Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/N8KV-QGEoJE4QZ8GzlGioMHACn4.roa
File: N8KV-QGEoJE4QZ8GzlGioMHACn4.roa (raw, json)
Hash identifier: lFVsCpvCoaDo1z+SUXZBsCmvB9Og60TCyCpv70s+UKQ=
Subject key identifier: 37:C2:95:F9:01:84:A0:91:38:41:9F:06:CE:51:A2:A0:C1:C0:0A:7E
Certificate issuer: /CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Certificate serial: 0AA4
Authority key identifier: 00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/N8KV-QGEoJE4QZ8GzlGioMHACn4.roa
Signing time: Thu 15 Sep 2022 02:44:12 +0000
ROA not before: Thu 15 Sep 2022 02:44:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38047
IP address blocks: 2402:c340::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2724 (0xaa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00572E99C64ED652FA81D501EFA16CF9D44AE99C
Validity
Not Before: Sep 15 02:44:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=37C295F90184A09138419F06CE51A2A0C1C00A7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a8:ac:54:63:fe:c8:f0:29:41:9a:17:fa:51:
49:5b:91:0c:b2:ae:04:bc:f3:de:ef:01:ae:b5:56:
36:47:19:1b:17:c4:be:7a:53:b8:8e:80:c7:e7:f1:
0c:31:6e:5b:32:cf:14:d5:51:8f:0d:79:1f:37:4a:
db:06:e7:9f:48:10:c5:b1:87:14:b3:81:69:48:fb:
4e:a6:5c:8c:4a:3f:55:93:70:8b:64:dc:08:5c:43:
f5:af:4e:ab:10:c1:95:25:97:46:51:06:31:aa:e3:
db:b3:e2:be:ec:95:7e:89:34:3e:f1:d7:b2:01:4d:
69:2b:65:19:e2:0f:83:1f:da:d5:16:14:1c:f1:c2:
2a:7b:85:46:d5:46:a7:a9:2a:70:e2:33:ce:fa:40:
e3:e3:23:cc:65:cc:77:5b:2a:5a:f7:8a:d1:ae:ba:
ed:48:68:93:d5:71:4e:85:13:55:b5:87:39:19:b1:
87:a6:e7:89:37:e4:fa:65:6f:5d:45:de:68:4e:bf:
f4:73:59:62:75:29:12:79:e8:72:60:be:49:bd:ba:
4a:98:5e:93:bc:ea:eb:10:48:75:55:f4:f2:32:47:
b5:7f:24:39:36:11:4a:ae:c2:c9:c7:61:ea:b8:07:
8f:c4:30:b4:da:07:ff:6a:4e:14:d2:08:91:c3:d3:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C2:95:F9:01:84:A0:91:38:41:9F:06:CE:51:A2:A0:C1:C0:0A:7E
X509v3 Authority Key Identifier:
keyid:00:57:2E:99:C6:4E:D6:52:FA:81:D5:01:EF:A1:6C:F9:D4:4A:E9:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/AFcumcZO1lL6gdUB76Fs-dRK6Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/AFcumcZO1lL6gdUB76Fs-dRK6Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHINCHENG/N8KV-QGEoJE4QZ8GzlGioMHACn4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:c340::/32
Signature Algorithm: sha256WithRSAEncryption
1c:00:b0:42:82:f3:bb:0a:57:69:50:f1:a6:1a:f2:a7:f0:f4:
89:45:42:3c:63:79:34:54:53:92:7c:a4:6c:c2:1e:bd:7c:74:
1c:6c:23:a1:ee:2e:4f:9d:4d:57:68:43:03:45:eb:e7:f5:2d:
f3:7e:9f:93:fb:0e:c7:92:1a:42:f6:bc:7a:b4:6c:c4:83:bd:
f2:96:24:b3:de:e3:eb:44:eb:07:e6:73:63:66:96:b2:85:5a:
d5:ef:38:a8:18:fe:53:db:3f:db:95:87:97:29:cf:8c:7d:bb:
83:3f:c1:b9:a3:59:3c:8d:b4:a7:17:27:44:20:ca:27:e8:d6:
78:e4:b9:f4:2a:ae:f2:53:f6:bd:65:d3:26:53:05:15:21:95:
47:31:2f:fc:72:87:5a:d3:bb:f3:dd:ee:4e:45:9b:8a:d8:d2:
36:09:ed:bc:25:a5:24:74:6c:a7:65:80:82:62:fd:62:ef:15:
c2:30:bb:c1:80:1e:72:51:26:3b:99:5c:a7:a9:d5:26:e2:57:
90:07:52:fd:86:50:57:18:95:8a:02:58:72:3d:2a:4a:e0:76:
29:b8:f0:55:63:49:ee:a2:be:3f:d2:ae:78:ec:8e:85:f3:6e:
86:f1:a5:33:03:55:3d:77:cc:57:ee:f2:65:85:8a:89:03:49:
35:29:3f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:18:40 2023 by rpki-client on console-fra.rpki-client.org