Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/mKLMf3kn6-cT_LK0Xv5JOpOUujs.roa
File: mKLMf3kn6-cT_LK0Xv5JOpOUujs.roa (raw, json)
Hash identifier: +zDpBFP1UnrNdFVkHuuZsx2GFuW+pvv4+APdmYr2DAw=
Subject key identifier: 98:A2:CC:7F:79:27:EB:E7:13:FC:B2:B4:5E:FE:49:3A:93:94:BA:3B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mKLMf3kn6-cT_LK0Xv5JOpOUujs.roa
Signing time: Thu 15 Sep 2022 02:42:58 +0000
ROA not before: Thu 15 Sep 2022 02:42:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 220.228.0.0/15 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=98A2CC7F7927EBE713FCB2B45EFE493A9394BA3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:ed:b0:2f:30:71:46:d6:29:75:9a:3e:07:
c3:b9:be:a2:d6:4c:02:59:eb:5f:df:82:1b:33:60:
98:a9:fd:d1:eb:77:a4:7c:4e:41:22:d2:d8:b3:e7:
a2:67:21:82:90:43:dc:a7:1f:14:15:6b:13:93:0d:
1f:b4:a5:37:05:1e:5e:fc:ba:02:e6:94:d3:ef:d1:
2d:5d:0d:74:61:9a:a4:d9:f7:d6:8f:d1:c8:1b:35:
52:88:16:88:c6:de:87:36:72:f7:0a:fa:73:d8:d2:
a2:71:4d:c6:36:e3:c1:51:72:90:00:ce:d8:d6:59:
24:ff:55:cd:46:a2:bb:e3:68:53:48:c3:14:a1:e0:
87:ee:ce:e3:2f:31:a2:9f:43:15:d3:3a:13:dc:d8:
77:9e:c0:3d:18:dd:b8:6c:24:c2:57:6f:2b:0e:64:
9a:f4:36:73:7d:f4:d5:c7:70:5f:e5:15:94:05:52:
82:61:2c:0d:dc:15:25:a9:31:6c:ab:4f:ee:a2:cf:
f8:ba:af:7f:81:e3:fc:38:c7:0d:0f:00:4f:00:c5:
b8:47:fb:5d:96:68:35:de:52:c5:43:c1:5e:39:a8:
75:5f:e6:65:76:de:8a:1f:c1:0f:36:5e:63:61:c0:
1d:03:3f:31:45:92:75:b5:54:b1:36:1d:cd:d6:1d:
8b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A2:CC:7F:79:27:EB:E7:13:FC:B2:B4:5E:FE:49:3A:93:94:BA:3B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mKLMf3kn6-cT_LK0Xv5JOpOUujs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.228.0.0/15
Signature Algorithm: sha256WithRSAEncryption
30:dd:fd:43:44:ae:44:a9:2a:d8:47:fc:14:7a:4f:23:08:ed:
51:53:9e:5c:41:8f:a3:a1:44:fe:c7:32:98:63:c4:9a:f4:21:
2d:3a:eb:e8:0d:a5:76:2f:df:65:55:8b:d6:a6:df:69:0f:44:
d3:6a:06:96:af:e4:e2:a7:a0:9c:d1:4d:ff:bc:2e:ce:c0:98:
0e:5c:43:78:fe:40:f7:e2:93:1a:e9:16:77:1f:f4:a7:13:27:
ae:e9:43:f7:a1:e6:69:31:da:09:0b:e7:2b:1c:b0:4b:ed:8b:
a2:ad:6f:e6:48:39:95:fe:6d:c5:dc:10:58:0d:ba:2b:00:6c:
b7:ec:33:ac:5b:cc:ba:12:c6:e0:72:86:11:6e:a3:59:83:9a:
99:12:2a:1b:fd:55:d6:6b:9b:66:66:24:84:32:11:70:bd:11:
87:ed:c9:12:83:00:21:c9:5b:47:16:3e:88:fe:fa:97:e0:5e:
fa:6f:aa:6d:85:b0:3d:7d:07:0f:09:1e:2c:2d:6c:88:8b:b5:
d7:6d:b9:71:21:04:7d:21:d1:3c:5a:25:f3:79:ef:b1:3c:37:
2b:60:77:b5:11:59:48:19:b2:65:e6:9b:f8:e2:b3:ff:b1:38:
cc:42:25:ef:af:c1:a7:df:2e:cf:86:da:72:95:f7:b2:52:01:
7a:02:16:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:01 2023 by rpki-client on console-ams.rpki-client.org