Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/xPQQsF6tO-vhcgBJ3TOzsPK1UVs.roa
File: xPQQsF6tO-vhcgBJ3TOzsPK1UVs.roa (raw, json)
Hash identifier: bKOUtIVnh+Bu/dpo5B2Y34Z6nfYpT6np7ncgkfQYoXw=
Subject key identifier: C4:F4:10:B0:5E:AD:3B:EB:E1:72:00:49:DD:33:B3:B0:F2:B5:51:5B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/xPQQsF6tO-vhcgBJ3TOzsPK1UVs.roa
Signing time: Thu 15 Sep 2022 02:43:09 +0000
ROA not before: Thu 15 Sep 2022 02:43:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 113.196.192.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C4F410B05EAD3BEBE1720049DD33B3B0F2B5515B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4c:35:fb:32:08:75:58:c6:d9:de:63:fb:57:
a0:a3:8c:55:d0:50:74:da:a0:1d:a1:31:70:49:4d:
6b:b5:28:ee:08:0f:07:6e:2c:96:91:cc:7e:a2:11:
7a:cd:a7:f1:b6:ac:f5:2c:9c:08:58:f1:85:ef:1d:
8d:1e:a9:6a:4e:d1:df:9a:ab:09:9e:c8:e8:3e:23:
19:f9:58:3e:d6:c0:01:42:06:f8:14:9c:08:16:1f:
3c:d8:9d:39:fc:04:92:7e:87:97:55:cd:c2:e1:f2:
cb:f4:04:09:b8:43:2f:21:a2:f0:3f:cc:30:1d:2c:
41:1e:a5:80:06:77:81:4d:2e:1e:86:52:e8:2b:ce:
ea:1f:ab:6e:ba:72:ad:b0:90:43:0f:80:ff:26:ea:
b0:d9:6c:78:20:e4:54:46:25:d2:94:0a:2c:df:03:
b7:05:77:f8:76:ad:ac:be:25:a9:93:ce:d6:69:4c:
df:b5:2c:da:ce:4e:cb:77:b0:93:c0:2c:07:f6:64:
72:15:fc:9e:2b:c8:3b:fe:7a:ea:6e:a3:4c:c6:f5:
03:f1:61:1b:40:db:17:4c:22:8d:be:f3:ac:46:4d:
12:4d:39:23:04:8d:ec:28:e6:a4:78:f2:32:0c:52:
ce:75:f5:9f:cb:e6:13:44:78:1d:cf:a8:a5:0a:ed:
bc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F4:10:B0:5E:AD:3B:EB:E1:72:00:49:DD:33:B3:B0:F2:B5:51:5B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/xPQQsF6tO-vhcgBJ3TOzsPK1UVs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.192.0/18
Signature Algorithm: sha256WithRSAEncryption
04:a4:d5:ec:cc:4f:ce:a4:e6:27:06:0e:ea:cd:9e:2f:74:c1:
cc:a9:59:ef:82:af:a5:86:21:d6:e7:48:5e:2b:79:f7:71:5d:
af:64:b4:11:c4:55:ae:ba:5c:c1:5e:12:80:b3:d2:07:18:05:
44:3a:7d:5a:fe:c3:89:b4:fc:c0:45:c0:22:86:1f:39:67:a8:
f5:35:d2:4b:76:94:9a:66:f5:b8:7c:03:63:02:c5:51:49:13:
9e:da:91:19:2e:26:ad:ef:21:a7:df:5c:66:87:e6:de:9e:b0:
00:1a:a1:f8:c2:9d:89:f0:a3:06:69:58:c2:2d:e4:e9:5e:50:
70:0b:3d:92:5e:e3:fc:1c:c0:86:fc:14:01:ae:48:7b:a0:34:
3b:b0:2c:5d:80:be:47:3b:4f:e2:65:4f:eb:97:7b:e4:8f:24:
d4:a4:9c:6c:48:d1:04:15:77:0c:d3:70:d4:f9:2d:7c:cd:41:
5e:8f:eb:16:1e:0d:0f:fa:e4:26:3d:c8:75:69:aa:99:8d:f4:
3c:2a:f6:bd:c6:da:59:93:1f:34:06:f2:2c:e2:07:6f:f5:97:
df:7b:0f:dd:18:06:ea:c8:53:f9:3a:06:2a:00:71:06:39:3f:
27:8e:11:42:07:2a:db:fb:76:e9:a0:45:e7:62:0c:34:2b:5e:
71:58:bb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:01 2023 by rpki-client on console-ams.rpki-client.org