Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/kQOjxFMDg6G2ROAxakfRD1UGADQ.roa
File: kQOjxFMDg6G2ROAxakfRD1UGADQ.roa (raw, json)
Hash identifier: pQpqunxIhopR3pQMy07ySbDQXL475Xz+bxDd+EKjoYU=
Subject key identifier: 91:03:A3:C4:53:03:83:A1:B6:44:E0:31:6A:47:D1:0F:55:06:00:34
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1099
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/kQOjxFMDg6G2ROAxakfRD1UGADQ.roa
Signing time: Wed 01 Feb 2023 10:28:46 +0000
ROA not before: Wed 01 Feb 2023 10:28:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 122.147.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4249 (0x1099)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:46 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9103A3C4530383A1B644E0316A47D10F55060034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:06:be:b3:8a:1c:83:9d:7d:d3:a7:d4:0f:b7:
ca:9a:6c:47:1a:d0:55:8f:e9:a6:e1:e7:8a:f6:c6:
e5:e0:11:ed:12:a4:c9:ed:28:95:dc:7f:4b:be:71:
ca:24:40:45:65:d6:42:55:db:1f:96:bc:8c:e8:65:
c8:f8:50:49:6c:c9:f0:4b:ba:55:7f:41:6b:cc:6d:
15:fe:33:dd:43:86:b3:fb:19:6b:a9:e1:99:78:65:
c4:88:91:cd:3d:c7:db:6d:a0:51:ba:8a:c7:3d:84:
52:57:62:24:14:b8:18:72:75:2b:ca:6d:9b:a4:c7:
83:05:99:a3:ba:fd:e0:80:28:ff:53:2e:75:ba:5f:
48:de:00:87:46:d5:b9:37:7b:39:cb:46:1d:82:92:
d6:1c:30:3c:da:25:2d:df:df:df:85:c9:79:d6:fb:
27:d1:5a:16:8a:32:f5:af:e6:7f:ee:dc:b0:ae:3a:
f3:4a:c7:84:33:32:b9:7f:40:bd:1b:9b:dc:46:6f:
94:89:cf:08:25:b7:4f:63:8e:76:08:c7:af:0e:24:
d2:7c:ab:96:de:50:05:c4:d1:35:c6:64:ff:4c:06:
bf:2c:fe:f6:a9:91:57:3d:21:e9:2e:9f:9e:4e:75:
d8:0e:ad:d3:29:fb:10:25:3f:34:b5:d4:89:c0:84:
4f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:03:A3:C4:53:03:83:A1:B6:44:E0:31:6A:47:D1:0F:55:06:00:34
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/kQOjxFMDg6G2ROAxakfRD1UGADQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:19:e2:e3:7a:70:b8:9e:db:05:ee:44:e3:10:ea:8e:dc:69:
ef:0a:68:b5:93:5e:d4:7d:3c:38:33:b7:fc:b3:d2:ef:2d:27:
57:31:09:35:ca:08:5b:18:94:24:da:8b:07:63:b6:eb:f4:bd:
c6:3f:5f:5e:ba:1b:3a:82:96:3b:71:c3:43:c8:bf:75:0d:d2:
c0:8b:0b:9a:a9:d4:42:e6:71:bb:db:3c:f7:d5:e7:95:a5:5d:
c1:e1:15:cc:cf:0b:e2:9b:dd:42:db:23:99:79:91:34:2c:02:
4c:2a:4f:3e:4a:9f:15:b8:e8:9a:33:93:73:ab:74:35:ca:e2:
bb:fc:ab:73:63:66:ea:5d:83:7b:19:f4:77:82:0e:96:75:64:
25:ca:83:76:82:9c:01:1a:49:d3:f0:c4:56:f0:dd:38:dc:12:
7f:56:25:c7:c3:78:91:54:f4:51:13:2b:fa:0b:81:4c:3d:8b:
61:7c:11:82:39:74:07:e6:81:9f:40:ec:1b:17:62:8c:52:f3:
b9:47:5b:bc:d9:bc:c7:94:48:f2:2e:26:09:62:f7:be:68:81:
8c:81:b0:56:e9:d0:fc:94:25:0d:23:87:6d:c8:e4:cd:c3:9f:
3a:62:2d:7a:74:c9:ab:c1:4a:a4:87:be:17:42:a8:67:9e:9e:
f9:ca:39:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:51 2023 by rpki-client on console-ams.rpki-client.org