Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/xL3bH0MEYMdjBQWb9f9EdPI_f58.roa
File: xL3bH0MEYMdjBQWb9f9EdPI_f58.roa (raw, json)
Hash identifier: 9ePTM5Ip/ERIIimLoh2v+DS33qnoowReqdl3OGAfrPY=
Subject key identifier: C4:BD:DB:1F:43:04:60:C7:63:05:05:9B:F5:FF:44:74:F2:3F:7F:9F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/xL3bH0MEYMdjBQWb9f9EdPI_f58.roa
Signing time: Thu 15 Sep 2022 02:43:53 +0000
ROA not before: Thu 15 Sep 2022 02:43:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 55303
IP address blocks: 115.30.72.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C4BDDB1F430460C76305059BF5FF4474F23F7F9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7f:d1:14:5c:51:f8:73:fa:f4:59:ff:f5:da:
0b:02:42:87:e6:c4:8b:2c:0d:d1:26:40:cd:60:a8:
3f:05:79:b7:33:55:af:7d:db:17:84:9f:c4:2c:01:
ad:cd:7a:d9:75:c9:57:49:1c:40:fd:65:c1:5f:51:
2d:35:ac:a5:9f:9a:33:24:0f:37:a4:79:39:a3:5b:
f3:28:f0:f1:6d:b7:5c:56:10:08:23:f5:61:db:1d:
6d:dc:e7:04:7a:a0:61:26:45:08:82:7e:87:3b:5c:
1f:d3:93:40:bf:7e:38:da:04:cd:a4:da:fb:ac:0f:
8e:4d:2d:63:a4:70:b5:49:9f:20:ad:ed:f3:83:68:
5e:18:a6:08:a0:84:62:22:0d:aa:c3:1b:77:fb:b5:
95:1a:23:3f:35:81:2d:83:db:63:ea:ae:7b:d2:63:
d8:82:8d:f5:d0:9d:90:cf:e7:22:85:ce:23:41:89:
a1:00:f3:72:df:66:c1:42:4e:d8:e3:66:a7:d7:1e:
9a:51:f4:44:62:b8:92:09:63:63:cd:aa:a2:09:9b:
67:28:77:14:d2:40:35:21:4f:54:76:28:32:9f:af:
01:a3:34:b6:ca:e7:b2:e7:44:46:76:7a:97:79:e9:
6b:a7:c9:58:44:d6:dd:e8:88:b2:13:27:10:af:5f:
d7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BD:DB:1F:43:04:60:C7:63:05:05:9B:F5:FF:44:74:F2:3F:7F:9F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/xL3bH0MEYMdjBQWb9f9EdPI_f58.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.30.72.0/22
Signature Algorithm: sha256WithRSAEncryption
61:9f:b7:77:61:73:fd:fe:02:46:c5:13:d0:a7:1d:72:75:f4:
7f:00:2e:73:6a:42:2f:70:ff:04:a6:b8:ed:f6:a7:9b:b2:de:
03:fb:f1:fc:07:6a:48:a3:e6:84:ee:55:f5:5d:96:9c:2b:21:
d8:cb:78:12:ba:c2:9d:10:ef:3e:73:cb:98:6b:ee:b5:5b:69:
c0:a9:5f:ec:4b:c2:ba:a5:4b:f8:b4:24:1c:d7:ca:bc:5e:72:
d4:ae:2f:97:ca:52:3c:5d:5e:80:ed:35:bc:2c:f7:ea:6a:35:
d1:be:eb:69:41:89:82:d2:1c:5a:3e:39:bf:db:b5:d2:98:13:
8f:86:ff:cc:75:18:51:33:b3:84:5b:27:d3:06:8a:1e:a7:25:
57:96:ff:dc:9e:54:60:00:30:4d:19:91:cb:04:6f:40:fa:6c:
14:dc:c3:bc:32:68:3a:ce:9f:91:d2:6f:f1:3a:e7:d2:5f:ef:
01:52:c2:7e:fc:2e:b6:c2:9f:39:e1:e9:4a:10:9e:bb:60:ba:
2f:34:89:31:ca:bb:89:96:6d:35:2b:cc:45:62:d0:1f:7f:b2:
29:40:03:a7:3d:f2:1a:a2:ec:5c:31:00:db:70:38:ef:a3:24:
d4:42:f3:35:d9:88:f0:fd:68:72:79:e4:d7:68:10:ce:c6:42:
a7:f6:8b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:13 2023 by rpki-client on console-fra.rpki-client.org