Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/BOADE9UV9K2il7vPltb70whfkxk.roa
File: BOADE9UV9K2il7vPltb70whfkxk.roa (raw, json)
Hash identifier: rbWeqdXBIlWbVUN/KlbId1LvTHbx9/3W0bG8LdR8KOc=
Subject key identifier: 04:E0:03:13:D5:15:F4:AD:A2:97:BB:CF:96:D6:FB:D3:08:5F:93:19
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BOADE9UV9K2il7vPltb70whfkxk.roa
Signing time: Thu 15 Sep 2022 02:43:03 +0000
ROA not before: Thu 15 Sep 2022 02:43:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 106.107.128.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=04E00313D515F4ADA297BBCF96D6FBD3085F9319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:17:ff:25:bd:61:0f:0f:12:d5:2c:a6:3c:
90:30:2b:e3:d6:8d:9c:fc:16:c6:4d:ba:1e:23:84:
3c:34:6a:e4:51:13:07:a0:ea:fb:36:7d:4a:bf:c4:
61:86:1a:05:a3:57:ee:cb:e4:90:f6:0d:a7:2b:0b:
a5:21:ec:21:5e:28:36:9c:7b:6d:14:60:5d:75:dd:
f2:f3:e0:5d:f7:c1:7e:af:36:d3:53:7e:de:61:19:
ae:22:0b:68:9f:b2:66:d4:8a:de:9b:d2:54:e4:c6:
2a:10:e1:75:a1:49:6f:ab:c0:3b:dc:97:34:19:5c:
29:42:0d:72:9b:20:21:c8:73:38:df:4b:ae:db:aa:
fe:6a:5f:ea:b4:72:72:ac:c7:47:bf:36:ad:b5:0d:
d0:14:cd:98:a8:7f:8e:d7:29:91:de:c9:a0:ce:9c:
50:ca:e5:5e:0f:a7:23:6b:9b:31:8d:82:e5:47:82:
27:63:4e:6e:55:50:8e:5a:1b:6b:4f:06:76:86:aa:
67:b1:84:32:9f:55:e2:93:fd:a1:32:b5:89:06:52:
b1:99:8a:8a:12:db:fc:45:99:22:d6:55:bf:5d:a9:
9d:38:68:bf:20:95:3f:96:d3:15:7c:05:56:f8:ed:
49:a0:d7:37:4c:e3:58:50:66:c0:a4:b5:dc:15:22:
e7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E0:03:13:D5:15:F4:AD:A2:97:BB:CF:96:D6:FB:D3:08:5F:93:19
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BOADE9UV9K2il7vPltb70whfkxk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.128.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:0a:54:96:04:96:32:03:0b:fb:9f:9c:8a:6b:e4:60:e2:53:
31:76:89:8d:55:29:55:9c:f9:56:81:fa:ad:93:7e:7b:f4:4b:
36:c6:0b:1c:be:e3:29:6e:34:61:36:da:83:0d:d5:cb:1a:e7:
75:8e:47:4d:ad:69:e6:44:0a:68:95:eb:78:f8:4b:5e:42:e6:
39:29:a0:f2:47:df:6c:d4:88:9b:6e:83:7f:2c:11:6c:99:ea:
77:47:a3:5f:7f:cf:7e:7f:61:e7:3e:44:4b:98:d0:9e:ab:ee:
3a:6f:d5:01:34:88:d5:65:8b:68:1f:07:c4:b9:d0:3d:6b:83:
31:0f:39:98:2b:bf:e2:04:4a:fe:7a:18:f4:77:25:b8:4c:41:
83:4c:e1:8c:22:bc:00:b9:b2:85:01:43:14:ff:2b:2f:11:fc:
58:34:12:1b:c0:97:f1:cb:96:c2:af:0c:cc:75:eb:54:c6:58:
81:f8:9b:f5:53:b9:16:d6:bd:3c:e4:18:21:74:2b:f8:db:77:
d2:d9:84:a7:e8:f1:75:44:bb:98:68:5b:0f:f3:23:a9:7d:1c:
d7:ac:37:28:4b:94:82:4d:f4:cf:58:9d:a9:78:ed:9d:ed:e1:
6a:e2:8f:ef:6f:ce:5b:30:62:38:23:1f:74:99:26:f1:72:42:
a7:a4:f3:bc
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzMDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDA0RTAwMzEzRDUxNUY0
QURBMjk3QkJDRjk2RDZGQkQzMDg1RjkzMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCu3hf/Jb1hDw8S1SymPJAwK+PWjZz8FsZNuh4jhDw0auRREweg
6vs2fUq/xGGGGgWjV+7L5JD2DacrC6Uh7CFeKDace20UYF113fLz4F33wX6vNtNT
ft5hGa4iC2ifsmbUit6b0lTkxioQ4XWhSW+rwDvclzQZXClCDXKbICHIczjfS67b
qv5qX+q0cnKsx0e/Nq21DdAUzZiof47XKZHeyaDOnFDK5V4PpyNrmzGNguVHgidj
Tm5VUI5aG2tPBnaGqmexhDKfVeKT/aEytYkGUrGZiooS2/xFmSLWVb9dqZ04aL8g
lT+W0xV8BVb47Umg1zdM41hQZsCktdwVIucFAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUBOADE9UV9K2il7vPltb70whfkxkwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQk9BREU5VVY5SzJpbDd2UGx0Yjcw
d2hma3hrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBGprgDAN
BgkqhkiG9w0BAQsFAAOCAQEAfwpUlgSWMgML+5+cimvkYOJTMXaJjVUpVZz5VoH6
rZN+e/RLNsYLHL7jKW40YTbagw3VyxrndY5HTa1p5kQKaJXrePhLXkLmOSmg8kff
bNSIm26DfywRbJnqd0ejX3/Pfn9h5z5ES5jQnqvuOm/VATSI1WWLaB8HxLnQPWuD
MQ85mCu/4gRK/noY9HcluExBg0zhjCK8ALmyhQFDFP8rLxH8WDQSG8CX8cuWwq8M
zHXrVMZYgfib9VO5Fta9POQYIXQr+Nt30tmEp+jxdUS7mGhbD/MjqX0c16w3KEuU
gk30z1idqXjtne3hauKP72/OWzBiOCMfdJkm8XJCp6TzvA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-fra.rpki-client.org