Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/mZkVHWCrCxqUipNiPC4PyLNLIV8.roa
File: mZkVHWCrCxqUipNiPC4PyLNLIV8.roa (raw, json)
Hash identifier: ZGgRd+B/4cJ3HS3oEnoj0v1I+TtpeoyZq28Km3XNp1E=
Subject key identifier: 99:99:15:1D:60:AB:0B:1A:94:8A:93:62:3C:2E:0F:C8:B3:4B:21:5F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10BF
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mZkVHWCrCxqUipNiPC4PyLNLIV8.roa
Signing time: Wed 01 Feb 2023 10:28:59 +0000
ROA not before: Wed 01 Feb 2023 10:28:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 203.190.16.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4287 (0x10bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:59 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9999151D60AB0B1A948A93623C2E0FC8B34B215F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b5:9e:10:a9:ac:33:0a:b5:c0:6d:7b:d4:b7:
86:d9:1c:29:65:5c:68:4a:c8:ed:e6:d0:bf:77:97:
fb:9e:b2:e8:90:46:e2:c5:b3:e1:19:e6:cb:36:a7:
ef:45:ee:0c:a3:d8:db:a3:4b:a1:20:08:db:0f:a3:
ef:82:61:03:2f:5a:65:0e:dd:26:41:9e:73:78:c8:
3d:3e:ea:7e:94:3b:2d:9a:30:11:f4:d3:b9:20:7d:
b9:5d:1a:92:c9:53:40:04:f3:ef:7c:31:e0:6a:82:
fa:38:f0:7f:7b:31:63:f0:44:5d:6c:57:81:6d:fe:
a1:ee:90:79:7b:db:b3:e8:35:94:2c:50:10:80:97:
e7:03:21:38:6d:2e:9a:cf:42:99:80:9c:3e:f2:47:
a4:1c:16:1c:f6:88:31:64:63:03:8b:a6:f2:f7:6b:
a4:cf:8d:3a:ce:ac:5e:ca:db:ce:67:b4:18:89:46:
71:25:45:f0:b6:c9:71:af:e3:69:a8:f2:4e:e4:eb:
9b:b3:b1:ad:ac:46:6d:6c:c4:0b:e2:9d:4a:90:98:
68:e1:0a:35:7e:39:80:2a:a0:5c:be:4c:ac:ac:20:
b4:0d:52:b0:17:ab:39:de:32:69:07:a2:0c:f9:d3:
27:b3:0f:c0:08:61:f3:74:2c:1d:32:d4:fe:51:07:
dc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:99:15:1D:60:AB:0B:1A:94:8A:93:62:3C:2E:0F:C8:B3:4B:21:5F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mZkVHWCrCxqUipNiPC4PyLNLIV8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.190.16.0/21
Signature Algorithm: sha256WithRSAEncryption
35:72:bc:10:5d:13:61:b3:54:4a:c7:ba:a0:58:b3:01:b2:60:
12:b3:a0:dd:8a:b0:9d:ad:7b:c2:47:54:be:bd:79:aa:e3:f6:
f2:b2:68:bc:a1:a5:29:ef:85:6e:28:99:91:5d:98:9f:78:91:
4e:9d:3c:60:14:c3:58:97:44:70:78:72:53:e6:19:d9:8c:23:
1e:53:2d:58:b1:c7:ed:50:10:b7:e0:c7:62:d6:6a:de:93:05:
54:84:b7:b4:08:6c:5f:ff:e2:94:ee:03:e9:dd:37:75:93:c5:
8c:6e:8a:6b:bb:17:be:74:0d:60:42:00:f3:f2:f0:69:e3:99:
8d:f2:5c:e8:b7:49:1c:5c:61:fa:11:94:94:15:28:d1:54:89:
d5:35:84:4b:c7:23:97:69:09:3f:ae:8e:3a:e3:2e:34:fd:66:
66:43:41:78:ed:75:6d:42:e9:af:8d:a7:75:f6:f9:84:13:ff:
bf:ca:c4:44:1c:1e:f7:f8:e9:60:06:e1:24:9c:f5:65:20:d7:
92:41:9a:1c:0a:5b:71:a4:49:89:4a:ef:75:55:8c:3a:4a:0b:
96:ae:2e:b3:26:aa:b1:fa:d5:ed:bd:a1:16:25:3c:de:d6:07:
a5:aa:81:b1:37:b3:3b:96:76:7b:c4:3f:ac:c4:7a:18:96:02:
f6:a7:5c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:16 2023 by rpki-client on console-fra.rpki-client.org