Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/wY-9NrjU1HjQOZ-VOt6uPELBbrU.roa
File: wY-9NrjU1HjQOZ-VOt6uPELBbrU.roa (raw, json)
Hash identifier: Wh14JtKieXnZCafcSrBrH/3jI2ny9pRMxwqGFORxUWE=
Subject key identifier: C1:8F:BD:36:B8:D4:D4:78:D0:39:9F:95:3A:DE:AE:3C:42:C1:6E:B5
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wY-9NrjU1HjQOZ-VOt6uPELBbrU.roa
Signing time: Thu 15 Sep 2022 02:43:40 +0000
ROA not before: Thu 15 Sep 2022 02:43:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 220.229.128.0/17 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C18FBD36B8D4D478D0399F953ADEAE3C42C16EB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:43:10:70:68:b5:ad:73:ae:97:71:f2:84:b4:
fd:0b:d8:b4:a0:c6:db:18:cf:e2:f8:41:2f:64:a3:
da:02:98:b1:1f:a8:a1:77:43:ae:5f:1c:ca:f2:2b:
51:4d:91:ee:e5:30:62:ea:c6:1b:77:5b:96:c6:10:
23:0f:b0:8f:e6:46:23:70:07:08:14:e4:d4:38:59:
62:cd:bd:a2:64:84:b8:86:36:ff:dd:44:18:e3:2a:
b1:10:95:41:83:79:7d:65:6e:56:41:72:a1:a7:d0:
0a:1b:8e:85:01:29:87:f2:c3:52:59:af:7f:c3:ff:
ce:64:e0:d2:1f:10:d0:61:71:f5:4b:43:8d:44:56:
7f:3a:34:6a:3a:98:90:fa:22:26:d5:9d:9b:af:b6:
17:c3:f8:9f:57:d4:c1:ff:dc:fc:21:e0:e0:c9:d3:
0d:b6:03:b9:36:0a:a3:68:31:d2:99:09:58:77:0d:
d0:f9:d9:3c:4e:5c:87:83:1c:39:70:aa:a0:3a:a2:
c1:05:3a:0f:ad:c1:65:8c:ed:4f:4e:0b:4d:10:9b:
cf:de:e6:4a:37:3f:81:e1:63:a9:12:3c:c5:ed:ed:
99:8c:29:ce:d2:c1:2f:c2:81:85:d2:a5:29:95:f0:
ef:e5:78:2b:d9:c7:19:f0:14:f1:38:13:e8:f7:b8:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8F:BD:36:B8:D4:D4:78:D0:39:9F:95:3A:DE:AE:3C:42:C1:6E:B5
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wY-9NrjU1HjQOZ-VOt6uPELBbrU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.229.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1d:69:2f:a6:21:45:5b:a0:6d:c0:6f:2d:8c:5f:c0:35:cc:4e:
f5:25:d7:d7:dc:63:78:fc:d9:a1:c8:fc:48:34:48:c2:ad:c7:
5d:8c:5d:10:50:ca:6f:5c:1e:e7:67:4f:b5:ff:f7:11:d6:8d:
8c:cd:9f:62:00:dc:ff:ef:8f:5b:8f:62:61:e9:fa:1b:ee:c4:
1c:b0:b9:a1:35:a1:be:eb:45:df:9b:6c:9e:89:e9:6e:67:ef:
d1:b4:a9:8c:15:ae:ad:3c:d8:26:d3:84:54:6b:17:e4:ee:0c:
80:ae:c5:8f:62:38:c0:46:93:eb:44:39:2e:e8:22:4e:5c:f0:
65:6b:fa:9f:af:b5:6c:44:86:dc:a7:74:ee:19:81:78:c6:10:
42:5c:46:4e:ad:7f:73:7a:dc:11:2f:fc:0e:0b:76:4e:55:44:
36:fe:fd:20:23:9c:fd:dc:9f:aa:9a:ea:85:31:97:a2:92:54:
20:9b:97:4b:ba:73:72:82:e1:47:c6:13:16:11:63:94:da:30:
e0:94:b0:00:fc:a8:b7:cc:32:50:56:eb:46:02:cf:33:f8:f1:
2f:7b:a7:ef:fb:83:f1:37:46:a6:2d:36:2f:70:a2:81:c8:b1:
a2:43:9d:bb:cf:cd:ad:59:9d:f1:71:c3:97:8b:ad:10:57:ca:
38:8e:97:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:01 2023 by rpki-client on console-ams.rpki-client.org