Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/DVe9OB5gO4LdLZDLaNuKtAF58rU.roa
File: DVe9OB5gO4LdLZDLaNuKtAF58rU.roa (raw, json)
Hash identifier: KgypeJ6ozb40f9eflw2ifpDZ1RUgyYyvf2INse5DEdA=
Subject key identifier: 0D:57:BD:38:1E:60:3B:82:DD:2D:90:CB:68:DB:8A:B4:01:79:F2:B5
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10F3
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/DVe9OB5gO4LdLZDLaNuKtAF58rU.roa
Signing time: Wed 01 Feb 2023 10:29:15 +0000
ROA not before: Wed 01 Feb 2023 10:29:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9674
IP address blocks: 106.107.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4339 (0x10f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:15 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0D57BD381E603B82DD2D90CB68DB8AB40179F2B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:7f:52:a4:17:d0:30:ec:c1:02:be:1c:06:
8a:53:a8:2a:9d:0d:34:67:90:5c:1f:53:f7:25:19:
b1:3b:45:1e:93:cc:85:ba:78:a9:a0:a2:9b:28:a7:
f5:f7:5e:a8:11:0d:cc:25:f0:02:84:31:cd:6b:6e:
9b:df:19:26:cd:38:6c:64:57:cb:df:81:61:0e:df:
5b:fc:1d:ea:2c:6c:91:62:58:28:e8:35:1e:6e:9b:
d3:84:f9:18:08:29:03:4d:bc:bd:fd:fa:c0:49:7c:
17:df:fd:20:eb:e5:63:74:39:7a:1e:7b:a8:77:f8:
21:c0:88:35:07:c0:04:91:6f:d7:08:9f:10:ad:9d:
09:e1:fa:c2:c9:85:01:04:6f:68:ef:3e:8b:41:1c:
d5:64:90:12:01:7b:09:fb:e5:89:0c:d8:b9:19:d5:
4d:7b:be:9b:ae:06:32:ab:74:2f:44:a7:a9:ad:89:
a2:f5:e2:a8:f3:25:4b:c3:ae:88:ff:38:bb:9f:06:
61:4c:80:8b:80:97:d8:2d:69:5c:64:b4:df:15:4d:
29:31:c1:43:5a:43:0c:bb:35:d8:52:39:2d:57:7c:
0f:29:ab:89:8d:14:27:6d:31:70:14:73:de:da:f2:
48:39:d2:09:b9:08:b8:b3:0c:fb:d8:1d:29:4f:ec:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:57:BD:38:1E:60:3B:82:DD:2D:90:CB:68:DB:8A:B4:01:79:F2:B5
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/DVe9OB5gO4LdLZDLaNuKtAF58rU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:59:c8:f0:ef:46:91:a4:08:e0:4a:88:c1:a9:59:f0:48:3e:
0a:b3:cc:b7:b0:45:ae:c6:37:b4:6d:c7:c1:bf:40:13:ca:e5:
24:d2:20:ff:45:0b:79:5c:da:99:f3:bb:c2:8b:38:9e:1f:4a:
be:7c:79:1e:38:f5:b9:7f:8a:12:72:28:bc:63:70:af:0b:37:
59:98:5f:d2:d6:cc:e9:f5:7f:ce:d6:e6:90:30:59:f7:31:c5:
ad:13:8b:d4:61:0f:55:a4:64:3a:c3:aa:5e:88:c7:0b:78:83:
74:17:7d:77:7b:d8:14:eb:09:c2:c1:20:28:59:57:55:96:2e:
92:78:78:96:a6:e1:91:27:30:18:72:d3:56:41:46:49:88:51:
f0:fe:94:b3:5e:a1:1d:eb:cc:84:e9:d6:49:bd:c0:dd:84:75:
55:c4:a2:be:81:f3:ac:8b:f6:de:1b:bf:17:b3:ce:02:b7:17:
7b:1e:a7:cf:bc:88:e6:e1:f7:16:e6:38:5d:d5:dd:e1:f9:4b:
3e:ba:b5:3c:e7:36:a2:88:99:7b:6a:35:a4:da:59:1a:e7:42:
66:4b:07:de:29:6c:d4:71:47:b4:77:90:16:08:ba:30:51:2d:
7f:89:2c:b4:65:6b:25:c2:e2:5c:cc:df:c6:7d:09:76:02:86:
00:da:3c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:50 2023 by rpki-client on console-ams.rpki-client.org