Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/0_2ssRHPtr9mJUNmI5OJY2CeNck.roa
File: 0_2ssRHPtr9mJUNmI5OJY2CeNck.roa (raw, json)
Hash identifier: pnJ+uLCGIQ5Kd144YZG2AJHc3DQBZAbzxMvij6YIYO8=
Subject key identifier: D3:FD:AC:B1:11:CF:B6:BF:66:25:43:66:23:93:89:63:60:9E:35:C9
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10E8
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/0_2ssRHPtr9mJUNmI5OJY2CeNck.roa
Signing time: Wed 01 Feb 2023 10:29:12 +0000
ROA not before: Wed 01 Feb 2023 10:29:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9922
IP address blocks: 106.105.8.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4328 (0x10e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:12 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D3FDACB111CFB6BF6625436623938963609E35C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9c:50:84:c8:e0:05:29:e8:65:e8:5b:7c:20:
16:8c:d8:15:ad:09:07:01:c6:c6:c4:59:a7:44:e0:
d9:52:a9:cc:dd:49:b4:54:fc:3d:8d:7c:cf:3b:95:
77:3c:59:db:66:6c:ea:c2:9e:7b:e7:2f:74:be:44:
29:46:b5:ce:cb:b2:f6:fb:3b:70:0c:fb:39:93:be:
4a:ed:85:63:fa:5a:dc:6c:ef:c7:0c:a2:af:e0:80:
dd:b9:01:0c:bb:cb:86:e5:3f:48:d8:33:1d:ca:12:
5e:ba:65:c3:fd:6a:13:21:f0:1c:0c:43:88:99:bd:
79:2a:c6:83:88:38:0b:31:a5:0a:03:4b:16:3d:9c:
eb:e9:89:ae:76:39:96:e0:b2:cd:2d:af:c2:5e:0a:
5d:79:81:98:4d:5c:13:17:19:53:29:50:20:de:a3:
bb:f9:33:4f:8d:d0:67:7f:3e:45:a4:77:6f:4d:fe:
1a:e1:60:f7:8d:5c:21:68:6a:c7:56:f2:0b:88:c1:
62:5a:be:5f:b2:bb:de:20:12:72:5d:73:d7:d0:d1:
33:77:fb:31:62:48:49:5d:77:15:11:fe:04:7e:7a:
8f:4c:b6:2d:d9:5d:3c:e6:7b:28:fc:a9:e3:6c:fc:
41:d5:ea:b3:b2:01:5c:52:06:e2:35:f5:c3:9a:d0:
65:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FD:AC:B1:11:CF:B6:BF:66:25:43:66:23:93:89:63:60:9E:35:C9
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/0_2ssRHPtr9mJUNmI5OJY2CeNck.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:73:dc:05:69:d7:d9:ee:31:94:64:98:8d:1f:1b:de:44:23:
1d:f4:f5:b2:a0:75:4d:7c:f9:f1:ba:c3:75:3a:f3:c6:d8:bc:
13:ae:b0:2f:99:da:b5:61:fb:ea:6d:69:5c:71:ab:53:a6:6d:
fb:23:54:f2:a0:40:83:c4:0b:98:cd:25:67:c9:63:d6:56:46:
68:12:50:02:c2:4a:a5:59:a4:7c:3c:c9:8c:5f:9f:93:47:ae:
2d:a6:36:79:a5:fb:35:ca:4c:69:8c:05:63:35:9d:68:f0:36:
cd:d6:52:f0:90:29:b6:59:3a:87:12:cc:d7:bc:23:33:a2:d0:
e0:76:62:cc:82:62:2f:d6:66:50:73:52:53:3f:2a:fe:29:3f:
5a:2d:b4:10:b1:a2:60:c8:ad:0e:86:79:f2:c5:6c:ed:bc:20:
12:f8:6c:62:b7:e5:b2:5c:e1:a5:7e:0b:eb:01:22:69:40:9f:
91:b0:74:d2:e8:42:8f:2a:4e:b9:1b:82:86:35:f0:b8:c5:ff:
78:7c:a5:a2:c1:cd:27:fe:88:c6:e7:cf:d3:ed:f4:9d:c8:c4:
d8:6d:3c:36:57:e6:a4:f2:65:44:f6:d7:0f:34:24:db:db:84:
d7:cc:5d:97:29:e1:b2:4a:cd:c9:cd:9a:21:f6:df:9c:b3:7d:
dd:b7:b6:62
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzAyMDEx
MDI5MTJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEQzRkRBQ0IxMTFDRkI2
QkY2NjI1NDM2NjIzOTM4OTYzNjA5RTM1QzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCynFCEyOAFKehl6Ft8IBaM2BWtCQcBxsbEWadE4NlSqczdSbRU
/D2NfM87lXc8WdtmbOrCnnvnL3S+RClGtc7Lsvb7O3AM+zmTvkrthWP6Wtxs78cM
oq/ggN25AQy7y4blP0jYMx3KEl66ZcP9ahMh8BwMQ4iZvXkqxoOIOAsxpQoDSxY9
nOvpia52OZbgss0tr8JeCl15gZhNXBMXGVMpUCDeo7v5M0+N0Gd/PkWkd29N/hrh
YPeNXCFoasdW8guIwWJavl+yu94gEnJdc9fQ0TN3+zFiSElddxUR/gR+eo9Mti3Z
XTzmeyj8qeNs/EHV6rOyAVxSBuI19cOa0GWHAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU0/2ssRHPtr9mJUNmI5OJY2CeNckwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvMF8yc3NSSFB0cjltSlVObUk1T0pZ
MkNlTmNrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2ppCDAN
BgkqhkiG9w0BAQsFAAOCAQEALHPcBWnX2e4xlGSYjR8b3kQjHfT1sqB1TXz58brD
dTrzxti8E66wL5natWH76m1pXHGrU6Zt+yNU8qBAg8QLmM0lZ8lj1lZGaBJQAsJK
pVmkfDzJjF+fk0euLaY2eaX7NcpMaYwFYzWdaPA2zdZS8JAptlk6hxLM17wjM6LQ
4HZizIJiL9ZmUHNSUz8q/ik/Wi20ELGiYMitDoZ58sVs7bwgEvhsYrflslzhpX4L
6wEiaUCfkbB00uhCjypOuRuChjXwuMX/eHylosHNJ/6IxufP0+30ncjE2G08Nlfm
pPJlRPbXDzQk29uE18xdlynhskrNyc2aIfbfnLN93be2Yg==
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:14 2023 by rpki-client on console-fra.rpki-client.org