Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/9hwMWLwToJhSKpZdgGy5vR8UFDI.roa
File: 9hwMWLwToJhSKpZdgGy5vR8UFDI.roa (raw, json)
Hash identifier: 9887dHR1fJpljJBkxtCRaKzZ1qoAC8VSnsRgphXUZLg=
Subject key identifier: F6:1C:0C:58:BC:13:A0:98:52:2A:96:5D:80:6C:B9:BD:1F:14:14:32
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9hwMWLwToJhSKpZdgGy5vR8UFDI.roa
Signing time: Thu 15 Sep 2022 02:43:16 +0000
ROA not before: Thu 15 Sep 2022 02:43:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 112.105.0.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F61C0C58BC13A098522A965D806CB9BD1F141432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:df:d1:2d:29:67:ba:33:8b:66:e3:07:b2:
d2:df:6d:45:1a:14:59:a1:f0:bc:3e:7f:df:83:05:
9b:33:5b:5e:60:68:fa:b6:9c:36:ad:ef:50:fd:8b:
6e:c6:f5:40:e1:a6:41:bc:e5:16:12:77:5a:97:14:
a5:ed:bf:90:87:dd:ac:7c:de:70:5c:f5:b9:98:5b:
78:71:a5:ec:7e:fd:c6:d0:3f:6d:a2:de:a6:a1:eb:
a8:52:4a:a0:af:cd:0a:39:20:71:34:18:43:7e:08:
4a:b7:a3:eb:fa:1a:b6:fb:f2:05:57:49:98:c1:22:
1f:a4:b6:70:8a:dd:9f:e3:ca:67:92:51:e8:84:23:
fc:ff:bb:a2:10:8b:0a:70:3b:fd:3b:2e:e3:c6:84:
32:60:90:61:12:18:8b:02:20:45:73:9c:87:65:4f:
8b:a1:d1:1c:47:9f:9d:91:4b:7c:03:6d:05:5c:e7:
2e:74:2f:1a:a1:1a:28:12:07:21:0c:a3:e2:72:4d:
06:99:a8:0f:eb:cd:3e:f5:7a:36:ff:cc:43:bb:dd:
76:9f:88:3e:1d:74:e7:d0:03:32:ce:3e:ed:23:2c:
9a:64:0b:36:b0:bb:60:20:1e:06:69:5f:46:12:74:
d2:fb:dd:1c:8c:1c:31:ee:c6:0a:cd:e3:42:88:d9:
f9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1C:0C:58:BC:13:A0:98:52:2A:96:5D:80:6C:B9:BD:1F:14:14:32
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9hwMWLwToJhSKpZdgGy5vR8UFDI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4f:b9:92:89:0e:91:cc:da:c3:7a:d2:73:fa:d2:6e:52:c7:39:
32:99:b8:d9:49:ae:8c:e0:8a:8d:9c:b3:10:c1:3d:35:84:1b:
18:e0:a0:ab:32:aa:cf:c5:7b:9f:84:e1:02:49:46:7c:a9:99:
15:86:c5:96:47:fa:a6:12:67:36:96:d6:29:89:d2:6d:81:93:
8f:9d:a9:b4:f4:b0:8a:91:9e:ff:ef:ba:51:6c:81:19:68:1e:
1a:46:20:dc:dd:18:fb:cd:e4:49:66:06:8f:7f:12:0c:3d:8c:
73:ff:98:3c:5c:1a:dc:28:a7:af:98:d9:31:83:b9:eb:0b:db:
17:c2:f1:47:55:f6:94:d6:50:37:9e:bf:2f:00:e2:34:62:6d:
ea:72:0a:ae:eb:fa:34:54:b5:7c:93:8f:95:62:ca:1e:02:da:
66:38:03:83:52:0f:a9:c9:60:bd:cc:f3:b7:5a:e3:c1:f4:65:
37:32:2c:d5:b2:98:3a:8b:8e:7f:8a:eb:2f:fc:6b:e6:ef:91:
48:17:5f:0b:9a:01:17:eb:9e:14:0a:82:ed:5e:27:e8:a1:5d:
22:51:c9:40:fe:e2:b1:78:d0:de:17:2b:8e:3a:10:e6:c5:59:
05:e0:56:e6:47:bc:dc:9d:e5:8d:1e:8f:6c:30:7c:e9:1f:3b:
eb:8c:d6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org