Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/u4OXVMGEhXGmrYIaV4xtB4MeIAQ.roa
File: u4OXVMGEhXGmrYIaV4xtB4MeIAQ.roa (raw, json)
Hash identifier: q1knq7zuwJc+lI15WXKfu6ysLTgRdPqtKf/qoIg01cc=
Subject key identifier: BB:83:97:54:C1:84:85:71:A6:AD:82:1A:57:8C:6D:07:83:1E:20:04
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 112B
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/u4OXVMGEhXGmrYIaV4xtB4MeIAQ.roa
Signing time: Tue 21 Feb 2023 03:03:54 +0000
ROA not before: Tue 21 Feb 2023 03:03:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 23675
IP address blocks: 123.51.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4395 (0x112b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 21 03:03:54 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BB839754C1848571A6AD821A578C6D07831E2004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ee:b9:e5:e3:21:88:f7:f9:b1:66:b9:24:19:
e8:c6:48:db:0e:cc:c4:a3:ee:38:3e:b7:c9:61:00:
41:4d:6d:e6:99:74:4e:99:9d:18:39:bb:55:f9:a0:
ba:37:6d:92:82:06:f5:ec:47:58:67:63:9c:25:c2:
1f:16:0c:14:8f:44:f9:2f:0a:a8:e3:e1:01:40:68:
90:51:c0:e3:31:55:18:10:dd:91:5c:2e:16:15:3d:
76:db:8b:35:fa:44:26:a0:d6:f7:d9:4d:44:94:c4:
81:d5:94:01:78:11:7b:c1:66:79:45:36:72:f7:ee:
b3:ec:f2:f3:fd:9d:52:75:c3:25:6f:bd:78:ec:13:
cb:0d:95:a3:34:b5:59:d0:68:65:4a:f0:9a:7e:43:
10:a5:8b:8b:97:0b:e2:bb:24:5a:3b:3b:09:ff:89:
56:97:c5:11:10:9a:28:37:60:89:72:fb:1f:af:a3:
96:6e:79:d6:2d:24:18:0e:ef:30:1b:ec:f0:8a:6c:
ff:8c:6f:89:bc:55:3e:d5:1c:d4:42:96:76:f7:bc:
7f:01:87:ca:a6:2b:d8:c3:00:cb:45:61:47:68:f7:
a8:83:70:73:ae:d1:c4:10:14:7a:6d:19:46:b5:ec:
21:2e:e4:ad:a6:41:3b:20:01:13:4b:46:76:24:e2:
85:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:83:97:54:C1:84:85:71:A6:AD:82:1A:57:8C:6D:07:83:1E:20:04
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/u4OXVMGEhXGmrYIaV4xtB4MeIAQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.51.181.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:77:3b:d9:d3:bb:d2:92:08:9a:65:f9:52:de:cf:f3:3c:ce:
e7:92:3e:d8:ed:3a:3b:4d:3e:fe:bb:55:ca:0e:9e:db:e1:41:
f5:e3:02:1b:1d:23:6d:1f:9d:d0:21:de:c9:11:8c:55:ed:0a:
77:4f:d5:23:aa:cf:6f:25:cb:06:c7:09:1d:15:2d:cf:d6:43:
c6:cb:6b:c3:4f:d4:b5:fc:e9:fa:df:44:2d:e6:c7:fc:b4:79:
23:aa:16:e6:d4:a4:d2:4d:44:04:ce:51:04:e9:83:5c:99:7f:
6a:4c:cc:34:d5:8a:e6:be:4d:a2:16:ed:63:cc:73:f6:03:64:
69:05:26:bf:4f:0b:f3:6e:bd:9f:0d:a4:14:61:ce:23:a3:04:
ad:26:24:c1:22:44:db:52:d4:3b:16:54:36:3f:6a:2b:c1:9f:
67:cb:15:c4:68:0e:3d:bd:37:bd:c0:0d:bb:e8:0a:07:90:82:
97:36:19:c0:a6:4d:cf:48:52:ab:65:e6:a2:b0:10:38:3c:ab:
0d:10:86:68:e8:62:7e:4d:69:1d:f2:99:df:53:e7:1e:bb:02:
bc:ba:55:0a:8a:dc:f4:6b:e7:eb:9f:69:a3:45:2a:0a:23:87:
38:cd:c7:3d:cb:e9:01:40:76:04:9f:55:91:50:da:60:9b:7a:
b9:3b:19:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:01 2023 by rpki-client on console-ams.rpki-client.org