Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Djp2oSNChHJQ5MJ31jSQ52CqMLg.roa
File: Djp2oSNChHJQ5MJ31jSQ52CqMLg.roa (raw, json)
Hash identifier: JLRNBHlcSQMhpkDUt3PKFg7M5O/czS5cX4u7XvbOEjY=
Subject key identifier: 0E:3A:76:A1:23:42:84:72:50:E4:C2:77:D6:34:90:E7:60:AA:30:B8
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Djp2oSNChHJQ5MJ31jSQ52CqMLg.roa
Signing time: Thu 15 Sep 2022 02:43:36 +0000
ROA not before: Thu 15 Sep 2022 02:43:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 112.105.128.0/17 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0E3A76A12342847250E4C277D63490E760AA30B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:93:5a:e3:af:c0:03:f5:a9:24:85:4c:e6:8f:
91:ef:9d:a4:b5:8e:c9:98:36:11:a1:48:1e:a7:ca:
50:93:12:7c:31:c3:f5:01:30:44:d9:e0:38:3b:23:
20:53:28:88:ed:90:02:83:e4:7f:51:35:bf:d8:1d:
9e:a9:4f:de:1d:a9:b7:2e:40:63:ae:9b:6c:b2:93:
a3:85:86:e8:8f:fd:d0:2e:6a:48:e7:49:90:d7:dc:
7e:46:9e:73:ed:5f:2f:98:df:8f:77:27:bc:ba:a8:
bb:d5:cf:0b:31:f5:e9:b3:a1:2f:ae:7d:de:09:57:
83:10:93:d1:01:47:b7:0d:a9:8d:77:f7:a6:ca:80:
ae:19:f8:ff:95:34:74:92:d4:b9:54:69:53:50:87:
55:32:79:b7:5a:30:8c:e4:19:ad:66:ba:8f:75:c6:
b9:c5:e7:fb:b1:ea:bf:06:51:0d:7a:00:cc:4f:30:
03:41:21:79:8e:c0:9a:f2:0e:46:8f:f3:ad:20:c9:
ba:80:5e:26:e3:a3:7b:1c:07:d1:7e:4d:96:b1:54:
a4:29:3a:02:1f:34:9f:2f:96:bd:50:5d:25:36:52:
77:28:84:05:7f:7e:da:e2:3d:c4:fa:25:c0:09:4f:
7f:55:ab:fc:92:dc:59:c2:f9:e0:a5:99:78:38:d5:
26:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3A:76:A1:23:42:84:72:50:E4:C2:77:D6:34:90:E7:60:AA:30:B8
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Djp2oSNChHJQ5MJ31jSQ52CqMLg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.128.0/17
Signature Algorithm: sha256WithRSAEncryption
8e:08:f7:11:cc:f9:84:b1:42:f0:e6:9d:53:73:b0:2d:5b:05:
06:0b:1b:5e:94:c2:83:32:a6:81:01:9a:83:b1:41:82:73:9e:
45:44:bc:24:36:aa:c0:d4:a4:68:ee:3c:25:25:53:3f:7d:bf:
8f:d4:b1:af:cc:b9:b2:15:ab:d9:e6:11:d2:26:11:1b:d8:6a:
6c:42:a7:d5:b1:f8:92:d5:7a:43:10:f8:f9:21:d8:41:b4:b3:
60:36:a3:30:f1:26:4a:ae:0a:f9:94:58:dd:d7:03:ce:15:5c:
a9:18:b7:17:3a:4c:a7:f9:ff:6a:0a:91:2d:e2:d9:45:d6:ae:
40:e9:11:ab:46:77:4f:10:84:22:7d:19:7e:74:85:92:7a:92:
a8:87:78:f7:08:d7:dd:6b:ca:9b:f5:91:6b:60:76:70:9a:8f:
1f:4c:f1:ff:9e:df:62:98:c2:9e:2d:a2:ca:b6:ab:a9:cd:4c:
f2:dd:3d:01:d5:25:8c:64:7c:e5:98:66:49:73:3a:87:80:8c:
82:e7:fe:01:85:cc:47:3b:7b:da:35:e1:6c:b0:f6:eb:20:cd:
31:8b:1f:99:96:aa:63:10:29:2d:5f:79:e8:5a:5a:a3:35:c2:
26:1a:36:5f:e3:ce:2a:51:57:18:6c:70:2f:c8:aa:db:be:fd:
ee:78:61:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org