Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/lBMqS9UetbEtQoGUh7Nx-1m8f4E.roa
File: lBMqS9UetbEtQoGUh7Nx-1m8f4E.roa (raw, json)
Hash identifier: 7cWBfIRTEPUlWoJRHP8WS658/IaR5HaWzyq9IwTKacI=
Subject key identifier: 94:13:2A:4B:D5:1E:B5:B1:2D:42:81:94:87:B3:71:FB:59:BC:7F:81
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1116
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/lBMqS9UetbEtQoGUh7Nx-1m8f4E.roa
Signing time: Wed 01 Feb 2023 10:29:27 +0000
ROA not before: Wed 01 Feb 2023 10:29:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 123.51.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4374 (0x1116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:27 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=94132A4BD51EB5B12D42819487B371FB59BC7F81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:dc:71:7e:14:a2:15:c1:b8:b6:80:1f:ca:
43:b6:3e:a8:4c:45:23:9b:b9:97:d3:25:f3:91:04:
c3:22:2f:c5:9b:56:43:4e:f4:85:18:f4:0b:04:1b:
52:d3:31:0c:7d:e5:33:fb:8c:bc:43:47:b4:ea:32:
0b:9a:c6:77:81:53:03:22:13:63:cf:61:41:06:98:
fc:48:3e:a4:14:dd:db:28:85:0b:93:51:ee:a3:b0:
1c:be:67:a6:9a:df:1d:82:18:e2:87:07:61:75:e2:
b7:5e:38:fd:4a:c3:f7:93:8a:a4:cc:91:68:e5:77:
20:b3:5e:f3:7e:a6:1a:19:eb:45:2e:85:6d:8c:f4:
7b:de:63:ab:69:71:76:85:df:3d:24:18:76:9b:dc:
34:9e:3f:94:1d:91:5d:4d:fe:25:ac:21:d1:d3:51:
10:fc:a0:67:3b:30:d8:f5:0f:29:56:e3:d4:ce:aa:
10:f5:46:41:b9:69:9f:2e:20:23:c3:92:50:81:17:
35:3e:ef:07:61:f0:da:a8:30:3d:91:4f:11:41:06:
dd:82:58:61:25:1c:a7:de:fb:f9:b5:96:1f:cf:de:
c9:67:9a:05:2c:4a:03:5a:17:e4:39:cd:ae:c2:a2:
17:f3:29:a3:a5:39:60:b6:4c:3b:76:b0:40:4f:e7:
77:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:13:2A:4B:D5:1E:B5:B1:2D:42:81:94:87:B3:71:FB:59:BC:7F:81
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/lBMqS9UetbEtQoGUh7Nx-1m8f4E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.51.180.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:af:4c:41:50:dc:e0:37:21:76:83:e6:0e:61:91:fa:43:6f:
d8:5b:9e:51:c8:17:39:2d:9e:a0:2f:d7:33:f3:77:a0:d6:46:
72:2a:28:b6:80:9d:5f:e9:f9:8d:fb:bb:2e:eb:97:4f:33:bb:
f6:7a:3e:e3:64:e2:13:e0:f8:87:20:13:74:59:eb:39:e7:cc:
90:ef:d7:82:9c:20:ff:57:cd:b6:07:0e:83:d1:61:68:28:8f:
6f:48:bb:ff:fc:3f:2f:db:10:1d:31:92:31:79:3d:d7:96:c5:
49:04:0d:d4:f5:29:56:8a:34:4b:5f:3d:64:4c:04:73:0a:7b:
b6:e4:a5:c8:56:b4:68:4a:f2:80:ef:23:e7:fc:be:61:75:33:
79:5a:69:b1:23:6b:c8:b4:1c:2d:db:28:ee:f0:2d:d7:af:65:
cf:58:2c:d1:78:eb:fe:29:62:b2:e3:93:55:c2:82:74:10:d2:
8e:92:5f:d6:bb:e9:51:6e:d2:33:81:0e:fa:27:97:04:26:4b:
e3:14:d1:45:09:8f:87:3e:56:4d:ea:fb:d9:92:a8:8d:80:b5:
e1:e9:13:3e:77:93:4e:ab:0f:c6:a3:76:01:a0:b5:8f:63:74:
02:fa:3f:bd:7c:50:34:d4:db:7c:d2:2c:1d:a9:b5:e8:eb:d5:
bf:ec:91:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:16 2023 by rpki-client on console-fra.rpki-client.org