Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/zEZzzayFII_QZYcZG6rIrYYJFWA.roa
File: zEZzzayFII_QZYcZG6rIrYYJFWA.roa (raw, json)
Hash identifier: snJ0hJO5G+kB1R0O0et+NPCB3BrCImHPRyCefXmGUHY=
Subject key identifier: CC:46:73:CD:AC:85:20:8F:D0:65:87:19:1B:AA:C8:AD:86:09:15:60
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zEZzzayFII_QZYcZG6rIrYYJFWA.roa
Signing time: Thu 15 Sep 2022 02:43:14 +0000
ROA not before: Thu 15 Sep 2022 02:43:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 60.245.96.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CC4673CDAC85208FD06587191BAAC8AD86091560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4c:6d:d4:83:13:02:c1:1d:76:3b:30:48:09:
31:c0:d0:4c:22:c4:1a:b5:e4:d4:7b:aa:21:93:60:
12:d7:61:73:39:10:d5:cd:2c:e1:2c:78:1f:f6:20:
89:89:e7:96:9f:6f:65:fb:95:d1:75:66:84:d4:e0:
30:8e:6b:1f:89:7a:1b:7e:30:47:0c:8e:ca:02:0b:
ca:50:90:a5:45:92:01:47:ea:69:95:b1:92:39:cd:
63:43:25:ad:54:56:20:7b:ad:af:ae:7e:ef:2d:57:
47:9b:f9:d3:1f:a6:15:cf:42:f5:c3:bd:25:4d:67:
33:57:10:d8:dc:60:79:95:3f:6d:95:bd:2a:7f:1f:
05:a4:a5:84:9e:94:88:20:4a:09:22:22:a2:0a:f3:
d6:2e:85:3f:5a:96:68:6d:67:2b:43:9e:55:c7:14:
86:ea:c8:7d:cb:16:a9:2d:3c:3b:7d:7d:fb:04:9e:
e1:21:d4:da:fd:88:be:2f:28:1e:0f:ae:26:f5:97:
9d:49:fd:c5:be:f1:b9:59:79:93:c3:65:60:0c:c5:
d9:56:d7:89:72:3f:00:76:70:b8:af:0c:5d:76:5e:
e1:19:ca:4d:13:d5:1c:77:40:75:69:10:7f:d0:32:
1d:32:d4:24:e5:25:6c:b1:0c:94:2f:60:c9:80:01:
48:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:46:73:CD:AC:85:20:8F:D0:65:87:19:1B:AA:C8:AD:86:09:15:60
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zEZzzayFII_QZYcZG6rIrYYJFWA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.245.96.0/19
Signature Algorithm: sha256WithRSAEncryption
7e:92:16:28:33:da:13:71:ff:65:49:7e:b8:ff:2b:54:f5:a3:
05:d8:12:6f:30:f3:d0:8a:32:06:61:48:86:7c:b7:df:92:4d:
cd:e5:f4:68:05:24:68:32:e8:6f:09:01:70:8b:fc:fe:98:61:
ac:8a:4b:25:7b:95:04:3c:7f:81:fb:a9:d4:30:46:fb:61:7b:
15:1e:02:4b:4c:f7:11:19:de:c2:1a:22:ea:cd:b5:38:91:f8:
c1:60:fe:66:29:1e:22:54:2a:da:ac:35:10:1b:bd:42:4b:2a:
c2:04:18:38:bf:ce:b6:36:eb:00:de:08:1b:c6:62:83:c4:b3:
4e:72:17:47:02:4f:b5:cc:75:fa:02:2d:98:53:bc:9c:6b:b4:
09:60:42:1c:15:d6:90:4a:34:5b:b3:12:5e:aa:cd:62:1d:80:
f2:89:4f:6b:ce:35:f2:4e:34:65:9a:5f:98:bd:49:e2:f5:7f:
4b:3c:d1:a1:96:bc:15:f4:b8:73:75:be:8d:80:bc:e8:77:67:
b3:65:c5:57:c4:9a:83:cd:1a:d4:24:4c:40:5c:63:38:ec:7a:
ff:3a:22:a8:54:d5:8b:2c:f3:fe:4d:0e:29:81:2d:5a:29:f8:
b4:d9:e6:45:8d:a7:a2:6e:dc:5a:5a:83:99:ca:53:86:19:c3:
fa:20:f1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:13 2023 by rpki-client on console-fra.rpki-client.org