Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/FwZDkRK-W1VQ_YqBvi5SHscLb6o.roa
File: FwZDkRK-W1VQ_YqBvi5SHscLb6o.roa (raw, json)
Hash identifier: f1U6ZoAR2zGU43shZDci87PEUPf4FNNZYeyju+lTSMk=
Subject key identifier: 17:06:43:91:12:BE:5B:55:50:FD:8A:81:BE:2E:52:1E:C7:0B:6F:AA
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FwZDkRK-W1VQ_YqBvi5SHscLb6o.roa
Signing time: Thu 15 Sep 2022 02:43:04 +0000
ROA not before: Thu 15 Sep 2022 02:43:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 112.105.32.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1706439112BE5B5550FD8A81BE2E521EC70B6FAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:93:31:59:bd:3d:c2:9f:0b:15:fe:e3:e6:c6:
a6:b6:6b:68:54:c1:ec:22:42:36:fa:2c:69:14:39:
b9:10:96:16:3f:23:05:9e:3f:dd:75:d8:84:a4:c5:
ce:9e:a7:90:38:d9:2b:bb:e2:aa:5c:6a:10:b5:d9:
55:c4:bf:35:6e:86:83:be:e8:5f:1b:8a:f2:15:a2:
14:c7:2e:e7:5a:65:a0:d0:f0:53:63:d7:c2:52:8f:
98:0a:6d:24:99:0e:14:ae:6f:f0:d4:4f:01:3e:85:
47:db:64:75:21:e4:07:11:f8:6d:8b:38:84:c5:cc:
55:37:7c:36:a1:0b:21:c6:36:b8:3a:1b:ba:98:e9:
eb:ab:b3:c1:cf:14:42:4f:d8:4d:fb:81:47:44:91:
38:9e:90:3d:a0:08:2d:e1:10:21:85:e2:e2:12:de:
c6:0f:47:ed:f1:ee:1e:3b:75:40:21:9d:b3:49:f5:
54:7d:6d:cf:60:21:61:44:34:d0:8a:8e:8b:c3:3a:
10:54:43:c4:f0:97:fa:e2:44:66:0d:52:ae:cb:4f:
f9:89:50:da:25:dd:b3:95:9a:17:35:56:68:81:f5:
a0:fd:d2:a3:14:5d:9d:68:f0:57:93:ce:90:a8:00:
5f:ed:c7:70:a6:e9:56:58:64:8f:5c:03:d1:44:6d:
63:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:06:43:91:12:BE:5B:55:50:FD:8A:81:BE:2E:52:1E:C7:0B:6F:AA
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FwZDkRK-W1VQ_YqBvi5SHscLb6o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.32.0/19
Signature Algorithm: sha256WithRSAEncryption
93:e2:90:9f:90:85:98:ef:f9:3f:0d:1c:48:5c:48:98:1c:f3:
e1:1e:b4:78:68:18:f6:7d:30:07:4a:47:4a:c1:62:cc:2d:99:
3f:28:bd:67:80:b4:85:37:97:73:2a:57:2a:da:23:ae:cd:e0:
b7:9c:fd:c4:96:7f:46:74:c0:cb:02:a2:c7:91:90:a4:9f:63:
bb:f9:83:ba:5c:d7:89:c4:28:26:80:81:8e:8a:75:a4:e7:32:
44:09:74:e9:55:9f:4e:8a:80:49:ab:5c:13:51:47:7b:9d:07:
0f:cc:b0:c2:70:b2:44:4f:54:25:98:57:7f:5a:39:dc:a4:40:
23:79:39:6a:0c:8a:6a:38:76:b8:e5:cb:eb:2f:dc:a8:b4:d0:
6a:0d:a1:8d:ef:93:d5:e8:0a:69:61:8d:85:99:7c:59:0d:a6:
50:c2:69:c6:7d:77:8b:8f:4c:f6:77:0d:1d:ad:dc:c2:91:52:
2f:cd:5c:65:bd:cb:9c:24:db:71:80:71:15:04:a0:b2:46:d6:
cc:7c:59:59:13:22:8c:f5:a9:87:b9:a9:1f:39:1f:a3:5b:a7:
4c:e3:a5:a8:d1:d4:2e:ee:48:d2:a9:0a:8b:c0:4f:6b:de:6d:
2c:d5:97:19:ff:63:30:29:c9:cb:d1:37:05:c5:50:a8:c2:bf:
d5:f5:55:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org