Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/k3gQoPyqfod5EWpw17rHZWQeBSE.roa
File: k3gQoPyqfod5EWpw17rHZWQeBSE.roa (raw, json)
Hash identifier: 8GZEWy4NTTAzkT4FQaXFRD/dClLWscxbpqK3Trbgkyk=
Subject key identifier: 93:78:10:A0:FC:AA:7E:87:79:11:6A:70:D7:BA:C7:65:64:1E:05:21
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 110D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/k3gQoPyqfod5EWpw17rHZWQeBSE.roa
Signing time: Wed 01 Feb 2023 10:29:24 +0000
ROA not before: Wed 01 Feb 2023 10:29:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 203.70.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4365 (0x110d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:24 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=937810A0FCAA7E8779116A70D7BAC765641E0521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:8d:18:4b:2d:f1:1d:e5:e9:ce:11:9b:e5:
a8:89:50:0b:04:b8:cd:e9:b2:db:87:5a:3f:e4:53:
1e:49:a0:c3:ef:8d:bc:23:23:f1:03:ef:44:01:8e:
4a:70:af:3a:53:7b:a2:34:16:38:34:03:a6:9f:46:
65:0e:de:da:52:e3:33:e4:df:be:b4:25:47:9e:93:
4c:a9:bf:3f:e1:aa:98:cd:b1:01:ba:12:c9:7a:3d:
f9:bc:83:69:ea:8e:f4:89:5a:90:4d:dc:94:bf:b7:
29:5d:de:e2:48:b1:9f:3c:b9:4d:b3:6b:98:76:9a:
17:d2:3c:b8:24:f0:2c:d0:53:2c:f8:2c:37:a0:c8:
f6:5c:9e:f4:d2:74:5b:30:aa:2b:40:33:34:77:26:
be:6e:4f:a2:71:97:d6:7e:bb:58:60:c7:fa:43:91:
de:82:8c:10:5c:2d:ff:17:16:32:fe:90:29:1e:b9:
66:51:37:ec:cc:6c:a7:0a:a9:ca:46:83:bf:08:df:
d1:21:d9:d1:66:cd:96:7b:c3:87:62:2e:ea:71:59:
83:cd:e5:00:f9:e5:b9:dc:4e:25:c0:c5:30:3a:1a:
34:80:30:33:81:8c:fb:23:cc:0b:6f:b2:8b:21:cf:
2f:cd:0f:ae:16:43:e5:d1:55:47:85:76:81:f0:a6:
fd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:78:10:A0:FC:AA:7E:87:79:11:6A:70:D7:BA:C7:65:64:1E:05:21
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/k3gQoPyqfod5EWpw17rHZWQeBSE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.70.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c5:9c:75:55:2c:00:e0:71:16:ad:29:59:7c:bc:c9:94:56:26:
c9:77:7f:04:fb:e2:04:68:da:da:13:22:21:bc:5c:94:d3:e5:
e8:1f:be:87:79:c9:a3:4d:91:5b:cf:b4:96:32:db:63:25:d8:
f0:a4:f0:91:b2:58:16:7c:73:55:d5:23:c8:ed:f6:ad:51:12:
df:b8:4a:2f:a4:31:8b:e5:49:e4:8d:0e:86:f2:98:ff:38:f1:
43:48:f9:1b:df:90:d8:e3:4b:bd:21:28:4c:16:2b:82:e4:8a:
fa:4f:23:b9:6c:c8:58:95:cd:aa:27:a0:a1:86:06:bf:c0:e5:
e4:8a:84:47:69:e6:6a:7b:d2:9a:a6:3e:d5:bd:85:f5:f9:ce:
1c:28:9f:ba:17:06:3d:63:47:db:13:3b:07:1e:7a:3f:cc:81:
e1:7d:20:c0:7a:a2:8c:2d:4d:cf:41:3a:f4:2d:e5:28:dc:16:
21:fa:d4:28:04:8c:a2:28:2a:87:7b:45:1e:63:c8:c0:c7:95:
da:20:c9:52:c5:11:6e:d8:a1:63:3a:3a:53:7b:51:5a:b2:16:
34:59:de:af:96:59:67:fe:87:05:e5:0f:d0:58:89:74:d3:1e:
8e:f6:d6:1e:14:7c:67:5e:4e:5a:73:07:b3:04:6d:55:70:66:
f5:5f:ec:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:51 2023 by rpki-client on console-ams.rpki-client.org