Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/mUQByBXESkEn6ESveoMpu884Gjo.roa
File: mUQByBXESkEn6ESveoMpu884Gjo.roa (raw, json)
Hash identifier: yeb1FAmZnZ4zGA5H7IQ2cNSMFnt+BCJyIZvfrCnOInQ=
Subject key identifier: 99:44:01:C8:15:C4:4A:41:27:E8:44:AF:7A:83:29:BB:CF:38:1A:3A
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mUQByBXESkEn6ESveoMpu884Gjo.roa
Signing time: Thu 15 Sep 2022 02:43:51 +0000
ROA not before: Thu 15 Sep 2022 02:43:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 210.68.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=994401C815C44A4127E844AF7A8329BBCF381A3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:26:b6:34:23:19:41:60:d6:14:f2:66:d0:99:
77:85:0f:c4:9d:2b:41:51:5b:12:83:ab:27:95:97:
9c:00:2e:a1:87:02:c8:f9:3d:46:f3:34:57:b8:85:
5a:09:f4:4a:f4:92:b6:13:14:17:c5:d5:22:00:79:
a0:d0:c7:f6:39:fd:2a:49:fd:0b:e9:90:40:93:7a:
92:eb:02:bb:db:d6:8d:a0:4d:47:6b:17:9b:38:3f:
1d:ad:27:db:fb:6f:19:c2:64:eb:11:f2:39:5a:64:
ec:b5:87:d8:e8:3d:fd:33:20:52:65:86:70:0e:13:
a7:20:dc:fc:7b:6e:d8:b7:12:c4:88:cb:75:56:fa:
3a:90:08:c6:e3:c4:59:7c:fe:08:47:66:38:db:fc:
60:cc:14:24:38:d9:bb:83:6b:87:6a:b8:80:41:41:
43:26:28:8a:68:41:69:d6:2f:8c:05:81:28:9d:60:
b4:68:c3:0a:09:10:e8:f3:36:24:9f:0e:c9:cf:bb:
c7:58:10:2f:78:cb:24:1c:b0:66:c5:a7:d3:91:72:
80:e1:4e:30:6e:47:b4:01:50:df:75:92:14:af:0a:
bf:27:dd:df:52:ee:39:79:fd:b6:7d:76:f1:e0:44:
90:06:64:26:c7:44:1e:77:9d:cd:05:d8:48:f6:b9:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:44:01:C8:15:C4:4A:41:27:E8:44:AF:7A:83:29:BB:CF:38:1A:3A
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mUQByBXESkEn6ESveoMpu884Gjo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.68.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c5:40:65:8e:56:a0:cb:7c:2f:06:75:47:c5:b6:12:0c:0a:64:
b1:b1:c7:b6:24:6b:b9:44:44:d3:be:e9:71:8a:63:38:14:a0:
14:18:c0:f2:d3:e1:44:15:da:7d:f5:4b:ab:a7:db:33:52:7b:
12:7c:be:bc:69:ad:e1:12:f6:a3:16:a3:c3:89:ab:7b:1f:a3:
52:2f:2b:b8:1c:02:69:98:99:b6:b3:be:23:df:08:5c:28:1a:
50:9f:f8:46:84:5a:1c:4d:a0:d6:59:bc:2c:f6:f0:28:a2:10:
17:ec:db:88:0a:d5:80:3f:18:04:95:53:b7:d9:55:6c:d7:45:
b2:a8:e0:fc:f0:82:8b:79:9a:c3:60:c8:79:09:9d:5f:8b:51:
81:8f:a2:e4:b8:d6:28:57:01:42:7b:2c:2b:a9:a9:9a:05:d9:
14:cd:31:2c:5e:37:f2:2b:50:41:0b:6d:5b:a1:8d:1a:87:16:
24:ef:65:b2:0c:32:68:81:ff:09:ef:a6:4f:b0:42:96:92:71:
48:b4:b4:72:94:5b:a2:6e:f1:39:64:34:ed:c4:4b:01:8f:f5:
85:a1:74:0d:16:4b:da:17:9e:66:aa:17:24:82:1d:35:46:d5:
65:8a:98:42:a0:91:70:56:ab:18:c1:59:47:14:5f:99:0e:24:
aa:8f:03:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:12 2023 by rpki-client on console-fra.rpki-client.org