Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/p8Xgm0oodJnvlvxlFDBF1foB_TM.roa
File: p8Xgm0oodJnvlvxlFDBF1foB_TM.roa (raw, json)
Hash identifier: JyXdw/L5LQvC1yvOjM/Xym8JUQFEl0XOR+4cbdypO0c=
Subject key identifier: A7:C5:E0:9B:4A:28:74:99:EF:96:FC:65:14:30:45:D5:FA:01:FD:33
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/p8Xgm0oodJnvlvxlFDBF1foB_TM.roa
Signing time: Thu 15 Sep 2022 02:43:12 +0000
ROA not before: Thu 15 Sep 2022 02:43:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 61.56.224.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A7C5E09B4A287499EF96FC65143045D5FA01FD33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7d:73:43:26:97:61:40:11:78:9f:37:0f:b2:
03:bf:5b:89:ee:44:76:d9:f7:6f:ae:c2:f2:4f:8b:
89:fe:99:4d:f1:2f:fb:8a:2a:56:ce:c1:0f:95:95:
42:34:5a:73:60:2e:cb:5b:4b:ce:71:bf:9e:60:a1:
7a:a9:d7:c0:57:c7:f2:05:48:27:05:31:e9:e3:78:
66:6c:fd:16:67:e5:d2:97:eb:e3:2a:b1:cf:ab:91:
b9:e4:da:17:da:6d:3c:8f:13:e1:9b:89:0e:ad:09:
7e:40:4c:33:f6:41:ea:c6:9e:5b:7f:ab:bf:24:f9:
70:12:25:b3:f5:d7:c6:a7:50:36:5f:5e:ef:d3:7a:
1f:7d:99:eb:40:e8:70:85:df:1d:23:ab:e2:5f:e1:
0e:2f:20:32:6c:69:6d:d7:e6:33:67:ff:6a:97:d7:
f9:bf:f7:86:0f:d8:74:f7:d3:a6:d9:df:ab:ec:20:
c7:15:dc:0a:02:fa:4e:1f:fb:f1:1d:4e:83:e5:90:
c6:1d:27:12:24:03:87:87:d8:49:71:e8:74:22:24:
19:98:8a:9f:8a:65:59:80:5a:e9:42:ad:be:67:f0:
06:f3:af:73:72:6e:4b:cb:bf:fe:da:82:c4:f3:22:
1c:e0:22:9e:de:78:c3:39:4d:ce:1c:3f:e5:e2:33:
80:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C5:E0:9B:4A:28:74:99:EF:96:FC:65:14:30:45:D5:FA:01:FD:33
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/p8Xgm0oodJnvlvxlFDBF1foB_TM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.224.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:14:bd:8b:70:e3:89:9c:9f:b3:ad:08:13:5c:4f:a9:92:7b:
34:81:a8:02:98:d0:26:40:e8:c0:7f:fe:bf:fd:8a:2b:7d:eb:
4d:9e:bb:04:fc:f6:96:37:11:b8:da:8a:0e:eb:ee:78:a9:51:
df:34:2c:2d:bf:69:35:df:11:de:bc:80:7f:a5:d8:e3:af:7f:
60:3a:94:e5:7b:f9:8e:96:d2:fd:b1:73:61:68:02:c5:f1:2e:
86:09:b3:29:4f:dd:8e:e6:89:b9:bf:c0:a2:56:6a:3c:93:39:
e0:81:3e:6e:bd:ba:5c:e3:5d:36:68:62:a1:8a:71:96:2e:e6:
bf:77:60:4d:0b:57:fe:a6:ba:52:0d:e6:5d:3d:eb:b8:b0:79:
91:2f:81:98:6c:e5:91:81:11:f5:7a:70:dc:ce:cb:03:a9:5a:
46:f7:73:86:dd:68:db:f2:8f:83:96:b8:c2:60:74:d4:bb:97:
37:17:7a:90:ca:dd:ce:f3:91:c1:76:e2:9a:15:f2:ed:4d:7d:
51:da:be:a2:73:57:14:30:aa:75:0a:7b:94:3f:f7:f9:fc:c1:
38:90:12:36:20:91:ae:60:3e:45:a5:56:d9:0f:8a:4e:f8:4e:
2b:20:1c:77:f4:ea:84:eb:93:75:2b:d2:4a:14:5f:e5:ad:d8:
ed:ec:e5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:01 2023 by rpki-client on console-ams.rpki-client.org