Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ibWeks_YtQofKRhIhIDelkzlC7A.roa
File: ibWeks_YtQofKRhIhIDelkzlC7A.roa (raw, json)
Hash identifier: o6mkr1sewQirOH2sLzi03h7/KdmUNscYQGYEEjCmYh4=
Subject key identifier: 89:B5:9E:92:CF:D8:B5:0A:1F:29:18:48:84:80:DE:96:4C:E5:0B:B0
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ibWeks_YtQofKRhIhIDelkzlC7A.roa
Signing time: Thu 15 Sep 2022 02:43:23 +0000
ROA not before: Thu 15 Sep 2022 02:43:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 218.210.0.0/15 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=89B59E92CFD8B50A1F2918488480DE964CE50BB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:c3:81:79:0d:7d:12:18:bd:61:df:85:e5:
7d:ea:30:10:14:de:bb:2a:dd:96:0e:a9:bf:da:3f:
fc:ea:1c:53:a6:66:6f:cc:bd:b6:22:d0:d2:73:cf:
91:9c:26:58:a6:30:e3:28:ca:30:fa:ba:c8:ea:02:
b9:90:6e:ae:d1:66:41:59:e1:af:e5:34:a6:7d:71:
5b:bb:83:cd:d5:76:74:e4:4c:44:87:96:50:5d:06:
10:12:b5:6a:0c:ac:3e:69:1b:09:9b:f4:fd:eb:00:
62:78:28:d6:c9:21:e7:de:ec:0b:b8:e0:14:b9:ef:
a4:13:2b:7d:8c:6d:22:79:69:68:54:98:e7:25:3a:
90:a5:21:96:83:b5:d2:f1:a7:0e:b5:e3:76:92:fb:
e5:9e:08:15:d6:2f:f7:d2:3a:a7:9f:e1:6f:bf:5a:
83:63:cd:6f:06:34:de:11:f7:86:3f:b4:7a:22:2d:
1a:2f:8d:42:77:28:90:c4:44:9d:e7:80:fc:d6:7b:
32:af:47:7f:65:30:9a:2a:29:5e:cc:07:04:a7:9f:
ca:28:31:1c:9f:10:8d:bc:4c:52:dc:e0:d8:33:5c:
0f:d4:b0:1a:0e:98:8a:3a:6d:10:88:35:08:5e:3b:
e3:e4:90:bd:e1:4a:b9:98:3a:0b:47:d3:c9:79:b7:
5c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B5:9E:92:CF:D8:B5:0A:1F:29:18:48:84:80:DE:96:4C:E5:0B:B0
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ibWeks_YtQofKRhIhIDelkzlC7A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.0.0/15
Signature Algorithm: sha256WithRSAEncryption
3b:7c:24:99:44:dd:fb:08:f8:e4:4f:49:e6:2b:ce:0d:fd:ce:
a6:31:fd:5f:a0:82:5f:3a:b1:66:8d:75:e8:e3:23:0a:a9:9c:
c6:78:33:13:46:b2:f1:e6:43:c7:29:2d:1b:4c:ef:0f:88:08:
74:33:2e:bb:f4:80:ea:83:67:9c:5c:38:1f:b9:c1:9b:de:d5:
17:36:76:9c:77:2c:af:7c:14:1c:cd:83:d6:31:7c:6e:08:67:
50:31:95:84:38:40:c4:27:31:ec:29:dd:ab:35:06:63:d7:80:
8f:1c:66:43:bb:b3:24:1b:3f:6f:69:59:f6:89:c4:6f:2e:42:
b3:19:ec:67:aa:40:88:7d:27:d1:c1:2d:75:38:c9:e5:3a:a9:
12:bb:cc:e5:eb:8d:28:7b:8d:10:59:6a:c1:c7:75:a5:7e:36:
9e:02:26:bf:71:ab:24:d2:58:8f:e4:04:1e:23:1f:1a:b3:28:
c3:51:2d:2c:f2:bf:79:cd:31:6b:dd:aa:41:37:1e:28:76:8e:
1b:6c:de:e5:38:67:00:a9:88:4b:1c:ec:d7:83:1a:4f:0f:db:
ab:11:50:af:7f:30:11:51:c8:98:44:0c:12:8c:db:d8:88:36:
7d:43:50:0e:e8:d9:7a:cf:0e:c1:48:77:bb:38:a9:ae:3b:ec:
eb:6b:5a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:00 2023 by rpki-client on console-ams.rpki-client.org