Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/tMKLTARKq-7nHOwpn90u558Xg-I.roa
File: tMKLTARKq-7nHOwpn90u558Xg-I.roa (raw, json)
Hash identifier: Jx6QExq2kAgEusbwbYFxHZU+i9qIyCNVZ0/+7/5dupU=
Subject key identifier: B4:C2:8B:4C:04:4A:AB:EE:E7:1C:EC:29:9F:DD:2E:E7:9F:17:83:E2
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1031
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tMKLTARKq-7nHOwpn90u558Xg-I.roa
Signing time: Wed 01 Feb 2023 10:28:15 +0000
ROA not before: Wed 01 Feb 2023 10:28:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 122.146.104.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4145 (0x1031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:15 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B4C28B4C044AABEEE71CEC299FDD2EE79F1783E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:d6:e8:aa:7b:11:3b:01:fe:b8:db:fd:4e:
59:2a:ce:b5:e2:c5:96:57:56:08:9e:88:e9:e1:6c:
d2:2a:62:c8:b1:ed:e0:ec:46:72:d8:90:bd:e3:14:
41:e1:2f:a6:62:7a:fd:87:d6:ae:08:b6:4d:dc:96:
bb:fe:6f:a0:f4:fa:24:12:bb:1b:3f:11:ab:2f:20:
69:07:74:24:94:6e:f5:7f:8f:9c:af:74:c6:d0:35:
cf:9e:cb:78:17:6a:3b:19:75:ea:30:4e:54:ec:60:
39:ee:15:1a:af:69:93:8c:a4:1f:32:0d:8a:81:35:
71:88:5b:69:76:8b:3e:48:33:3d:e2:f1:89:00:72:
03:e8:43:ad:5b:90:2b:3d:53:38:8e:09:3c:8f:de:
df:4f:70:91:5c:85:33:e1:8f:ef:17:13:7d:86:88:
f7:82:ec:a1:4e:91:e2:5f:3a:86:60:60:29:71:8c:
fd:cc:63:11:e8:a2:fe:5b:59:40:d8:da:c6:24:62:
53:f8:ef:80:23:0b:ec:a0:9c:41:05:69:84:58:46:
27:dd:3e:56:8e:b3:22:13:a7:60:55:7a:d4:b1:e4:
d6:b6:9f:a4:c9:dc:37:80:2b:b9:10:de:df:03:57:
f3:96:e8:a6:7a:c1:9b:c2:a7:48:fe:2f:c5:0e:2d:
1c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C2:8B:4C:04:4A:AB:EE:E7:1C:EC:29:9F:DD:2E:E7:9F:17:83:E2
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tMKLTARKq-7nHOwpn90u558Xg-I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.104.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:35:90:83:15:af:c7:8d:e0:83:d9:6f:04:8c:28:ef:f0:bb:
67:b7:5c:f1:60:4c:af:50:48:02:c3:e0:5e:98:bd:2a:57:e6:
c2:b4:45:47:dd:d1:3e:fc:d0:1f:35:3c:84:00:d2:c1:bb:64:
5d:23:61:f6:f4:ce:04:a0:07:1c:91:7d:8e:6e:9a:4c:9f:8c:
00:2d:88:68:0e:ce:dc:88:cb:be:4e:e8:85:4f:b4:4d:e8:f2:
bb:32:f5:62:4c:06:66:cc:2a:29:84:1c:aa:66:3c:0b:56:e8:
ab:33:7f:4d:eb:13:65:75:24:f6:f5:fe:c1:bf:bf:ac:32:41:
82:5c:fb:1e:82:70:cf:66:b7:42:19:12:2d:30:fc:58:4e:de:
e0:44:28:3c:58:c2:af:67:bf:ad:0a:55:69:8d:33:d3:fa:e6:
ee:db:79:af:55:0a:c4:bd:f0:93:8a:2f:e0:d0:4d:d4:fa:4b:
62:00:0b:f0:55:7a:0d:97:f0:f9:0b:85:d6:42:63:f3:fb:8d:
b9:89:12:c2:34:61:f5:66:44:50:c4:3d:4f:8c:80:40:bc:5e:
22:3f:d8:dd:83:97:f0:ed:66:82:63:07:d3:61:17:b0:fe:15:
40:2f:ad:a8:32:5e:bf:8a:8f:66:7a:f2:db:11:bd:53:2a:58:
a9:7a:49:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:16 2023 by rpki-client on console-fra.rpki-client.org