:2b:87:58:32:90:
41:18:c9:81:25:27:56:fb:a4:aa:66:79:9c:27:c2:
ca:ce:7a:86:22:1d:29:77:75:93:f9:1e:dc:d8:ae:
55:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:54:38:F4:25:18:60:25:A4:9A:1E:38:D6:14:73:31:B4:F9:84:84
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/h1Q49CUYYCWkmh441hRzMbT5hIQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.32.0/19
Signature Algorithm: sha256WithRSAEncryption
42:bc:b0:a0:19:89:11:3c:82:29:c1:de:23:3a:c1:8a:11:6c:
ff:9c:cc:c8:43:d2:ec:b8:1c:9b:e3:af:7c:65:c7:90:8d:eb:
c9:57:d9:c8:7c:ce:da:72:98:e2:ba:67:f6:be:61:d2:83:7b:
e1:2f:d9:10:ab:e7:04:d8:8d:81:ec:ed:d4:b9:c9:10:61:40:
ea:c8:57:70:6a:7c:e2:3c:9f:25:05:a3:fb:f6:21:08:fb:ee:
87:90:67:48:69:98:da:ff:f0:c4:0e:52:c7:44:17:b5:64:63:
b8:01:6f:c0:70:94:c9:8d:a4:c4:79:03:f9:81:d2:02:2c:00:
36:0f:05:ae:d0:7a:3b:d6:70:cf:2b:28:cd:3f:10:82:69:85:
f5:86:af:fd:aa:81:5c:ca:d8:8b:63:5e:7a:51:17:53:cd:bf:
bf:4e:33:b1:05:11:2a:9e:a0:4a:a3:3c:4d:ae:05:be:23:e5:
1a:90:85:c1:d0:b4:51:3d:91:2f:97:c5:68:c4:f4:25:60:a5:
fd:08:c1:ad:9b:d9:ed:3f:ef:21:a5:74:c9:fb:68:e6:33:78:
e6:d1:16:3e:d1:7a:5d:ab:76:cf:20:79:c1:83:bf:ce:50:6b:
96:e0:87:03:4f:0e:92:13:26:2f:bf:2b:08:fc:fd:bb:d6:86:
74:54:82:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:16 2023 by rpki-client on console-fra.rpki-client.org