Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-PeJspAh94rRFSCc0h-vVPB_DeU.roa
File: -PeJspAh94rRFSCc0h-vVPB_DeU.roa (raw, json)
Hash identifier: ZBmzhnBdrMWZicaBuFeiUl2TSh3MVgKgV769egqZz3k=
Subject key identifier: F8:F7:89:B2:90:21:F7:8A:D1:15:20:9C:D2:1F:AF:54:F0:7F:0D:E5
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1150
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-PeJspAh94rRFSCc0h-vVPB_DeU.roa
Signing time: Thu 06 Apr 2023 06:37:25 +0000
ROA not before: Thu 06 Apr 2023 06:37:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131602
IP address blocks: 106.105.160.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4432 (0x1150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Apr 6 06:37:25 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F8F789B29021F78AD115209CD21FAF54F07F0DE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3a:ba:57:60:2e:5c:0a:7f:c5:36:39:38:3b:
9e:1b:95:83:92:8a:cf:12:8d:f4:06:95:94:e8:0e:
b8:61:c1:07:76:38:d2:18:bc:f3:1f:88:f0:0c:45:
07:15:a2:d9:99:a9:05:1e:72:3f:a6:65:27:d3:70:
96:71:32:15:71:45:7c:1f:0f:b6:32:39:ba:d9:c0:
f0:3e:42:77:8c:62:0f:70:5e:5e:f0:04:17:4d:d4:
0c:6d:41:66:34:69:80:be:f9:20:10:fc:0e:43:60:
3a:a1:0c:81:7c:49:e1:b3:d7:d6:08:46:a7:d1:9a:
bb:c5:28:2b:2e:bf:22:5a:3a:36:21:d9:1d:05:b1:
6b:c1:a0:f4:6c:5c:fa:cc:31:40:db:fc:96:33:59:
79:cd:f7:be:f7:03:0b:d1:c3:6b:57:27:b6:f1:a4:
5d:46:76:ac:72:fd:b9:48:46:8e:fd:13:12:4d:7f:
96:f2:41:9f:10:91:b6:26:e1:95:6b:b7:76:ec:41:
81:87:8b:77:c8:1d:3c:56:08:fe:2d:14:c0:e9:9c:
6f:9a:a9:85:36:55:83:a0:7f:58:76:81:d1:22:c2:
a2:c0:0b:27:53:92:47:98:f5:94:26:f8:26:70:56:
fe:7e:7d:e0:2c:2f:84:08:e4:b8:0e:29:2f:fd:a4:
ca:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F7:89:B2:90:21:F7:8A:D1:15:20:9C:D2:1F:AF:54:F0:7F:0D:E5
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-PeJspAh94rRFSCc0h-vVPB_DeU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.160.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:71:f8:4e:3f:e0:cf:9c:77:47:a7:7b:5d:05:02:e3:b1:a1:
32:1b:05:79:f7:10:e1:0a:fe:50:ee:4e:a5:19:18:21:e1:3a:
df:8f:c5:a8:11:9b:e4:1e:f1:eb:89:0d:77:2a:3d:8e:5b:82:
bd:4c:88:1a:56:46:62:79:76:b8:e4:e0:39:a1:b9:91:ac:27:
c4:86:2d:51:35:e1:67:6c:ac:2e:4e:04:84:f8:c8:16:4f:ce:
b5:15:49:3d:ad:31:49:10:d2:7c:7e:02:6a:37:3a:b7:d2:ea:
68:c4:7a:ab:74:7a:79:4d:fb:29:00:c4:e7:25:34:d0:8c:3b:
8e:5b:f6:09:ef:a4:43:b6:70:51:6b:a2:46:69:72:f4:63:c4:
b7:0d:9c:70:a0:e5:80:eb:6a:18:24:fb:30:5d:53:3b:44:9c:
96:81:09:e3:5d:72:1b:56:cc:93:be:f7:a1:ff:ad:14:d6:98:
df:38:c8:01:40:fa:a6:17:3d:69:cc:b0:f2:80:91:3c:03:fb:
cb:7f:47:4a:c3:23:00:7c:cb:4f:68:cc:2e:55:80:9d:47:64:
14:b4:41:2e:27:fa:8c:fd:cd:64:eb:bd:d8:3a:6e:3e:00:e7:
1f:e4:e0:1b:75:87:82:97:a3:fd:70:c7:e9:ac:e1:ed:b6:00:
66:f6:fd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:14 2023 by rpki-client on console-fra.rpki-client.org