Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/2BOF2bh_W_FuLYl7ORlzZFGAwew.roa
File: 2BOF2bh_W_FuLYl7ORlzZFGAwew.roa (raw, json)
Hash identifier: aTNYPmfwd01sR0BEHOuGCzFFeScIC4Rl9rDdAloT+SY=
Subject key identifier: D8:13:85:D9:B8:7F:5B:F1:6E:2D:89:7B:39:19:73:64:51:80:C1:EC
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2BOF2bh_W_FuLYl7ORlzZFGAwew.roa
Signing time: Thu 15 Sep 2022 02:43:31 +0000
ROA not before: Thu 15 Sep 2022 02:43:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 112.105.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D81385D9B87F5BF16E2D897B391973645180C1EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a9:8a:89:bb:76:46:f0:ca:a5:05:4e:8f:88:
0f:2f:f7:24:0a:c0:26:08:66:a9:4d:df:80:1e:ae:
1e:e1:12:19:18:dc:94:9b:8d:71:ac:54:a0:92:0f:
ba:44:d1:14:57:bf:e2:4d:73:c5:14:83:ef:06:23:
af:d2:71:33:57:00:aa:ec:2b:31:7e:6a:12:b9:7f:
56:3f:2f:38:12:9c:34:6b:36:67:fb:b9:bc:81:08:
45:91:8f:86:b6:47:b8:f9:b4:5e:29:b4:08:4c:32:
37:26:c9:62:fd:27:d6:e8:da:07:ba:8d:87:5c:b4:
33:d8:8d:c7:da:d1:f6:2c:5d:99:57:82:2b:61:c0:
d5:a5:1b:0e:0d:78:4d:bb:51:de:2c:de:cf:12:43:
eb:a7:59:b7:5a:68:99:9f:83:01:54:a9:bf:87:19:
8a:1e:52:1e:68:bf:40:f5:75:2e:eb:6d:6f:b0:d9:
c1:13:c7:d1:89:c3:11:e7:47:fb:7e:65:e2:9f:3d:
c4:d8:8b:08:e1:2c:67:15:58:bd:7a:1d:89:b2:d8:
c5:c3:66:ce:1c:de:06:8c:a3:3e:29:86:ab:cf:54:
20:8d:83:9c:54:a5:91:b9:50:1f:48:76:69:86:20:
4b:13:cf:4c:f3:9a:b4:b8:d5:fa:d1:ca:82:cb:cb:
c9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:13:85:D9:B8:7F:5B:F1:6E:2D:89:7B:39:19:73:64:51:80:C1:EC
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2BOF2bh_W_FuLYl7ORlzZFGAwew.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.8.0/24
Signature Algorithm: sha256WithRSAEncryption
82:c8:ff:be:d4:dd:a9:50:dd:28:1b:00:72:c7:f9:ea:29:73:
09:a1:ce:91:c5:dd:ea:71:8e:81:f2:1d:f9:8d:29:b9:74:34:
7f:4d:92:9e:cd:7e:98:48:00:16:fa:ef:65:db:81:2e:5d:e1:
75:71:14:7e:eb:5b:58:12:c8:b5:4e:49:ba:d7:6e:ef:f5:85:
b8:0d:43:63:1f:0b:39:02:e0:35:fb:05:f6:c3:bc:ee:78:9f:
de:57:e3:8a:87:38:8c:87:e8:31:17:59:61:f5:bd:67:73:e1:
d5:5f:20:0e:58:c6:17:fc:8c:c2:84:34:cd:54:3f:b4:fa:a1:
71:68:92:f4:42:ce:6d:33:d2:6c:5b:f3:1f:52:03:46:00:bf:
4b:55:8f:1c:76:bb:25:b3:7e:35:3a:9f:af:ea:99:38:8a:97:
99:90:26:a8:6a:33:1c:ac:1a:f2:4c:68:b4:c5:c1:f5:c0:5b:
64:75:cf:4c:23:14:0a:fe:97:aa:ea:cb:5d:25:78:e9:73:18:
82:97:28:6f:6c:0b:f3:3b:0c:f6:26:aa:55:a6:29:1c:9b:a6:
73:c8:7d:e0:4c:7b:31:9f:ef:04:af:28:76:56:b5:4b:da:c5:
5d:38:b2:e4:bd:a3:b6:c1:25:bc:05:3e:c4:3e:20:33:a3:fd:
f8:90:27:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-fra.rpki-client.org