Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/5OiSFGqBM_9ECLcar2k7_AJMvYk.roa
File: 5OiSFGqBM_9ECLcar2k7_AJMvYk.roa (raw, json)
Hash identifier: RndRuFrpah6MD0J5EBDFzXJKAIzKfrMn36dXkNslkL8=
Subject key identifier: E4:E8:92:14:6A:81:33:FF:44:08:B7:1A:AF:69:3B:FC:02:4C:BD:89
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5OiSFGqBM_9ECLcar2k7_AJMvYk.roa
Signing time: Thu 15 Sep 2022 02:43:24 +0000
ROA not before: Thu 15 Sep 2022 02:43:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 106.105.0.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E4E892146A8133FF4408B71AAF693BFC024CBD89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:61:52:6e:92:20:7b:25:2c:af:f8:d6:98:
a3:a2:52:46:04:54:46:b1:aa:60:c7:90:59:40:32:
b5:32:6c:76:0b:dd:52:ff:66:5f:07:61:d9:af:c7:
52:08:87:45:e5:8c:43:14:e0:6e:6e:be:52:d5:9b:
35:ba:47:c0:c6:37:47:22:5c:b9:a3:53:d4:92:6c:
6a:13:7c:69:a6:0a:ca:cf:7f:3a:57:37:d5:1d:86:
20:e2:63:c1:f2:f2:af:5d:2a:4f:c7:e2:9d:42:56:
2b:dc:60:ef:47:11:97:04:8b:bf:70:28:7b:b9:82:
2d:34:67:11:16:55:1c:8a:b2:c4:fa:dc:7d:e2:b8:
a3:59:6b:28:f4:59:83:27:2d:03:13:da:fd:b2:6f:
a0:36:2f:15:ea:21:0f:2f:a6:3f:9d:ae:57:9e:5c:
a0:69:cb:24:9b:c5:ff:fa:23:fd:68:eb:9a:1d:e9:
a0:37:fa:15:5c:86:ac:02:52:be:ae:9b:16:8f:42:
a0:4e:30:8e:3d:4a:49:20:9a:74:93:72:d8:ec:11:
02:33:0e:d3:c2:75:f8:ef:01:b4:a0:85:58:3c:b9:
49:24:5b:ab:1e:dc:7a:ad:84:56:36:16:b3:ff:df:
9f:be:13:c0:b5:8e:fc:e9:ff:3c:c0:20:f4:71:6a:
7e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E8:92:14:6A:81:33:FF:44:08:B7:1A:AF:69:3B:FC:02:4C:BD:89
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5OiSFGqBM_9ECLcar2k7_AJMvYk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.0.0/20
Signature Algorithm: sha256WithRSAEncryption
a8:a5:f5:38:83:72:d6:0c:1f:ff:62:20:2f:3c:55:ef:64:1f:
b2:8c:1d:a2:f0:6d:01:e9:72:c0:5e:9e:6f:00:9b:fc:7d:89:
b7:ac:e8:4b:03:2e:bf:61:90:46:bf:bb:c4:87:a3:a3:42:1e:
c7:32:bd:18:84:eb:fb:3b:a0:10:30:4c:f7:64:d7:01:84:fa:
87:92:b7:c0:1d:11:97:28:84:9c:e6:2a:0b:d7:3f:a6:e1:c1:
86:c6:d4:0b:6d:a6:25:c6:a6:a7:02:4f:ae:fc:3a:82:7a:12:
fa:1a:78:f7:ec:52:62:73:d8:6b:95:57:4b:c9:2c:c8:84:60:
88:91:30:4a:69:e8:be:3e:f5:8c:c8:6f:0a:1a:fa:89:20:ee:
53:e2:df:3a:a8:8d:bd:65:96:2a:f5:15:2a:65:12:fb:eb:76:
2c:55:ef:f9:a2:00:a2:47:a8:3d:8e:10:29:eb:fc:d9:96:e8:
28:26:3a:a7:e5:51:56:c5:af:38:8c:34:ef:f9:07:d2:95:1b:
be:fa:bf:ea:fa:67:36:f2:0d:c5:d2:0e:0e:15:74:74:83:f4:
4d:52:4c:6e:c6:eb:95:d8:fd:f7:df:c7:7b:2b:23:3d:3e:d6:
b2:48:9c:0f:47:47:29:b7:9a:2c:e8:cc:95:8e:b7:cc:b5:e3:
a7:d4:79:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-fra.rpki-client.org