Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/k0ZbI66wHVicebzn_lCyaK-a92Y.roa
File: k0ZbI66wHVicebzn_lCyaK-a92Y.roa (raw, json)
Hash identifier: eHHxeLHLrQWbDyvyWugcaWmgm8uEVfBoRtz4IGiCyt0=
Subject key identifier: 93:46:5B:23:AE:B0:1D:58:9C:79:BC:E7:FE:50:B2:68:AF:9A:F7:66
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 106E
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/k0ZbI66wHVicebzn_lCyaK-a92Y.roa
Signing time: Wed 01 Feb 2023 10:28:33 +0000
ROA not before: Wed 01 Feb 2023 10:28:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 60.245.64.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4206 (0x106e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:33 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=93465B23AEB01D589C79BCE7FE50B268AF9AF766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:21:62:d4:6b:78:7c:7e:4f:ae:72:80:c9:55:
81:27:6d:ba:4a:05:4c:38:9f:43:bb:22:80:1a:3a:
68:8b:f3:92:68:30:58:0b:2e:d2:5f:e0:00:05:a3:
c8:5a:da:be:3a:1d:f4:a6:8b:fd:17:4b:ce:72:b3:
b4:76:91:06:cb:c7:a6:e9:e4:9f:57:c0:4c:68:10:
e6:a6:be:bb:d4:f3:f2:5f:c2:95:83:40:6b:06:db:
db:3a:8f:d9:9f:55:6f:b0:0f:73:0d:d6:98:61:6b:
38:cd:f0:48:86:73:69:57:73:21:b1:de:10:6b:bd:
75:4d:c4:eb:4a:f2:21:40:23:b6:4f:fa:91:e4:28:
48:ea:3c:f4:1c:37:ba:ec:12:d4:45:6a:cd:4d:b3:
ed:3b:97:8d:30:e7:d6:cf:40:0a:63:51:6d:e0:75:
d9:53:71:2f:80:dc:87:d5:00:6e:71:9f:04:1d:03:
a7:26:ae:d8:ac:df:6a:75:93:3e:0a:8e:e9:90:7e:
c1:4b:39:d7:46:d6:d1:1d:09:2e:74:8b:b9:db:2b:
34:80:4c:55:a8:6d:29:63:aa:26:0b:b4:67:2f:21:
c5:da:b6:87:e0:cb:06:53:38:e4:fe:fb:e2:ce:d8:
db:ca:4d:80:15:ee:9e:41:0a:c5:1f:ad:f1:18:70:
d2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:46:5B:23:AE:B0:1D:58:9C:79:BC:E7:FE:50:B2:68:AF:9A:F7:66
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/k0ZbI66wHVicebzn_lCyaK-a92Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.245.64.0/19
Signature Algorithm: sha256WithRSAEncryption
78:48:69:5b:fa:d9:c4:5b:b1:77:0a:c0:6a:f6:b5:8e:78:44:
4e:99:75:c3:f8:df:59:75:98:b2:30:4d:4c:67:c7:70:81:06:
b7:3d:30:e1:0d:c5:cb:e6:2c:ac:4e:96:c5:e3:4e:ef:fa:0b:
98:60:3c:ab:49:5e:fd:7a:74:ae:5b:72:d9:cc:6f:4c:a5:ad:
38:77:83:be:a6:c9:ae:7f:6a:ce:d1:f0:5e:a4:f2:ea:fa:c1:
02:04:b6:16:df:95:f7:d8:be:8e:40:6f:6f:59:d1:1b:d2:11:
db:3f:a3:93:07:35:fc:bc:0a:9a:71:7d:27:39:84:b3:6d:61:
26:4f:2e:ec:c4:42:13:85:86:9d:5d:79:8b:c8:41:b2:0b:ca:
65:9f:99:b0:70:6a:eb:f2:7a:c8:e6:c8:5e:38:85:79:31:39:
80:9b:91:20:9d:6e:9b:66:d8:cd:5c:3b:e9:af:78:4f:ed:9b:
5b:41:f0:45:8e:a0:f7:68:ff:c3:54:00:83:62:a2:70:eb:c9:
ca:9a:16:fa:92:07:7f:ef:52:5c:b1:55:bf:af:cd:05:a6:5d:
06:38:d0:a4:d4:e6:2b:4a:fc:5a:8c:a5:99:95:a0:1e:c5:46:
98:df:de:e6:79:f5:ed:6d:0a:e8:44:5d:a5:65:50:f6:15:ab:
04:89:96:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:51 2023 by rpki-client on console-ams.rpki-client.org