Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/q9T_UY9RD55SEy54N-Pjl3Rhiec.roa
File: q9T_UY9RD55SEy54N-Pjl3Rhiec.roa (raw, json)
Hash identifier: Q3QwmFKPMvV27BE3Ofj+x0tmZpWcWFw+wPxe5ijFUD8=
Subject key identifier: AB:D4:FF:51:8F:51:0F:9E:52:13:2E:78:37:E3:E3:97:74:61:89:E7
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/q9T_UY9RD55SEy54N-Pjl3Rhiec.roa
Signing time: Thu 15 Sep 2022 02:42:51 +0000
ROA not before: Thu 15 Sep 2022 02:42:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38851
IP address blocks: 60.245.120.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=ABD4FF518F510F9E52132E7837E3E397746189E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:e9:f6:55:e6:64:ff:11:11:26:a0:38:09:
ec:3e:8f:ee:b0:12:9c:49:6d:d9:0d:cc:d3:57:7b:
29:8e:46:39:60:97:d1:b4:5e:d5:4c:b0:c4:50:54:
5c:52:c1:ce:7a:55:23:8d:95:9c:c9:99:65:4c:33:
eb:10:cf:b6:39:b8:2e:d2:7b:ad:fb:1b:95:fb:01:
1e:3e:d2:ff:f6:83:5c:ec:c4:b3:d6:47:d4:48:9e:
85:4b:97:db:43:75:fb:43:58:86:d0:1d:ed:db:82:
b9:a4:d1:68:95:34:f2:f0:ec:43:b3:21:aa:db:5f:
43:e2:f9:fc:84:68:1e:35:6f:c9:01:9c:29:ae:d9:
c5:82:fd:00:da:9d:14:70:16:11:cb:cc:18:d0:ab:
be:75:dd:53:71:b3:ec:7a:11:49:91:d1:d5:94:99:
0b:6d:40:ac:2a:09:1d:aa:f3:3a:fe:cf:b4:bd:ee:
3c:fa:73:01:4c:8e:41:c3:23:89:1a:98:55:7d:6f:
78:2f:da:2a:ae:bf:b3:72:32:b0:3d:26:1c:84:36:
44:a9:2b:95:4d:4e:55:db:73:72:4b:27:17:da:f9:
a8:05:e6:fa:72:86:2d:65:fd:8a:c3:f8:3a:e3:05:
56:4e:a0:af:79:9a:42:0d:72:ff:28:9a:d4:49:f8:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D4:FF:51:8F:51:0F:9E:52:13:2E:78:37:E3:E3:97:74:61:89:E7
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/q9T_UY9RD55SEy54N-Pjl3Rhiec.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.245.120.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:95:20:00:7b:26:7e:cb:02:d3:51:e3:0f:f5:5a:49:e0:c0:
5a:52:9c:b2:04:71:b0:05:6d:9d:b2:a1:88:80:5a:e0:b5:94:
13:d7:1c:18:02:99:d4:6a:b3:b5:a2:3b:8a:06:e8:b7:ef:55:
11:24:6d:97:2a:9c:f4:c1:04:68:a2:08:82:b9:d5:10:df:0c:
fc:dc:b6:40:c9:86:d9:fc:0a:b7:16:56:a5:87:6c:c9:09:d0:
f0:91:76:58:bb:6a:90:91:91:2f:34:6f:45:78:51:36:0f:50:
2f:36:c8:72:23:93:66:5e:ae:61:d2:93:ff:2e:07:d2:15:5e:
4d:05:ed:c9:c1:d6:65:f6:05:48:de:bd:97:85:8d:e0:01:51:
67:92:e3:63:c7:00:a1:9c:da:55:b4:ac:f5:f4:d1:4b:b1:f9:
63:a1:64:7a:71:d3:37:69:f7:be:91:3d:f2:4b:09:bb:36:ec:
c3:91:c3:ad:91:97:aa:dc:1a:af:ae:3b:e1:a3:b2:1f:8e:81:
a9:94:78:79:20:5d:31:0e:8f:16:9c:70:a6:77:34:5d:d5:1e:
7a:34:80:9b:7a:ad:1a:14:17:be:07:31:07:37:03:15:4b:9c:
d0:5a:71:a3:58:8d:12:d7:2f:a9:7a:88:bd:e1:4c:da:98:c8:
a0:d6:38:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:01 2023 by rpki-client on console-ams.rpki-client.org