Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/iDNLSFBQ8GmVHem0isY1t-KiThM.roa
File: iDNLSFBQ8GmVHem0isY1t-KiThM.roa (raw, json)
Hash identifier: 74V98BAI4/5ltVvFYcK/qnQAUddWYv01mJ/SPmVXiBo=
Subject key identifier: 88:33:4B:48:50:50:F0:69:95:1D:E9:B4:8A:C6:35:B7:E2:A2:4E:13
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10A6
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iDNLSFBQ8GmVHem0isY1t-KiThM.roa
Signing time: Wed 01 Feb 2023 10:28:50 +0000
ROA not before: Wed 01 Feb 2023 10:28:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 210.66.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4262 (0x10a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:50 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=88334B485050F069951DE9B48AC635B7E2A24E13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:61:5a:8e:c0:16:81:c4:ae:77:e8:60:ff:d7:
f7:bf:19:f0:95:54:f6:0a:df:0f:63:a3:54:2a:e0:
b7:4b:9e:fc:d9:b3:61:b6:ea:20:fc:1f:ee:25:53:
8d:2f:3a:a6:fe:65:3a:e3:39:5e:90:a4:51:75:5e:
1f:c2:1b:f1:ea:01:68:b8:54:12:33:e0:d9:c1:06:
a7:90:5c:1b:32:f7:0c:92:ec:28:3f:75:c0:38:36:
0f:89:61:5b:7c:7a:d1:25:3b:08:70:0a:73:03:73:
53:92:ea:cd:c7:c6:a6:b0:31:aa:dc:45:a1:ae:6b:
a8:41:5a:8a:dc:05:b3:47:c6:73:4a:1f:6c:f0:42:
78:59:6a:f8:ed:ee:09:e2:34:a5:26:8c:5f:0a:63:
a7:b7:da:ad:6d:be:ee:23:fd:c3:7b:c6:39:34:ed:
6f:bf:d8:5d:d3:34:c3:4a:31:0c:7a:83:04:02:50:
64:5b:57:ad:44:5d:72:fb:af:ec:36:c7:ab:27:0e:
ae:58:80:dc:a4:fb:b5:b5:5b:8f:c8:76:a7:09:0a:
84:2c:86:e1:26:b6:dd:ce:28:ea:e8:4d:eb:ba:3b:
10:52:d4:5e:a4:bd:08:d6:ac:0d:f5:b8:f8:6e:96:
54:0b:a0:17:49:f7:45:80:36:7e:74:1c:00:22:c6:
7f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:33:4B:48:50:50:F0:69:95:1D:E9:B4:8A:C6:35:B7:E2:A2:4E:13
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iDNLSFBQ8GmVHem0isY1t-KiThM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.66.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:28:ac:e0:79:9f:64:e8:96:15:3d:63:f7:aa:8e:a1:93:45:
7c:e1:b5:33:31:39:95:7c:1c:04:cf:18:aa:81:41:d4:74:21:
34:75:54:a7:3c:f5:2c:ac:dd:6a:87:1a:66:e5:c9:23:f4:5a:
07:e7:9d:31:18:95:92:d1:b6:9e:a1:fa:ab:7e:2b:a1:51:cf:
d6:8e:15:4e:58:e7:6a:7d:f9:04:ac:a1:1a:84:e0:9e:01:1b:
00:68:26:34:f6:dd:af:99:04:28:6e:b5:3c:f6:4d:e9:40:85:
50:1f:db:7b:08:aa:ec:8a:45:58:6e:11:2f:05:df:dd:2a:ca:
c4:e0:81:6f:3b:4c:d5:99:07:54:38:40:94:96:4e:f1:7c:d3:
e3:9a:8a:a0:c7:b5:54:c8:f4:cf:f5:dc:f3:e1:59:8a:fb:fb:
dc:35:e7:6a:f4:68:80:8c:4e:0c:5d:6c:c5:d9:90:91:40:30:
fe:57:29:f7:98:e0:46:c9:27:72:b8:88:ee:62:6d:1e:51:4c:
36:03:31:e0:5e:cc:46:33:78:cf:24:a9:2e:c0:8c:d1:df:14:
5f:2d:5b:9c:46:71:11:1d:77:ae:b3:ad:f8:fd:a5:37:f6:b3:
0e:9f:61:f9:38:ce:8f:2c:b7:98:90:42:33:cf:a5:65:5c:ac:
1c:53:77:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:16 2023 by rpki-client on console-fra.rpki-client.org