Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/FIqSndvk-R0RLXGsb1zD_KreQXg.roa
File: FIqSndvk-R0RLXGsb1zD_KreQXg.roa (raw, json)
Hash identifier: lTweVqRFQYeoM3X1WHLm38HpYfwOEPtkisvfL/8yw0g=
Subject key identifier: 14:8A:92:9D:DB:E4:F9:1D:11:2D:71:AC:6F:5C:C3:FC:AA:DE:41:78
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 11CA
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FIqSndvk-R0RLXGsb1zD_KreQXg.roa
Signing time: Fri 18 Aug 2023 01:49:02 +0000
ROA not before: Fri 18 Aug 2023 01:49:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 106.104.224.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4554 (0x11ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 18 01:49:02 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=148A929DDBE4F91D112D71AC6F5CC3FCAADE4178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b2:45:c1:5d:66:3d:03:d1:08:97:0e:7d:70:
7b:2c:f9:8f:db:f7:79:fc:17:eb:7e:ca:7c:3e:f0:
8d:b8:8b:c3:1c:f5:99:97:95:4f:7c:80:4a:e6:ec:
20:df:25:60:82:33:b4:23:5f:cd:84:dd:15:74:bc:
c9:bf:32:e4:7a:c1:f2:03:01:de:d4:6c:f4:06:72:
4c:e9:09:6e:ae:8f:e6:23:2e:49:3f:49:b6:e7:8c:
59:d1:25:94:2f:45:7b:d9:c4:1d:db:10:77:dd:7b:
0d:36:eb:24:3d:1f:0f:36:a8:96:bd:29:d1:39:ed:
13:fe:0e:51:91:18:cf:14:b6:1c:be:83:d8:bf:b1:
3d:7a:cf:4e:69:f2:35:3f:ca:54:06:8a:36:68:99:
57:fb:0e:bc:21:6c:1f:11:92:c2:d2:24:89:29:9f:
77:f0:55:8b:72:8f:70:b6:c7:7f:7f:db:ef:77:fc:
ef:f9:d6:f4:1a:1b:24:a4:03:23:15:7f:02:3a:d5:
83:56:24:84:87:2e:1b:96:dd:2b:3a:e3:5e:8c:80:
a3:00:93:c0:9f:b3:25:e6:96:9a:3b:01:f8:87:b1:
14:95:c4:8f:30:21:2a:4a:0d:a2:27:07:5b:10:02:
a0:64:6e:aa:18:40:ef:86:88:2b:6c:7e:68:7f:68:
58:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:8A:92:9D:DB:E4:F9:1D:11:2D:71:AC:6F:5C:C3:FC:AA:DE:41:78
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FIqSndvk-R0RLXGsb1zD_KreQXg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.104.224.0/22
Signature Algorithm: sha256WithRSAEncryption
00:51:c7:0b:b6:60:a1:fe:13:d7:2c:44:1e:3c:7d:e1:45:b5:
f0:17:d2:ad:67:4e:de:a8:42:1d:63:df:dd:1a:53:69:4b:71:
4b:bf:5b:a1:d3:5b:8f:dd:e4:f9:bb:37:c8:1d:d8:e0:eb:05:
3a:32:4b:5d:36:e1:11:5d:27:65:d6:c8:bd:81:3c:53:4d:06:
00:f4:49:f5:f6:e1:5d:6d:e3:ab:65:66:d8:dc:20:5b:9d:da:
1d:f8:4a:53:63:0a:81:60:85:47:24:da:ee:f9:67:b4:a4:08:
d0:21:62:7a:2b:76:78:1c:00:89:1c:87:74:d8:2d:45:60:40:
29:6d:16:08:3d:27:af:7e:48:65:84:b1:3c:f4:fb:b2:12:68:
6d:13:41:9f:e2:19:ab:85:7a:cd:03:80:fd:4b:08:b2:82:d5:
e7:1e:05:da:47:d8:a8:80:c1:a4:fe:15:7e:df:e4:71:5d:36:
50:2c:16:bd:5b:6d:e1:97:62:62:9b:7d:58:2c:b1:c1:04:73:
ca:73:ac:3c:be:c6:39:71:ab:b6:f2:a6:ab:83:fc:63:0c:69:
a4:6c:aa:6c:64:88:db:46:15:50:70:08:da:92:8f:88:7d:a5:
3c:e0:b2:70:5c:0b:28:33:f1:0a:82:4d:40:d1:cd:aa:0d:1b:
24:79:cb:39
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEcowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA4MTgw
MTQ5MDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDE0OEE5MjlEREJFNEY5
MUQxMTJENzFBQzZGNUNDM0ZDQUFERTQxNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3skXBXWY9A9EIlw59cHss+Y/b93n8F+t+ynw+8I24i8Mc9ZmX
lU98gErm7CDfJWCCM7QjX82E3RV0vMm/MuR6wfIDAd7UbPQGckzpCW6uj+YjLkk/
SbbnjFnRJZQvRXvZxB3bEHfdew026yQ9Hw82qJa9KdE57RP+DlGRGM8Uthy+g9i/
sT16z05p8jU/ylQGijZomVf7DrwhbB8RksLSJIkpn3fwVYtyj3C2x39/2+93/O/5
1vQaGySkAyMVfwI61YNWJISHLhuW3Ss6416MgKMAk8CfsyXmlpo7AfiHsRSVxI8w
ISpKDaInB1sQAqBkbqoYQO+GiCtsfmh/aFi/AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUFIqSndvk+R0RLXGsb1zD/KreQXgwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvRklxU25kdmstUjBSTFhHc2IxekRf
S3JlUVhnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmpo4DAN
BgkqhkiG9w0BAQsFAAOCAQEAAFHHC7Zgof4T1yxEHjx94UW18BfSrWdO3qhCHWPf
3RpTaUtxS79bodNbj93k+bs3yB3Y4OsFOjJLXTbhEV0nZdbIvYE8U00GAPRJ9fbh
XW3jq2Vm2NwgW53aHfhKU2MKgWCFRyTa7vlntKQI0CFieit2eBwAiRyHdNgtRWBA
KW0WCD0nr35IZYSxPPT7shJobRNBn+IZq4V6zQOA/UsIsoLV5x4F2kfYqIDBpP4V
ft/kcV02UCwWvVtt4ZdiYpt9WCyxwQRzynOsPL7GOXGrtvKmq4P8YwxppGyqbGSI
20YVUHAI2pKPiH2lPOCycFwLKDPxCoJNQNHNqg0bJHnLOQ==
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:15 2023 by rpki-client on console-fra.rpki-client.org