Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/DKvs8NoQV4LY5IzeTPy2lUKUYp8.roa
File: DKvs8NoQV4LY5IzeTPy2lUKUYp8.roa (raw, json)
Hash identifier: jAaGotghzgFmDFeXXtiKh46Faw+z/Dq67UBhnhSlvVk=
Subject key identifier: 0C:AB:EC:F0:DA:10:57:82:D8:E4:8C:DE:4C:FC:B6:95:42:94:62:9F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/DKvs8NoQV4LY5IzeTPy2lUKUYp8.roa
Signing time: Thu 15 Sep 2022 02:43:53 +0000
ROA not before: Thu 15 Sep 2022 02:43:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 106.105.24.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0CABECF0DA105782D8E48CDE4CFCB6954294629F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:ee:49:eb:3b:45:52:3a:c1:d7:c6:fb:a8:f4:
d2:38:4d:9f:49:48:ef:09:97:e2:3a:22:0a:7c:2d:
84:f5:40:29:cd:cf:f3:cd:10:c2:28:e3:e6:00:40:
cb:96:12:43:36:d3:8a:b7:b2:ed:a3:c6:f1:6c:21:
4a:3b:e1:a3:01:e4:65:31:c9:c4:bd:f2:95:ef:85:
00:e5:20:bc:2d:48:16:bf:89:6e:d5:69:c8:49:07:
39:a6:e2:78:b1:8c:ab:7e:dc:f0:8a:6f:68:c4:1c:
0c:0a:03:71:c2:bf:e8:f3:c2:e4:01:23:3c:72:86:
00:c7:d4:a1:a5:06:35:5b:50:e5:3a:63:be:c2:88:
a8:39:8a:ca:71:e4:18:c5:09:e4:fd:1b:17:2a:ac:
bb:12:20:43:12:27:5a:4a:f2:8b:47:90:da:b8:2e:
cd:3c:54:e6:ca:78:33:57:2b:6d:91:63:f7:56:3a:
40:99:06:ad:68:14:c4:f0:6d:c1:52:db:a5:85:a5:
6a:12:cd:f3:0a:42:b2:15:42:22:af:3d:81:42:37:
95:0f:29:38:7d:3e:a4:c1:2c:ae:dc:6a:e6:73:6d:
b4:11:35:a8:61:de:9a:2d:0b:b2:04:01:c7:6b:0c:
12:6f:16:50:2e:b2:e4:02:8e:05:ba:46:ca:da:eb:
eb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AB:EC:F0:DA:10:57:82:D8:E4:8C:DE:4C:FC:B6:95:42:94:62:9F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/DKvs8NoQV4LY5IzeTPy2lUKUYp8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.24.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:a7:1f:6f:0c:53:6b:93:00:05:19:3e:9b:9d:01:57:3c:31:
78:5b:4a:cd:10:89:d6:24:ef:7f:93:fc:75:92:b7:af:c9:0a:
0c:55:73:01:0b:f2:69:de:fc:b5:59:4e:cd:c5:4d:46:ec:c6:
ba:29:4c:a0:8d:82:50:d3:1a:a7:37:06:83:4a:14:8d:21:83:
d8:20:48:58:7a:6c:47:1a:65:4d:7c:8d:eb:d2:6e:3a:f6:88:
cd:31:84:3a:7e:15:66:b4:a5:c2:df:41:32:07:46:d6:3c:bd:
fb:ce:80:f7:84:13:ac:bc:12:70:29:39:3f:b4:39:13:da:cb:
bd:1a:3b:61:9c:6f:a5:0e:da:72:81:5f:20:f3:81:26:62:39:
7c:f2:a0:e1:7a:52:3c:ad:28:24:ab:88:0f:3f:04:37:7f:d3:
79:c0:7b:56:6e:95:eb:bb:7a:ca:67:5c:9d:6d:bc:7b:1c:50:
68:65:2e:4f:d4:24:17:05:74:29:db:19:68:76:ae:cf:d8:87:
7a:61:1e:ad:4f:0a:b4:f9:a4:03:6a:e1:ad:12:c7:24:fa:d6:
a1:8f:0f:be:a0:83:39:38:11:e7:1f:92:11:56:58:52:6d:b7:
c3:e5:db:9b:db:95:2e:c3:6c:16:c6:60:13:aa:cf:bf:24:45:
13:75:23:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org