Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/mHfQ8SBjsFyZxhzR4Khnaa4R_Qk.roa
File: mHfQ8SBjsFyZxhzR4Khnaa4R_Qk.roa (raw, json)
Hash identifier: gWALAxg2j+msCRpADHI/l4c5WG6SB10e0cleDJjQvc8=
Subject key identifier: 98:77:D0:F1:20:63:B0:5C:99:C6:1C:D1:E0:A8:67:69:AE:11:FD:09
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mHfQ8SBjsFyZxhzR4Khnaa4R_Qk.roa
Signing time: Thu 15 Sep 2022 02:43:59 +0000
ROA not before: Thu 15 Sep 2022 02:43:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 175.183.32.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9877D0F12063B05C99C61CD1E0A86769AE11FD09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:7f:f7:76:46:56:58:90:d9:43:8e:19:29:
2b:5b:1a:f5:40:1a:21:9a:29:13:c6:6b:41:c4:e4:
ff:f7:04:08:9c:d6:bf:2f:8c:66:f0:29:db:73:3b:
92:31:15:59:55:03:8e:73:e5:09:b4:66:78:2d:09:
20:3d:82:23:88:4b:02:2a:6f:9a:47:d4:82:bd:a8:
b4:fe:20:a1:af:54:76:fb:da:70:d6:5f:b4:e0:2a:
6b:af:98:3b:b5:37:45:09:e7:48:3c:d6:aa:2b:4d:
09:b1:37:a1:38:c0:03:15:88:17:c2:70:23:77:5f:
81:35:66:c5:bf:cb:2b:bf:c1:ee:06:36:5d:e6:59:
6e:d5:98:ed:28:b1:e7:1c:57:0b:3d:0c:89:f8:c0:
c0:66:36:df:96:48:4f:2b:e8:a9:ca:30:c2:ce:bf:
bf:f2:f7:5a:af:69:0e:dd:12:98:5f:c1:45:ab:e4:
2c:d9:29:2b:5d:2a:5c:b5:86:00:2a:c9:f4:f2:c5:
73:a2:42:9a:ab:3b:02:3f:f1:c3:aa:22:1f:ef:b0:
fc:4a:c0:d4:41:c8:76:18:b6:a6:07:cf:f3:12:62:
46:70:43:04:e3:de:b7:f6:ee:b5:b3:9c:55:60:3f:
34:65:7b:b1:eb:cd:51:13:23:03:89:d7:4d:78:2b:
df:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:77:D0:F1:20:63:B0:5C:99:C6:1C:D1:E0:A8:67:69:AE:11:FD:09
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mHfQ8SBjsFyZxhzR4Khnaa4R_Qk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.32.0/19
Signature Algorithm: sha256WithRSAEncryption
29:10:88:f6:21:c1:b6:e8:a3:af:fe:3a:83:02:c2:06:a6:99:
6e:7d:9c:a4:5b:14:b4:4e:4f:e6:d0:ed:8b:28:b7:a6:6d:93:
ad:38:3f:0a:fb:69:2a:03:12:eb:22:c0:20:cb:4a:e3:76:9d:
b6:9e:2f:99:47:8c:58:d8:88:83:1c:db:8e:82:81:91:df:3c:
1a:f7:47:62:39:bf:27:56:5d:3e:c0:59:46:c1:67:2c:bc:04:
92:03:ac:da:bf:83:c9:29:1c:9d:c4:f8:cf:e1:97:a7:ee:d8:
6e:89:37:eb:29:7c:41:b3:8f:4a:53:c7:d5:aa:ad:52:b0:2b:
fc:ae:07:7e:d0:20:14:87:d0:83:d7:49:83:0c:46:64:fe:75:
7a:e4:b1:c6:e8:ea:6e:6d:a9:19:16:1f:e0:fe:a9:47:57:18:
c9:6d:05:c0:b6:2e:bc:f3:fb:99:bd:2b:52:cf:26:fb:36:20:
03:62:83:29:24:3d:3c:2f:fc:1f:eb:6b:1a:6b:3f:a3:0d:f3:
ea:07:7d:63:3b:55:00:ae:5e:fa:4b:67:1a:7c:6a:f6:f9:04:
2e:41:be:bc:c6:96:40:1f:65:f5:d4:ba:3f:e1:1b:80:c2:11:
d2:88:61:98:51:06:85:41:05:5d:94:21:ce:7d:e2:f8:ea:2e:
cf:dc:f6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:01 2023 by rpki-client on console-ams.rpki-client.org