Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/5LIMeUJ-DtPMgw2qPZyIeqlK32M.roa
File: 5LIMeUJ-DtPMgw2qPZyIeqlK32M.roa (raw, json)
Hash identifier: Jj/2yMzRON0eUVx+sgdq5FezNm+Qcea+WTCNymeQ4Gs=
Subject key identifier: E4:B2:0C:79:42:7E:0E:D3:CC:83:0D:AA:3D:9C:88:7A:A9:4A:DF:63
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5LIMeUJ-DtPMgw2qPZyIeqlK32M.roa
Signing time: Thu 15 Sep 2022 02:43:53 +0000
ROA not before: Thu 15 Sep 2022 02:43:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 106.105.112.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E4B20C79427E0ED3CC830DAA3D9C887AA94ADF63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dc:0e:6a:62:f4:bb:f9:16:1d:64:fc:92:76:
56:6b:96:9e:a8:39:b7:55:da:eb:36:57:d3:92:81:
48:d6:27:18:57:02:6f:37:11:3b:fd:29:dc:d9:de:
4c:3c:03:f8:df:81:15:f2:af:c2:74:72:07:19:b2:
3c:e8:e1:b7:96:be:20:60:d3:14:da:9a:d3:59:50:
b4:0c:37:f9:6e:21:c1:7b:23:6e:23:3d:01:4c:12:
c8:40:0c:68:db:56:0d:3f:6e:d5:94:55:f0:29:c7:
f1:8d:fc:2a:99:7a:bf:2e:ea:47:12:b9:a9:df:ff:
d5:65:45:14:94:f4:01:a3:05:ae:db:77:96:44:ca:
9d:d9:50:b9:8e:aa:44:3e:b8:25:e1:21:2f:e2:08:
15:32:dd:87:d9:cb:c4:36:f0:36:b4:bd:da:97:d8:
ac:ca:a8:8b:c8:01:2a:d0:91:40:cf:ad:0c:42:53:
bd:8d:a2:ab:cf:cb:cb:3d:aa:8e:1b:5d:3a:95:24:
e0:dc:24:a2:21:b6:01:90:08:17:f2:a9:46:45:95:
a1:1c:5e:a4:83:f7:39:3b:47:80:d1:80:85:30:af:
3e:fb:fb:60:aa:72:8e:bd:59:97:34:a8:c2:7a:e8:
20:dc:06:68:93:6b:9d:66:6a:4c:70:1d:b4:9b:6d:
a0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B2:0C:79:42:7E:0E:D3:CC:83:0D:AA:3D:9C:88:7A:A9:4A:DF:63
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5LIMeUJ-DtPMgw2qPZyIeqlK32M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.112.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:96:66:3d:58:52:b6:44:0c:f3:92:49:6a:64:71:81:42:d5:
be:30:1d:ff:06:2a:2e:3a:a7:09:f8:87:7a:05:5c:64:44:a3:
5f:1e:16:02:55:6b:4d:87:34:57:a5:29:cd:6d:69:68:31:89:
d6:b9:35:a4:55:02:7f:41:74:a0:62:e8:5e:a1:17:ae:09:eb:
04:a7:dd:f5:2f:83:75:a0:38:de:e9:d8:d3:ff:91:11:0a:5f:
8f:db:b4:1e:a2:85:73:cc:6e:70:4c:ed:44:79:79:72:e3:4c:
7e:75:d4:13:8f:d1:f0:ae:5e:f2:1b:ea:18:cb:b8:e7:27:3a:
6e:bd:6f:05:b0:3c:6c:bd:d3:fe:66:8f:5e:d6:70:8f:a2:71:
77:21:f9:b8:7c:b0:1d:19:e1:a5:0d:a5:35:2e:f3:25:c4:9e:
13:5f:3f:18:1b:56:31:c2:2a:1b:cc:70:66:46:9d:86:fa:68:
88:a4:38:48:bd:7a:f5:5b:02:6b:75:a6:8a:99:7c:7f:66:aa:
15:bd:1a:5b:a4:52:9f:2f:01:93:0c:ba:c5:d3:95:da:18:ab:
65:f2:7b:f3:cd:d3:d8:24:b9:b7:7d:00:ad:8f:08:a5:92:7f:
6d:b1:08:0e:53:a5:16:5e:36:55:ef:13:63:04:e6:b1:23:9b:
18:47:08:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org