Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/m-OMQk7AvVSMv5dkucU7qu_EDiE.roa
File: m-OMQk7AvVSMv5dkucU7qu_EDiE.roa (raw, json)
Hash identifier: vZYkgOpz/BwakHyNmmrCQN3ftpnCxsJlNZ7Jpv5SXMY=
Subject key identifier: 9B:E3:8C:42:4E:C0:BD:54:8C:BF:97:64:B9:C5:3B:AA:EF:C4:0E:21
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/m-OMQk7AvVSMv5dkucU7qu_EDiE.roa
Signing time: Thu 15 Sep 2022 02:43:15 +0000
ROA not before: Thu 15 Sep 2022 02:43:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 123.204.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9BE38C424EC0BD548CBF9764B9C53BAAEFC40E21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:ab:08:62:29:4e:a0:87:63:30:fe:5b:98:
da:80:ca:1c:6f:e8:13:3a:d1:c9:d0:d4:11:f8:b0:
04:79:ee:3c:de:15:89:5e:67:ed:fb:c0:72:8b:ac:
a6:3d:78:a6:db:85:fc:f6:00:82:74:05:e1:83:de:
df:f9:e9:80:9d:79:de:b0:be:73:f9:39:e5:20:f3:
a7:6b:f1:df:d2:e3:22:2c:32:12:e0:53:ad:62:d5:
71:aa:cf:70:5b:3e:bc:01:f9:9b:16:01:3a:69:b5:
a0:40:42:80:16:b7:e3:6d:5d:81:3e:77:77:2f:cf:
23:c6:fa:90:93:dd:91:14:9c:86:46:0e:d9:4b:fa:
0c:3c:58:b2:c3:fe:52:19:c1:75:1a:2a:ba:a9:80:
04:49:69:7f:0c:69:e2:56:75:8e:c6:91:84:91:6a:
ce:f4:ec:95:be:ed:21:3a:d5:95:30:4c:b2:7f:17:
5e:46:e8:46:12:32:3b:fb:45:68:78:e6:2c:75:14:
fd:18:e0:75:78:85:60:f0:de:3b:ae:0f:2d:86:54:
f9:68:57:ee:ec:e1:a0:b4:63:84:87:e4:9a:3c:d4:
9a:d2:fd:e4:88:4a:06:37:ba:72:aa:b1:21:71:61:
fc:6a:59:37:cc:89:0c:71:75:7b:87:4b:9e:a3:d7:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E3:8C:42:4E:C0:BD:54:8C:BF:97:64:B9:C5:3B:AA:EF:C4:0E:21
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/m-OMQk7AvVSMv5dkucU7qu_EDiE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.204.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:6f:4b:e2:b9:52:d6:a4:de:ca:1b:7b:d9:f8:16:ad:61:40:
46:10:bf:53:34:ab:8a:f8:fd:46:34:76:f2:aa:d2:c6:65:81:
1b:f8:d3:b0:2d:cd:72:ed:ee:37:cc:21:41:52:16:28:4b:18:
99:b3:a9:e5:cc:32:5a:37:50:95:14:b1:61:2f:5f:d3:53:43:
b0:cb:c5:84:2c:4b:d6:1c:8d:89:80:ac:ba:54:bc:f8:43:e5:
5c:a8:47:0e:f6:a5:29:6a:b2:44:52:ab:60:0c:58:f7:88:c0:
e6:0a:76:e3:9b:97:a6:95:07:ea:c4:c2:4f:fc:ad:77:b0:08:
7f:88:e1:78:09:53:a9:14:cd:e7:a5:04:fc:67:18:b2:72:22:
5d:1e:09:12:9b:97:97:e5:53:63:af:8f:1e:d5:c5:b2:a3:dd:
a4:22:f5:5b:c5:43:c1:7e:85:a7:bd:e4:5a:99:34:4a:ec:1d:
2e:ed:d4:30:cd:39:ae:1f:80:86:53:36:ac:0f:06:65:f1:a5:
d1:82:75:c5:23:9c:2c:7b:65:14:b1:6d:ec:3c:50:3d:d4:ae:
3a:8b:52:d0:c2:0e:a2:89:db:fd:e9:0d:1a:49:07:0d:14:43:
71:b1:62:fc:e7:c1:ac:bc:e7:e1:eb:9b:70:f9:4d:19:e8:78:
55:09:d9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:01 2023 by rpki-client on console-ams.rpki-client.org