Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/9fVJcK3doD5upERbo9XZX_P1n3k.roa
File: 9fVJcK3doD5upERbo9XZX_P1n3k.roa (raw, json)
Hash identifier: Q57tnZXcUNc/FM3H1SDZEzKJ0j0PGSjtusj3Tm0qKIc=
Subject key identifier: F5:F5:49:70:AD:DD:A0:3E:6E:A4:44:5B:A3:D5:D9:5F:F3:F5:9F:79
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9fVJcK3doD5upERbo9XZX_P1n3k.roa
Signing time: Thu 15 Sep 2022 02:43:37 +0000
ROA not before: Thu 15 Sep 2022 02:43:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 112.105.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F5F54970ADDDA03E6EA4445BA3D5D95FF3F59F79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:46:16:9b:d8:71:6c:d9:7f:ee:24:be:20:
74:cc:f7:bc:8f:34:39:ec:09:54:d9:6b:6a:2b:4c:
ff:5c:f9:c3:0a:37:89:8c:e2:b2:b3:8e:df:dc:43:
54:02:65:88:c6:2e:fd:3a:f6:65:62:b5:09:4a:7a:
67:ac:e2:6d:34:b8:9f:fa:0c:85:f4:6f:b5:5b:06:
49:c8:25:f5:db:6a:7f:84:19:70:a3:50:5d:9c:fe:
5b:23:40:db:55:14:c3:7a:36:68:67:96:43:4e:6b:
e5:fb:0f:16:ec:eb:7b:05:d8:11:cc:c8:cb:9e:76:
ac:b3:72:75:dd:ae:de:67:31:8e:b2:84:30:12:90:
59:a6:46:0f:3c:bd:d3:80:10:6c:04:1a:ad:51:15:
88:8b:58:d0:ff:03:c5:09:c8:22:dd:24:a5:26:a4:
9e:90:a3:7a:9f:1f:ca:ed:75:3d:60:f9:03:8b:74:
03:52:ac:8b:4f:46:ec:8a:00:5a:97:b5:43:0d:6e:
38:2a:67:41:ef:9b:69:0e:df:ac:99:ce:ff:1d:85:
dc:df:c9:f7:58:18:bf:a9:a5:08:d9:c7:00:22:09:
cd:64:69:15:59:9a:99:ac:f7:cf:25:5e:8d:0a:3a:
5a:e8:ef:0e:6f:9f:e1:f5:65:9d:3f:50:de:48:9e:
38:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F5:49:70:AD:DD:A0:3E:6E:A4:44:5B:A3:D5:D9:5F:F3:F5:9F:79
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9fVJcK3doD5upERbo9XZX_P1n3k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.0.0/16
Signature Algorithm: sha256WithRSAEncryption
33:b7:92:9a:e5:0b:d6:78:15:39:99:0c:ce:06:4f:19:27:95:
80:c7:1a:a9:63:73:11:d9:71:da:a6:8c:4c:10:ab:57:58:4f:
84:00:93:10:c5:8f:2c:36:0c:02:a4:36:70:62:1f:ef:f9:a1:
1b:20:43:ac:c9:c5:a1:92:30:9b:5e:f9:e4:09:90:65:2d:df:
a2:c1:31:0e:b5:6b:37:03:6b:5a:7d:5b:d0:d7:c2:58:db:d0:
a6:d7:fe:c2:d4:74:7a:dd:02:21:5a:39:96:9a:cf:b3:35:97:
48:d9:3e:87:33:63:a7:1e:d5:7c:c2:03:d8:57:30:80:dd:15:
0b:cb:e2:dd:03:54:17:72:16:8e:28:50:dc:db:d9:55:5e:2b:
39:41:fe:fc:fb:b0:da:bb:06:5b:87:60:b6:da:91:4a:ed:30:
5b:00:04:68:ff:fe:98:d8:fd:d1:27:13:fd:59:42:47:e0:5e:
a2:44:ea:2c:59:7e:fe:6f:58:da:3d:3a:bf:11:6b:4c:7e:9e:
52:91:70:80:6f:c2:48:66:06:fb:d2:f5:42:29:36:4d:25:0c:
c7:e4:6e:e3:dc:59:bf:17:89:65:27:9c:43:89:ee:33:6a:c5:
49:9e:c5:d9:36:32:ac:18:c7:b7:b8:89:b2:95:65:05:6e:d7:
0a:10:cc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org