Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/l5Mp5Q2yRZbF0CH7Cx1TNVILAKw.roa
File: l5Mp5Q2yRZbF0CH7Cx1TNVILAKw.roa (raw, json)
Hash identifier: mmr1CL7ZNW+qnSp/OdIx4Jl9zKJmqie3gNGArTOvtHc=
Subject key identifier: 97:93:29:E5:0D:B2:45:96:C5:D0:21:FB:0B:1D:53:35:52:0B:00:AC
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10B6
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/l5Mp5Q2yRZbF0CH7Cx1TNVILAKw.roa
Signing time: Wed 01 Feb 2023 10:28:55 +0000
ROA not before: Wed 01 Feb 2023 10:28:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 175.183.136.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4278 (0x10b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:55 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=979329E50DB24596C5D021FB0B1D5335520B00AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:3b:f7:a0:c6:f0:d9:36:e4:01:ca:46:30:
d5:29:55:d3:6b:d4:11:e2:80:d2:39:9e:42:ef:83:
43:cb:44:0d:59:79:81:88:b2:94:b6:19:4f:e1:0a:
29:1a:cd:ff:cf:bc:09:97:a1:4e:95:f9:9c:9e:c0:
ca:39:59:54:ae:1f:bf:8e:fc:72:b2:24:d2:0b:95:
b7:c9:16:2e:a0:49:6f:58:e6:4d:59:eb:5a:c5:18:
70:3b:08:99:6e:97:5e:ee:df:aa:be:6d:b0:f3:2a:
59:53:ed:bb:1a:51:e2:3b:be:b9:fa:ad:b3:35:3c:
c7:15:7c:c3:7c:8a:76:75:1f:b1:42:f5:a1:26:4a:
1f:a2:3d:27:8c:70:97:59:ed:25:17:41:4b:40:b8:
5f:a3:b9:3e:10:08:31:1c:e2:77:33:16:aa:38:cd:
52:5a:ab:b6:9f:da:01:5c:69:5a:55:d1:0d:7f:79:
aa:33:b9:c3:72:69:95:f6:c7:b7:66:91:7c:b0:5e:
3d:11:0d:18:3e:90:40:fe:c6:0f:7d:e5:87:c4:06:
b2:9e:ba:e0:a0:81:c1:ab:7c:a6:3d:cf:48:fd:96:
e6:19:d5:02:00:90:6a:ef:83:1f:d4:e0:c6:7f:21:
92:34:2d:f4:80:c2:c0:1d:45:cc:da:b5:d7:88:d5:
04:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:93:29:E5:0D:B2:45:96:C5:D0:21:FB:0B:1D:53:35:52:0B:00:AC
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/l5Mp5Q2yRZbF0CH7Cx1TNVILAKw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.136.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:75:f9:8a:6b:68:bc:f2:02:2d:f8:d7:62:59:46:1d:17:88:
df:25:3e:3e:3d:8e:24:7b:45:a3:8a:0d:ba:4b:de:64:9a:12:
60:ff:3c:ec:56:49:83:ac:5e:70:d6:92:28:ea:47:d2:cf:6d:
12:93:56:3a:15:4e:a8:fe:87:bd:bc:f4:87:b9:d9:90:fa:69:
ad:40:67:27:f7:13:ac:69:ab:14:83:5e:d0:88:89:5c:6b:ff:
f7:42:bf:b2:05:47:b2:2b:78:2e:4a:1b:95:04:96:ee:12:f6:
df:43:5e:c2:ba:5b:d4:85:c5:bc:a1:82:48:5a:2f:f0:7d:60:
4f:cb:ef:d9:dc:94:ea:d6:d8:54:66:4d:be:69:b5:1b:f2:a7:
c5:df:02:19:3b:83:d1:43:5c:bb:bb:55:15:4a:d0:34:76:20:
be:86:e9:7f:7d:24:7f:ba:82:c7:06:d5:95:c4:6b:2d:59:68:
04:ca:8c:e3:a0:1e:d3:0e:b3:cc:aa:56:fd:84:52:fe:f1:cf:
da:93:75:22:f5:73:db:73:8a:7e:ef:f6:1c:59:1d:ff:d1:80:
e1:f1:8b:26:1b:73:be:74:b8:5b:ab:29:24:a5:c1:80:97:71:
a4:c0:72:0b:a6:87:0e:e1:9e:77:a5:32:15:04:3a:dc:48:93:
af:2f:9c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:51 2023 by rpki-client on console-ams.rpki-client.org