Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/s83zPZwCkT9yiNaknSxZHKIfMn4.roa
File: s83zPZwCkT9yiNaknSxZHKIfMn4.roa (raw, json)
Hash identifier: e4M7HG1BHpCZz+nM/ozS0EhByECGXyvhtEwqHjcF20U=
Subject key identifier: B3:CD:F3:3D:9C:02:91:3F:72:88:D6:A4:9D:2C:59:1C:A2:1F:32:7E
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/s83zPZwCkT9yiNaknSxZHKIfMn4.roa
Signing time: Thu 15 Sep 2022 02:43:38 +0000
ROA not before: Thu 15 Sep 2022 02:43:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 122.147.128.0/17 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B3CDF33D9C02913F7288D6A49D2C591CA21F327E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:88:4a:ac:3c:7c:86:be:4c:3b:92:70:b7:
0e:95:d5:18:a0:37:9e:a1:f3:35:71:9b:12:47:1e:
0e:c5:d4:f7:57:68:56:9d:ae:6c:f9:f2:b4:f0:0c:
66:95:68:fd:51:c8:6a:36:d8:b1:a7:56:0d:4c:44:
62:95:a9:2a:e7:b6:b7:75:18:6a:d6:e4:67:98:8f:
f5:b7:d0:ea:69:c4:4f:b1:55:a4:c5:d9:86:cc:3a:
ac:20:1a:e4:9e:d0:84:e5:87:ab:b0:ca:8e:df:88:
dd:ce:5c:e1:92:05:1a:11:bc:d6:09:6b:74:5a:7e:
f0:3e:81:37:87:a8:24:af:0d:98:7b:d5:e0:40:87:
90:01:85:84:25:d4:7b:ee:3e:b9:83:19:69:2b:7c:
94:6d:56:19:ad:d9:4d:29:f6:f0:fe:33:73:05:9a:
8c:4e:16:3f:b6:c4:a9:00:02:b0:07:f2:60:d1:59:
3d:f4:ee:1a:b6:31:1b:ee:31:58:05:28:85:1f:13:
8e:f9:c1:96:ef:bf:8f:b4:b4:43:61:93:d2:0e:d0:
a4:a0:56:0d:ef:b5:c9:e8:07:2e:98:ac:50:d4:f3:
9c:8d:cd:a0:ed:d6:af:9e:10:70:88:10:62:31:87:
b6:87:ac:9f:c1:79:bd:36:8f:52:40:16:74:c6:37:
14:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CD:F3:3D:9C:02:91:3F:72:88:D6:A4:9D:2C:59:1C:A2:1F:32:7E
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/s83zPZwCkT9yiNaknSxZHKIfMn4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.128.0/17
Signature Algorithm: sha256WithRSAEncryption
23:66:3c:f6:0d:e1:08:af:9a:f0:c5:bb:a2:9d:19:b5:96:d0:
2f:dc:b6:ef:d4:dc:75:ba:16:4c:9b:48:f3:d7:fa:fc:d1:da:
8e:f1:f4:b2:54:90:59:5c:70:30:67:29:59:4b:96:ba:28:08:
23:5a:ef:f6:9e:c6:3f:93:92:f9:3b:2f:d3:79:37:37:d9:79:
36:f4:61:e3:6d:4b:81:9f:66:e9:b7:f0:c8:03:d1:e5:d5:75:
eb:da:99:44:be:f4:2a:95:be:e9:ae:70:e5:00:c2:27:f3:9c:
70:22:f7:42:0a:5c:e6:a1:2a:88:03:3e:93:c3:32:fb:f8:3b:
28:07:86:15:9d:cc:5a:ef:5a:a0:62:7f:8f:ab:ef:2b:52:58:
98:59:98:67:9a:26:0c:24:e1:eb:8f:b0:ef:ba:94:98:3b:7e:
e7:34:53:c9:aa:17:4e:0e:27:36:34:cd:3a:88:59:87:67:31:
8e:bb:8f:c7:72:d1:6f:eb:a7:1b:3c:07:6f:77:c9:b6:c3:49:
cd:9a:74:8d:b0:a1:38:a4:05:d0:3b:e8:0a:7b:1c:28:8f:20:
b1:de:c5:e5:f9:ae:59:21:ee:1d:1b:72:2b:42:17:60:45:33:
a6:a4:9e:63:a2:03:5f:95:1a:9f:3a:38:67:16:11:53:78:b1:
16:43:59:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:01 2023 by rpki-client on console-ams.rpki-client.org