Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/yGBoybrBV5XOaRSNDmkycVRq_yQ.roa
File: yGBoybrBV5XOaRSNDmkycVRq_yQ.roa (raw, json)
Hash identifier: W1qmrE3GG5oD8cUsOyDtImmOWdbF1Lm3bmFekj/3z8U=
Subject key identifier: C8:60:68:C9:BA:C1:57:95:CE:69:14:8D:0E:69:32:71:54:6A:FF:24
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1071
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/yGBoybrBV5XOaRSNDmkycVRq_yQ.roa
Signing time: Wed 01 Feb 2023 10:28:34 +0000
ROA not before: Wed 01 Feb 2023 10:28:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 122.146.0.0/15 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4209 (0x1071)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:34 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C86068C9BAC15795CE69148D0E693271546AFF24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5e:07:8a:9e:f1:e2:1e:b6:76:e8:b5:f8:56:
7c:a9:85:1c:eb:86:6c:13:12:8c:38:ec:a0:2e:ef:
90:f0:2a:d2:e2:56:b1:51:77:64:3d:92:26:59:73:
8d:ec:87:b3:55:79:20:13:c3:d0:cd:e4:d2:7e:12:
e0:19:c4:10:f1:65:01:20:4f:dc:33:8f:06:8c:0f:
be:2d:e5:f3:88:da:a9:f9:43:f9:a7:d6:41:85:eb:
10:6b:3d:c4:38:7e:68:ed:5d:79:a3:6d:dd:68:7c:
3c:34:44:6c:cb:50:5a:5f:91:7d:37:ae:3b:42:52:
1e:67:66:b0:93:cd:a7:c4:08:df:a3:8f:64:c7:0b:
6a:12:1c:fe:83:5c:57:00:f0:b4:3e:85:4e:ed:22:
c1:59:ee:f8:dd:55:cc:dd:ec:e7:3a:b4:53:6c:d8:
94:69:45:93:1c:c6:2e:f6:96:0a:ee:43:d1:1d:7f:
17:71:ed:bd:a2:93:3a:da:70:93:7a:fc:b9:94:9f:
e7:fb:77:75:f1:17:13:31:ae:32:0d:ef:cc:06:39:
2a:bc:5d:3e:d2:be:d7:17:c7:69:09:e9:c9:44:45:
7c:41:61:fb:bf:a7:94:e5:1c:9d:ac:1c:ba:59:fb:
16:dc:0c:33:39:2e:9c:91:da:bd:47:a8:ff:44:df:
96:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:60:68:C9:BA:C1:57:95:CE:69:14:8D:0E:69:32:71:54:6A:FF:24
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/yGBoybrBV5XOaRSNDmkycVRq_yQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.0.0/15
Signature Algorithm: sha256WithRSAEncryption
20:7c:29:6d:4b:d7:11:a3:dd:a4:bb:6d:6d:a9:6c:5c:b2:7c:
ab:57:3d:25:83:fa:9a:32:e0:2f:5d:cf:27:d5:fe:b6:0f:cb:
d8:88:cf:8f:70:8a:fd:70:0d:54:b7:40:bc:3e:ae:49:4e:d9:
6d:3b:23:69:54:0a:1d:24:7d:00:46:54:ac:68:70:8f:01:81:
61:7e:ae:db:fe:ab:f7:46:8d:04:95:0e:8f:1c:d2:26:13:60:
bd:a6:8d:23:0b:95:00:0d:ee:ba:30:78:6a:31:8b:78:cc:e3:
2a:64:15:5b:17:a5:7b:36:b8:f6:9e:c4:89:ed:81:4f:b3:9f:
c9:79:bd:17:79:c8:94:85:1e:ce:74:d7:50:5b:4b:46:55:4e:
19:f0:38:2b:f3:57:5b:5a:ad:00:91:57:6a:74:f9:21:1e:1c:
4f:b3:79:58:4c:db:28:2c:84:10:81:59:07:4e:d8:1f:77:2f:
c7:a9:14:7d:d0:46:c9:77:5b:92:72:87:86:9b:da:14:c8:1d:
d4:ed:a0:0f:d8:f0:f9:0a:d3:88:fa:b3:a9:4f:ea:1d:c3:0f:
f2:7a:aa:16:81:97:58:c0:97:73:b6:55:90:e2:98:30:86:c4:
2b:71:4b:e2:b4:25:b0:05:aa:79:6f:ee:c2:d2:57:f5:6a:4a:
fa:eb:18:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:51 2023 by rpki-client on console-ams.rpki-client.org