Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/BkqLMAmOdRlUFAg5lda2EHAgbGU.roa
File: BkqLMAmOdRlUFAg5lda2EHAgbGU.roa (raw, json)
Hash identifier: HgN717w4vVR9N8OJMIZeKRk1a7Ju0ETr6+mlttitGvQ=
Subject key identifier: 06:4A:8B:30:09:8E:75:19:54:14:08:39:95:D6:B6:10:70:20:6C:65
Certificate issuer: /CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A
Certificate serial: 03
Authority key identifier: A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/BkqLMAmOdRlUFAg5lda2EHAgbGU.roa
Signing time: Fri 09 Dec 2022 02:35:55 +0000
ROA not before: Fri 09 Dec 2022 02:35:55 +0000
ROA not after: Tue 05 Dec 2023 15:30:09 +0000
asID: 131657
IP address blocks: 103.51.90.0/23 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5A6AC38EE68C364CF79188F06427E9C766D4C1A
Validity
Not Before: Dec 9 02:35:55 2022 GMT
Not After : Dec 5 15:30:09 2023 GMT
Subject: CN=064A8B30098E75195414083995D6B61070206C65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:bc:7e:90:12:90:de:6f:6f:d7:63:18:da:
27:96:f3:d7:36:3b:64:2b:23:df:32:86:37:56:38:
8e:e6:01:58:dd:70:71:02:51:fa:ff:87:78:17:5f:
e2:d1:bb:a3:32:32:ec:a7:f0:eb:51:6f:7f:10:80:
e5:25:8f:56:bd:40:c6:a9:6e:41:4f:47:05:f8:f7:
aa:93:9c:50:81:21:ad:fd:d0:0b:48:cf:3c:9b:e3:
dd:79:b1:6c:01:31:81:61:db:86:f8:b4:90:31:67:
b4:32:c4:6a:c1:7f:c7:0a:08:37:14:06:60:76:1c:
0e:96:9a:0d:09:7b:de:c5:e8:b1:31:8f:d1:7c:db:
0d:13:ac:d9:f7:8f:65:3a:b4:3d:ce:74:b6:91:19:
c5:d1:44:19:26:d5:43:18:a4:11:2c:50:d7:2e:5d:
6f:cd:53:54:09:72:eb:cb:a4:aa:61:ea:dc:7f:ab:
a9:68:a9:4f:af:cf:ab:04:8e:69:18:9a:e4:32:60:
55:f7:c9:54:4a:57:6e:7a:12:18:76:2e:32:13:fd:
f7:8d:67:dd:3b:d9:98:a6:3f:75:31:25:18:89:96:
04:f3:73:7d:92:ff:3f:15:f5:ba:03:26:e3:97:6d:
24:08:d6:31:68:eb:88:ee:f6:eb:9a:0a:36:c8:03:
5c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4A:8B:30:09:8E:75:19:54:14:08:39:95:D6:B6:10:70:20:6C:65
X509v3 Authority Key Identifier:
keyid:A5:A6:AC:38:EE:68:C3:64:CF:79:18:8F:06:42:7E:9C:76:6D:4C:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/paasOO5ow2TPeRiPBkJ-nHZtTBo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/paasOO5ow2TPeRiPBkJ-nHZtTBo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/BRICKSINC/BkqLMAmOdRlUFAg5lda2EHAgbGU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.51.90.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:0e:b3:9c:96:67:b7:66:a6:f1:c3:bb:c8:bd:82:21:ff:cf:
e1:18:3a:90:ab:95:6b:df:af:2a:2e:e7:9c:61:44:de:9d:06:
c5:f1:05:44:76:54:a8:16:d4:44:44:4d:85:81:3a:a7:3e:d5:
49:09:89:46:30:49:d2:b6:0c:3c:35:ce:48:65:50:5d:89:07:
c9:f7:a4:e6:90:b8:b2:a4:11:f0:73:b7:46:32:11:a1:8d:53:
00:6e:34:33:1d:55:9f:37:77:47:81:42:45:fb:ba:df:17:c5:
59:dc:36:76:75:eb:a2:6c:cf:24:df:00:7c:12:42:fc:f1:07:
e3:84:6a:ba:21:00:99:fe:67:64:7d:c7:7f:8f:84:7f:e5:a0:
fe:05:b2:fd:ba:b0:c9:9b:44:25:1a:a5:8b:21:8e:5e:26:ab:
55:83:2b:b5:1e:29:c4:b5:17:54:b1:29:56:a4:cd:9d:9f:66:
84:e6:32:ae:27:ad:c9:c8:34:38:7f:18:ef:df:38:f5:44:3e:
20:d1:0f:11:6a:77:ba:de:c0:db:f4:4e:fb:b4:28:ee:be:da:
30:1b:54:1f:84:40:63:57:e9:4b:6b:5a:66:b5:12:75:a3:24:
49:c9:8b:60:cc:ab:26:86:b0:37:70:ea:a8:52:a6:10:ad:03:
64:c3:c5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 16:25:36 2023 by rpki-client on console-fra.rpki-client.org