Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/6Cr55n4LqrJYblg7_DxEh70OCTE.roa
File: 6Cr55n4LqrJYblg7_DxEh70OCTE.roa (raw, json)
Hash identifier: JtH5JwkQCuPzxtuwnE/53je2FYVhzIx6U8w7tgi+6H0=
Subject key identifier: E8:2A:F9:E6:7E:0B:AA:B2:58:6E:58:3B:FC:3C:44:87:BD:0E:09:31
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6Cr55n4LqrJYblg7_DxEh70OCTE.roa
Signing time: Thu 15 Sep 2022 02:43:36 +0000
ROA not before: Thu 15 Sep 2022 02:43:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 106.105.96.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E82AF9E67E0BAAB2586E583BFC3C4487BD0E0931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:55:d1:c6:b7:19:1f:39:8d:17:8f:17:f4:
ec:52:ec:19:2f:61:31:08:01:95:cb:a4:2a:46:c3:
06:ff:70:de:11:4e:a1:12:87:e2:13:b1:e1:aa:10:
16:ee:5e:74:9f:bb:e8:a3:a5:42:20:35:58:8a:e0:
cc:cf:67:85:05:51:2a:de:a1:ed:1d:4d:4c:70:96:
89:ed:ea:2d:e8:d4:b7:6f:19:6f:b5:02:ac:9b:ca:
41:35:55:b8:c1:97:df:5e:46:0c:49:25:2f:d4:9f:
7b:11:48:d3:8e:cf:e2:a8:2f:e7:8e:a9:95:3e:23:
cf:7e:6c:6e:86:97:5e:8d:8f:a3:d0:04:bb:77:5c:
fe:3c:c2:b6:0d:92:bc:5f:b4:d4:d0:cf:0e:ca:87:
6c:cc:d7:f5:98:a3:81:04:af:64:79:8c:3f:5f:9d:
70:54:67:0b:4e:ef:e3:d5:b4:41:59:bd:94:dc:4a:
52:24:f3:2b:ed:4a:95:78:0b:ab:fe:83:0b:8f:a5:
cc:7e:8a:56:41:ef:81:9d:e7:cf:9f:a9:59:03:67:
f5:9c:4e:b3:67:38:89:1e:29:0d:3e:b6:c6:5d:08:
4a:1b:a1:d6:93:78:4b:e4:e7:3c:d7:62:99:63:3a:
43:78:b1:f9:f4:a9:7c:a5:90:c6:86:dc:69:47:7c:
68:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2A:F9:E6:7E:0B:AA:B2:58:6E:58:3B:FC:3C:44:87:BD:0E:09:31
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6Cr55n4LqrJYblg7_DxEh70OCTE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.96.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:f0:9d:da:d4:09:53:50:21:d2:c0:af:79:99:43:d8:3b:24:
0c:0e:be:ae:1e:f9:d8:4d:ca:9c:a3:41:01:f9:7e:ff:94:87:
78:82:c9:9e:7f:fa:56:c0:85:70:5c:ee:9a:7a:56:28:78:7b:
93:3a:70:87:f2:13:fe:75:5b:35:ad:1d:c9:2f:8b:8d:6e:ff:
c5:4a:23:8d:ed:1b:49:b9:75:64:33:bb:5b:87:d3:df:f9:df:
de:ee:41:a1:72:4f:dd:39:6e:78:5f:de:12:ca:f4:1e:26:af:
94:79:84:42:69:b5:90:66:6b:60:8c:10:ad:4e:be:f7:c8:3c:
42:13:d7:13:db:8a:29:97:79:5d:4c:a7:e5:19:1b:c7:62:06:
0d:f3:1a:7b:ba:3d:d9:09:9a:c6:47:c8:1a:1d:73:4a:a5:65:
f7:fc:34:a0:48:c9:47:cf:cb:5f:c4:ce:b6:6e:a8:79:75:04:
2a:ff:fc:3f:3a:8d:bc:2b:1a:8b:5d:2b:61:a9:4a:d0:a9:52:
d0:7c:5f:db:d7:33:d8:07:17:9e:9f:f6:65:dc:f7:30:ef:8f:
94:92:66:59:ca:74:ea:96:9c:1d:5d:f2:9d:78:7c:0f:36:c1:
02:6b:5a:3a:2c:72:ed:e0:7c:75:2e:20:2d:a6:4a:a5:47:15:
fc:46:07:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org