Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/qZ92EHgFs1Z0Y-kYonKhHmZ7dR8.roa
File: qZ92EHgFs1Z0Y-kYonKhHmZ7dR8.roa (raw, json)
Hash identifier: MVkEjpCBgGVayc18wS/LxeUql4h7bDMDnfUMrdLIBl4=
Subject key identifier: A9:9F:76:10:78:05:B3:56:74:63:E9:18:A2:72:A1:1E:66:7B:75:1F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10AD
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/qZ92EHgFs1Z0Y-kYonKhHmZ7dR8.roa
Signing time: Wed 01 Feb 2023 10:28:53 +0000
ROA not before: Wed 01 Feb 2023 10:28:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 122.147.64.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4269 (0x10ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:53 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A99F76107805B3567463E918A272A11E667B751F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:2b:a2:dc:08:ac:96:cb:eb:61:e0:e9:f7:
5b:8c:f6:92:c9:88:33:6c:d3:40:da:9d:d5:84:8d:
a5:95:58:ff:8b:f1:24:d1:d2:0c:83:45:30:c8:e4:
25:0c:9f:41:ce:81:0d:2e:5a:8b:1e:f5:28:46:5a:
4c:e7:9d:5c:10:d0:98:c2:08:ff:7f:cd:d9:41:8a:
0e:d3:ec:bd:dc:a5:46:3e:e5:e7:0d:eb:52:9d:eb:
68:f5:40:e9:71:38:87:8a:6d:b8:6f:d8:07:8d:11:
30:cf:f9:23:53:05:8d:13:c8:46:cf:7e:54:c2:3f:
d6:86:13:4b:7f:9d:9d:ef:a1:a6:3b:e8:c9:05:a3:
28:d6:e0:f8:b3:7d:39:3f:04:6e:53:ec:f4:92:9d:
88:e8:8a:8f:31:19:41:0a:93:31:2f:2b:1b:cd:30:
9f:23:3f:b7:63:2c:5c:7b:82:72:86:ef:14:a5:2a:
e0:93:1f:c6:10:6b:1e:ed:01:20:41:eb:aa:93:b2:
03:5a:75:c9:8c:5f:7c:65:ce:f1:eb:b4:c8:4e:b2:
f1:f5:5c:24:57:31:2e:dc:71:6d:6d:0b:e6:a1:d6:
1e:7e:8e:f5:8f:a7:0c:da:3e:03:0a:7c:c7:7b:64:
39:3d:4f:5a:bc:31:1e:f7:40:57:89:8f:6a:f8:d1:
34:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9F:76:10:78:05:B3:56:74:63:E9:18:A2:72:A1:1E:66:7B:75:1F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/qZ92EHgFs1Z0Y-kYonKhHmZ7dR8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.64.0/18
Signature Algorithm: sha256WithRSAEncryption
26:61:6a:33:d0:f1:ce:fd:d1:87:d7:28:69:77:ba:81:26:3f:
3f:17:1a:f0:bd:ad:07:c0:a7:45:9b:bc:68:b1:82:17:af:af:
1f:a8:a9:b3:73:3a:91:ef:10:5f:6d:ac:34:1d:68:e7:e3:aa:
a6:e7:4f:65:66:00:54:5e:37:ad:e3:53:16:86:da:38:d9:06:
eb:7c:d9:60:e9:be:2d:6b:fa:28:95:5a:9b:35:ee:5f:0b:8d:
a7:5f:35:ae:5f:93:53:52:b0:7a:96:c0:64:8a:5b:5f:e7:01:
52:e0:1d:eb:8d:76:4d:3c:33:66:5d:49:2a:ae:87:11:02:4f:
2a:25:29:bc:30:bb:37:cd:89:b6:3d:42:9c:12:3d:cc:f3:d7:
03:75:9a:c6:df:c9:25:40:b2:13:cf:ed:94:51:0c:60:7f:b8:
9f:92:70:1c:67:a5:cb:6d:37:29:0f:c2:e7:9b:fc:07:39:41:
b1:b2:4f:9b:80:21:7a:7c:63:57:bf:74:ec:e1:20:3c:a9:af:
6f:e0:72:d8:48:83:df:86:5d:f5:82:3e:cf:72:3b:12:c8:e2:
68:38:65:b7:75:ba:9d:c6:f5:62:1f:38:7b:65:cc:6e:85:be:
ae:69:ad:44:4b:40:02:ee:09:e3:71:fa:ee:f3:8a:1f:34:1e:
56:4f:fd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:51 2023 by rpki-client on console-ams.rpki-client.org