Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-GBE1lfRssPJWXY5LG9nKEP_wv0.roa
File: -GBE1lfRssPJWXY5LG9nKEP_wv0.roa (raw, json)
Hash identifier: m/qOJCvlUQbFX9Tidr7EUDCbWKmoLqcTcJMsJtc4pOQ=
Subject key identifier: F8:60:44:D6:57:D1:B2:C3:C9:59:76:39:2C:6F:67:28:43:FF:C2:FD
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1047
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-GBE1lfRssPJWXY5LG9nKEP_wv0.roa
Signing time: Wed 01 Feb 2023 10:28:21 +0000
ROA not before: Wed 01 Feb 2023 10:28:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 106.105.96.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4167 (0x1047)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:21 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F86044D657D1B2C3C95976392C6F672843FFC2FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:ca:53:4b:b5:f8:3d:38:9a:83:b2:8a:91:
b1:17:8e:6b:9e:44:cb:07:19:c8:e2:dc:32:a4:5e:
72:bd:15:be:70:e1:fa:9d:54:42:3f:4d:ac:0e:f3:
93:c5:fa:52:44:6b:c7:6c:8b:17:4b:06:c7:95:8e:
f0:d6:2e:75:89:05:ee:68:51:75:4c:06:17:09:66:
fc:51:0e:10:63:f8:6d:d2:fb:8d:6b:9c:f5:82:4b:
f8:b7:4d:49:ab:26:0f:5e:38:5f:67:c8:a4:c5:4a:
b4:b0:27:28:e2:0b:30:3a:4f:02:07:02:39:83:58:
18:7b:4e:5b:d0:c7:00:98:ce:59:09:84:88:d2:66:
55:b6:f4:2a:fe:0a:f1:82:62:8e:4e:af:55:ff:09:
c6:64:5a:e8:37:7a:df:67:e5:b0:58:a6:1e:92:2a:
7f:eb:a1:b4:e4:a0:2a:70:da:7a:88:a6:17:22:5e:
dc:67:f4:27:6d:a4:fc:79:61:01:b3:0f:76:ed:44:
40:ad:3e:2b:b9:3c:eb:1c:09:b1:0e:57:8c:5f:2d:
9d:df:c3:86:61:5e:ad:46:ec:d7:3a:93:17:33:60:
d6:fc:60:4f:21:40:db:58:30:31:09:71:d0:1f:a1:
37:0a:42:4e:6b:5a:42:6c:12:7d:88:71:64:72:00:
b2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:60:44:D6:57:D1:B2:C3:C9:59:76:39:2C:6F:67:28:43:FF:C2:FD
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-GBE1lfRssPJWXY5LG9nKEP_wv0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.96.0/19
Signature Algorithm: sha256WithRSAEncryption
86:fd:11:b4:0e:a8:c4:ed:98:78:8f:0c:3e:bf:79:97:c7:35:
9e:4e:9b:01:74:78:2a:4c:2c:ac:3f:7e:73:ec:e1:a2:89:61:
5c:a6:7f:13:ae:2f:70:af:95:32:08:47:c0:b0:5f:3b:79:a9:
08:aa:70:b6:89:0f:78:5a:66:6d:28:9e:06:83:3a:a1:a0:e3:
a0:4e:8d:11:ba:07:db:c1:e0:f7:16:fe:99:eb:3b:ce:51:e6:
eb:f0:7a:a0:32:17:23:76:2c:79:a3:d5:9d:3e:b7:06:d7:0f:
88:e1:48:62:a1:85:46:fc:20:ee:a5:76:25:40:42:73:5b:b0:
94:52:91:da:30:65:75:d0:5a:cb:cd:d1:db:ab:0b:10:57:17:
1a:78:72:f4:50:73:ca:68:c3:75:ac:54:b4:ec:26:8b:ca:31:
6b:a6:23:e8:5e:f3:ab:b5:3d:db:61:8b:0d:5e:ad:be:82:ed:
9a:b0:97:08:c9:88:07:82:4f:56:ee:8d:41:77:43:40:57:10:
77:66:19:85:00:af:d0:44:f6:95:16:69:06:7e:7a:38:17:94:
01:4a:33:95:48:f3:8c:dc:8d:46:54:d8:bd:0f:65:0d:aa:fa:
3f:75:91:90:46:22:e3:3c:81:66:2d:16:f1:89:ea:68:a8:55:
45:77:e1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:49 2023 by rpki-client on console-ams.rpki-client.org