Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/CVERe68oRLVoBWuCt8GQrVGGZFk.roa
File: CVERe68oRLVoBWuCt8GQrVGGZFk.roa (raw, json)
Hash identifier: 0mbMogQydC6KsMOimJFAGi9XnIBMGummUiivo++BX1I=
Subject key identifier: 09:51:11:7B:AF:28:44:B5:68:05:6B:82:B7:C1:90:AD:51:86:64:59
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CVERe68oRLVoBWuCt8GQrVGGZFk.roa
Signing time: Thu 15 Sep 2022 02:42:53 +0000
ROA not before: Thu 15 Sep 2022 02:42:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 106.107.208.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0951117BAF2844B568056B82B7C190AD51866459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:8f:41:dd:a6:81:fb:98:c7:99:a1:0d:3f:
04:e1:a2:fd:0b:f2:cb:21:65:53:a8:4b:8b:82:ae:
c2:65:f1:ab:b2:8a:cc:bb:23:52:00:47:ed:3a:98:
da:bf:1e:47:35:f1:c3:df:28:f7:76:47:49:62:ca:
bd:fc:9c:ad:97:00:7a:8d:49:c2:0a:b2:7d:09:be:
b9:52:db:af:ca:1e:02:89:74:48:6d:03:6d:0f:e5:
a7:15:8c:ee:a8:04:44:05:1c:01:50:4d:d8:7c:7f:
b8:db:c9:e9:3a:04:47:53:a9:aa:10:eb:29:03:2c:
70:29:e9:9f:2d:68:6c:10:f7:88:93:64:c3:4a:b0:
dc:0d:18:9d:d5:46:ac:96:36:9e:f5:dc:db:8b:11:
39:74:3e:23:6d:c4:e3:8e:59:50:38:1e:96:87:e5:
de:ec:9e:bc:02:01:53:3d:f6:9e:7c:fd:31:52:bd:
41:67:c3:96:39:ce:d2:c4:50:98:87:78:1f:ad:cb:
c2:8c:a1:e5:8b:d4:a2:63:0b:f5:07:0a:3e:80:f9:
26:a9:6a:67:5e:0f:aa:a8:40:b7:7e:05:c7:17:34:
e8:b9:9c:02:b0:dd:10:d8:ce:9a:af:77:04:42:fb:
14:56:58:a3:78:6d:b4:9e:35:33:85:bd:a5:ea:65:
60:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:51:11:7B:AF:28:44:B5:68:05:6B:82:B7:C1:90:AD:51:86:64:59
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CVERe68oRLVoBWuCt8GQrVGGZFk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.208.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:d8:da:f0:9c:5d:e4:88:74:99:f7:32:7f:3b:c2:37:bd:32:
c1:9b:b1:12:dc:ca:66:c5:82:a6:d4:ed:57:b3:e7:12:99:4b:
06:ad:1f:db:9e:0a:c8:10:91:eb:33:6a:ea:d5:12:85:4b:89:
7a:12:b2:d1:5f:4d:44:7a:6b:d8:b0:8a:96:dd:16:ef:82:a0:
ab:27:6e:96:9f:c9:9e:ff:fb:99:52:75:3b:ff:fd:38:1a:2e:
12:8a:bd:1c:95:f6:f8:01:72:3d:04:3c:aa:92:af:6a:10:7f:
a4:3e:e6:dc:9c:fc:8f:51:9a:dd:3b:05:ad:05:0a:29:8a:b0:
aa:89:15:81:64:84:90:21:51:f5:be:d9:6c:50:f5:80:f6:d3:
71:31:6a:60:96:1f:47:72:ff:3a:c5:6c:ff:e3:14:82:59:34:
b1:9d:0b:9e:d2:b2:75:8a:da:e3:ac:7d:ca:72:8f:dd:f4:4a:
e3:04:8a:74:7f:a6:d2:0e:b7:4e:0b:ac:01:7d:27:5e:30:78:
09:8b:38:e6:79:ff:5c:07:ff:69:9e:69:b4:6b:b3:62:e7:4d:
d2:c5:2e:d0:92:e3:c0:15:49:c4:fb:27:60:ce:6a:e0:0a:fe:
c7:16:df:cb:9f:47:bd:54:6e:da:e9:2c:6e:3c:80:6d:59:23:
46:a9:bf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org