Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/wuCmmXtic1tlRs_MovIyB_UfTMQ.roa
File: wuCmmXtic1tlRs_MovIyB_UfTMQ.roa (raw, json)
Hash identifier: TorqwGY84xoQKPRNmoIsDU6KLdoZesil4aHASjoBDhQ=
Subject key identifier: C2:E0:A6:99:7B:62:73:5B:65:46:CF:CC:A2:F2:32:07:F5:1F:4C:C4
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1028
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wuCmmXtic1tlRs_MovIyB_UfTMQ.roa
Signing time: Wed 01 Feb 2023 10:28:12 +0000
ROA not before: Wed 01 Feb 2023 10:28:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 122.147.176.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4136 (0x1028)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:12 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C2E0A6997B62735B6546CFCCA2F23207F51F4CC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:d7:32:30:ee:36:ab:09:fe:50:3b:6c:ff:
cb:2c:e6:5b:a4:b6:7c:20:56:d2:39:94:84:6c:66:
29:81:b7:9b:59:25:ae:34:f5:1c:d9:31:34:f9:75:
71:6e:34:10:b6:af:6b:43:bf:44:51:4d:c9:1f:44:
57:d1:b4:d7:00:c8:98:ff:92:5d:d2:af:2b:40:82:
59:b5:b7:8c:69:73:d2:9b:ff:13:93:2a:7d:2d:19:
62:5a:da:6c:e5:54:86:b4:e8:f1:8c:f9:a2:d7:ab:
00:fd:64:0e:9b:b5:1a:b0:a7:00:ff:25:c2:f6:04:
9f:57:d3:bb:7b:b1:5b:dd:d7:66:74:de:bf:e3:77:
b0:15:46:86:ba:b9:63:5a:7e:70:2e:63:be:f6:ba:
af:f7:fc:50:35:d3:d7:d9:fc:e0:ef:e5:89:c3:dc:
84:00:e1:7f:07:56:78:3b:2e:c7:e5:d1:e4:ef:59:
3b:37:17:87:9d:c6:5c:29:f7:a3:bf:05:2f:8c:ef:
c2:bf:0a:db:dc:c7:4b:8a:b5:c0:24:d7:02:d5:5b:
fe:70:9b:52:40:7c:aa:61:ee:ec:91:d8:5d:38:88:
15:2f:61:c8:df:54:0b:8e:52:6e:5a:85:eb:76:81:
9b:eb:6f:7f:45:7c:d1:c7:46:7f:14:d9:5d:cf:2d:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E0:A6:99:7B:62:73:5B:65:46:CF:CC:A2:F2:32:07:F5:1F:4C:C4
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wuCmmXtic1tlRs_MovIyB_UfTMQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.176.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:e2:cb:b2:a9:f6:82:c7:f3:fc:24:5e:86:cc:07:8c:8e:69:
a5:fe:f1:4b:28:2a:a7:2d:83:29:55:60:f7:55:04:61:12:62:
32:72:3a:67:81:5d:88:d4:08:b4:bc:6c:c5:66:e9:96:59:9e:
95:ab:62:fe:59:f0:0f:03:79:d9:5d:f7:fc:78:f2:5e:65:a4:
bf:ed:e0:11:b4:4c:e1:50:61:6e:bc:11:0c:b9:f7:9c:c9:33:
99:6f:71:29:6d:49:89:53:14:47:76:29:7a:db:47:67:4d:e6:
9e:1d:40:df:08:a9:d7:af:c2:2e:f7:02:f0:fe:34:ca:45:88:
0a:58:ab:8d:12:49:7d:2c:99:2a:ad:a7:44:36:c6:96:5e:49:
13:a9:74:c1:3e:0c:d6:13:ac:6d:79:a7:f1:5c:6a:ce:7c:af:
d2:d1:c3:81:c8:96:36:a3:ac:e0:41:be:a4:c6:db:8b:42:6a:
23:21:c9:43:9c:87:e0:c2:35:79:30:87:15:be:0d:2e:0b:fc:
34:2d:d9:6b:a7:7d:ab:59:52:d9:ae:78:e9:00:c6:e5:fe:e4:
d5:31:8e:b1:89:00:ab:c6:fb:89:50:e0:db:75:e5:d0:15:9f:
ad:72:0e:b4:c7:9a:c4:73:04:d5:de:b8:f1:fd:9c:74:c9:cd:
3a:51:42:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:51 2023 by rpki-client on console-ams.rpki-client.org