Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/iuA58pHT-qR-_JFYrBMMCIOp64w.roa
File: iuA58pHT-qR-_JFYrBMMCIOp64w.roa (raw, json)
Hash identifier: j9SoaaMdLGOQpsYOqUizcscRS0VFMBNS0dic4FL3Hhg=
Subject key identifier: 8A:E0:39:F2:91:D3:FA:A4:7E:FC:91:58:AC:13:0C:08:83:A9:EB:8C
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1044
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iuA58pHT-qR-_JFYrBMMCIOp64w.roa
Signing time: Wed 01 Feb 2023 10:28:20 +0000
ROA not before: Wed 01 Feb 2023 10:28:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 61.66.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4164 (0x1044)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:20 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8AE039F291D3FAA47EFC9158AC130C0883A9EB8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:d8:82:52:3e:53:c3:cc:76:c5:60:e6:f5:
3c:8b:b2:0b:49:a1:5f:69:84:0b:7e:db:e6:22:0c:
31:2b:d5:0e:36:23:16:43:8e:9c:4a:e6:ba:30:58:
72:4e:90:b8:35:e2:fd:0e:16:7f:c2:f6:9e:2e:37:
f7:82:6f:d4:ef:84:0f:2e:fb:0e:84:c4:2f:c8:23:
4e:b2:20:bc:b1:8c:43:0b:c6:ba:11:45:80:da:80:
e6:7b:90:c2:7d:63:f2:82:37:b9:05:68:91:1c:97:
9b:22:48:ee:ed:0b:77:20:0e:a2:a8:48:53:15:b1:
f0:26:c9:2a:7d:43:07:95:83:28:e7:b0:75:19:fd:
98:53:8a:6c:da:bc:1a:cb:4c:f7:40:37:c4:78:df:
b9:b4:d3:f0:e9:ac:ba:dc:8c:1a:0a:6f:2d:3d:cc:
47:ee:04:e7:57:59:7c:e9:d2:fd:29:3f:57:6e:44:
a8:df:90:74:85:0c:80:0b:f0:1f:34:1e:e7:7a:77:
ad:88:7f:96:5a:d1:f7:36:90:2a:f9:c7:75:ec:34:
cf:11:39:ed:fb:65:a4:2e:8a:85:9b:d0:6b:74:cc:
00:57:5c:d3:9a:94:2f:a6:34:06:b6:e4:23:69:89:
bb:ed:a2:c5:fb:a6:8e:80:13:73:e0:d7:fe:f3:4b:
e7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E0:39:F2:91:D3:FA:A4:7E:FC:91:58:AC:13:0C:08:83:A9:EB:8C
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iuA58pHT-qR-_JFYrBMMCIOp64w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.66.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8d:86:00:2e:c9:95:b0:76:79:29:6d:dc:07:70:f3:36:3f:6f:
7d:4d:a2:e0:38:55:af:b4:0d:e0:34:18:cb:59:6c:07:18:a8:
da:2c:8c:6f:e0:a2:58:5c:40:7c:fa:16:23:71:7c:a7:f8:4c:
97:e9:13:9d:ae:56:a2:96:35:8d:fb:3c:34:aa:e8:a5:f7:9b:
9c:8b:7e:62:45:d9:96:f6:ff:a9:01:32:ad:d0:a3:4f:26:c1:
66:ca:66:bc:47:e8:34:48:1c:6d:54:9a:c0:b7:05:ae:4c:a9:
ef:7b:01:51:bd:f4:01:21:53:18:75:d9:66:14:9b:74:89:88:
24:70:4d:c6:05:94:ff:db:03:1c:a3:08:46:0b:e5:1b:d7:b3:
d5:2f:af:99:19:96:42:61:6b:69:03:02:ee:f4:cb:87:e9:6d:
87:bd:6a:85:f3:8c:16:5d:ab:ee:22:9d:66:38:cd:bd:0f:5f:
21:7f:49:c1:68:29:01:39:93:87:26:c4:88:1d:76:9c:bc:51:
b2:fa:de:1c:23:fa:f5:f0:6e:d2:94:6f:f5:01:6d:fd:c5:55:
cc:2f:a6:d8:3d:27:74:d8:1e:32:99:0a:b3:e6:5b:77:31:e7:
4b:cc:ab:31:86:a2:02:e3:7c:9d:35:06:21:a0:11:3c:59:18:
95:e2:66:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:16 2023 by rpki-client on console-fra.rpki-client.org