Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/vbWRZPZRxTIX8JUXEbvFABWvrFc.roa
File: vbWRZPZRxTIX8JUXEbvFABWvrFc.roa (raw, json)
Hash identifier: MZWi/hhfxmemfjFPgP2TmqaS0kZq3sLmka3OSdeXFKo=
Subject key identifier: BD:B5:91:64:F6:51:C5:32:17:F0:95:17:11:BB:C5:00:15:AF:AC:57
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10C2
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/vbWRZPZRxTIX8JUXEbvFABWvrFc.roa
Signing time: Wed 01 Feb 2023 10:29:00 +0000
ROA not before: Wed 01 Feb 2023 10:29:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 113.196.0.0/17 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4290 (0x10c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:00 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BDB59164F651C53217F0951711BBC50015AFAC57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cd:e7:e8:b1:27:4f:cf:11:72:0d:c9:8c:11:
7e:8e:8e:72:f5:a9:b4:db:e3:e1:f0:8e:19:0f:49:
58:7a:3f:88:0c:27:e0:4d:29:7e:c0:6f:cb:0f:30:
76:b8:99:07:e7:a6:96:50:3a:bc:f8:db:0b:9d:38:
10:bb:39:9e:b4:14:81:8d:64:59:18:95:bf:99:75:
9f:67:03:64:7b:79:c3:e3:cc:b1:6d:b4:0c:56:e2:
c6:46:20:73:cf:fc:46:59:5d:d4:40:60:92:03:c2:
ea:bf:1c:fb:7a:b4:9e:b4:18:e5:99:6d:31:cc:c9:
1f:65:a6:e2:93:26:68:7e:3d:0f:fa:7b:5f:1f:39:
99:ab:f0:75:73:28:e0:64:c4:72:9e:b7:ce:38:da:
55:80:05:a1:49:e8:36:b3:ad:c5:95:10:da:c6:7a:
d5:56:d5:e5:1e:94:69:6b:4c:2c:5d:02:42:ab:aa:
c9:be:00:ae:e8:29:06:8d:2f:46:55:ec:fe:69:48:
89:41:49:87:1c:4b:b9:20:c5:c6:0f:f3:0a:8b:1b:
ef:25:2a:15:13:9c:c1:5d:a5:74:5f:5b:21:6e:20:
6a:8f:c7:26:13:ce:68:b5:29:48:22:5d:f7:36:36:
77:88:97:60:1c:5c:cf:84:5c:0f:76:50:6f:04:67:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B5:91:64:F6:51:C5:32:17:F0:95:17:11:BB:C5:00:15:AF:AC:57
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/vbWRZPZRxTIX8JUXEbvFABWvrFc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.0.0/17
Signature Algorithm: sha256WithRSAEncryption
4a:70:4b:62:7f:3a:f0:40:a1:ab:7a:6f:13:ec:2e:d4:74:e9:
3a:50:aa:cf:b7:47:be:d2:76:5a:6b:2b:50:1e:6b:ea:bf:50:
a2:7a:fa:35:61:1a:ee:8d:4b:bd:bc:62:ca:29:4f:e7:d6:a7:
99:6b:10:05:ed:6e:bc:96:58:f4:4f:7c:db:c3:58:a4:72:9e:
66:c7:b3:36:d7:45:0b:0f:37:f2:b0:69:7e:92:68:f7:57:3d:
e3:48:9b:22:22:8b:2c:92:35:69:18:16:bc:fa:fa:5d:e3:bf:
ae:e3:cc:bc:36:5e:a7:b3:3c:43:34:66:6d:80:48:74:02:f2:
5c:3b:00:d3:bc:68:22:15:0f:42:51:a8:e3:eb:8e:e5:76:94:
d4:ed:4b:11:8d:ca:fb:6d:f5:4e:7b:2f:40:22:7c:51:aa:64:
0d:28:4b:a4:a6:5b:4f:26:f5:1d:28:a1:11:f4:72:c4:ec:b4:
d5:98:c4:b9:18:06:3c:ee:64:40:5d:31:23:33:18:13:ae:cb:
1b:f2:34:6a:d4:9a:c3:fe:48:96:63:fd:5c:f3:59:0a:dd:9c:
5c:9b:2b:f0:81:21:23:52:b1:bb:a2:e6:4f:2f:52:11:ab:2b:
f5:0d:1f:46:98:b0:d6:d3:9e:72:d0:6b:3e:00:bd:46:00:64:
b5:45:f6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:16 2023 by rpki-client on console-fra.rpki-client.org