Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/4yki0_rLP4VAFMgBtwnj44V3mOs.roa
File: 4yki0_rLP4VAFMgBtwnj44V3mOs.roa (raw, json)
Hash identifier: 1Pvwt8E2zRCtwQpaYtxArnsiE4a/1rAW8kxRLbsvOoE=
Subject key identifier: E3:29:22:D3:FA:CB:3F:85:40:14:C8:01:B7:09:E3:E3:85:77:98:EB
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4yki0_rLP4VAFMgBtwnj44V3mOs.roa
Signing time: Thu 15 Sep 2022 02:43:08 +0000
ROA not before: Thu 15 Sep 2022 02:43:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131584
IP address blocks: 106.105.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E32922D3FACB3F854014C801B709E3E3857798EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:25:32:16:e1:25:51:12:75:94:2c:15:0b:54:
91:7b:69:85:75:b2:18:c7:58:83:b4:81:82:b6:88:
46:e0:18:da:15:7c:a6:61:9f:fa:72:70:0d:96:9e:
41:1c:2c:6d:20:ce:b0:7f:0a:ab:b4:13:05:ff:c6:
f9:3c:f7:b0:ee:90:0b:1a:ef:9d:cc:bc:52:6a:90:
7e:b2:57:04:0a:94:12:0e:3a:2c:59:28:00:05:a8:
57:63:f3:5b:0a:ff:c5:37:1a:c7:5d:63:d1:6f:a5:
b7:af:23:b7:22:5b:3b:5f:f8:7c:c1:70:27:5f:7d:
7d:c4:7e:85:9b:78:a5:a1:f9:68:f2:8d:03:ca:10:
3d:70:de:9c:08:7c:a0:ff:50:ee:09:9d:12:a6:4a:
cf:9c:41:93:37:e4:b8:c6:a7:88:76:c1:c9:4e:2a:
80:b3:7b:7d:04:f4:a3:40:fa:01:08:9c:18:49:75:
db:34:63:5e:69:76:c6:c8:6f:c2:51:89:47:c1:4c:
1f:45:f6:a3:9d:23:72:db:2c:9e:6d:d1:1f:6e:6e:
2d:d3:6d:7b:77:ca:39:51:ad:40:df:29:c1:6b:08:
15:21:50:39:6f:37:06:e9:1d:88:cf:2d:06:1e:c1:
58:71:f3:56:87:93:c8:8f:a7:08:f1:1a:61:5a:34:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:29:22:D3:FA:CB:3F:85:40:14:C8:01:B7:09:E3:E3:85:77:98:EB
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4yki0_rLP4VAFMgBtwnj44V3mOs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.181.0/24
Signature Algorithm: sha256WithRSAEncryption
51:81:d9:77:ec:17:c8:bc:66:fa:aa:da:75:e8:8c:71:41:f1:
ff:54:e8:04:fe:c4:fe:5d:f3:94:42:d8:13:6a:45:ad:09:42:
00:3e:75:15:9c:da:88:8b:48:57:52:83:ab:ac:1d:8c:73:ec:
98:2d:83:bf:11:71:7d:d9:c8:58:5d:85:c9:7f:6a:1c:2b:a0:
36:fe:71:c0:aa:10:ec:36:0b:9f:59:1c:13:c7:2e:4d:c4:5c:
25:ab:ef:c2:99:f7:06:24:0e:9b:6e:c1:bc:e7:cc:eb:45:58:
0d:05:29:cd:c6:e9:ed:52:50:33:00:01:94:1b:fc:00:d3:d1:
20:e3:6a:62:d7:3d:04:d2:2a:b3:11:16:05:6e:2b:67:e5:c5:
f5:79:bf:f9:40:c4:9a:85:81:93:32:d4:69:4a:d0:80:6b:ae:
91:2c:86:0e:b9:b0:b2:d6:eb:c2:ea:0f:5f:af:f4:06:0d:b0:
61:4c:b7:95:a1:0d:5c:6c:f0:e5:aa:61:fa:89:07:23:41:00:
e6:03:80:45:01:2d:53:d3:77:09:21:ee:25:fc:89:62:df:74:
03:7d:72:1c:a1:da:0f:6c:a8:4f:5b:e0:ca:9b:fa:04:fa:c6:
56:b6:55:21:ff:b2:fb:0f:fb:e4:62:65:69:92:cb:68:91:b8:
de:0a:77:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org