Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/KPH37ang39kpU06UunA4LW3uEd0.roa
File: KPH37ang39kpU06UunA4LW3uEd0.roa (raw, json)
Hash identifier: vyO2vJeqUdVVTaiOrNGXZEEDIR3g688A27nlQNjugus=
Subject key identifier: 28:F1:F7:ED:A9:E0:DF:D9:29:53:4E:94:BA:70:38:2D:6D:EE:11:DD
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/KPH37ang39kpU06UunA4LW3uEd0.roa
Signing time: Thu 15 Sep 2022 02:42:59 +0000
ROA not before: Thu 15 Sep 2022 02:42:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 112.105.56.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=28F1F7EDA9E0DFD929534E94BA70382D6DEE11DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fd:be:59:be:87:cc:2d:cd:e2:a1:cf:62:cc:
1a:ee:49:b2:9c:35:b1:f3:00:6c:4c:b8:6b:fc:89:
cd:fe:94:79:54:41:db:e7:49:1a:b2:1a:cf:eb:ce:
31:33:81:23:c9:fe:7d:c8:59:ef:aa:74:6d:3f:9f:
d5:05:77:ac:8c:a7:98:71:71:d5:7c:c5:0e:79:cf:
b7:ba:6b:8e:81:9d:3d:73:7c:36:67:ed:a6:e9:5a:
bc:7b:9a:9a:e5:83:92:ea:e5:85:e7:e9:54:7f:0a:
e5:b8:91:18:f4:c3:2e:74:82:c6:a4:75:ac:a6:0e:
d4:00:09:35:8f:92:f0:39:da:c9:91:dd:be:25:42:
30:e8:1d:6e:cb:17:78:39:31:93:de:71:a3:d3:78:
d7:d2:a7:20:89:61:d5:51:d6:cf:a1:22:73:1e:d3:
09:2d:6a:e0:30:05:54:f4:7a:f1:1d:18:4e:dd:c9:
de:81:2d:93:82:d9:7d:94:ce:30:7b:97:43:5f:f7:
38:90:75:0e:24:c7:a6:4d:71:7b:7a:63:bb:27:70:
b3:35:78:f1:77:b9:9f:a2:b8:31:fd:ac:e2:de:1d:
d0:3e:5b:2a:23:75:1f:ad:d7:bc:2a:7b:d5:63:68:
0a:9a:09:02:2a:6f:ab:fc:cf:ea:db:29:fd:06:cd:
d5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F1:F7:ED:A9:E0:DF:D9:29:53:4E:94:BA:70:38:2D:6D:EE:11:DD
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/KPH37ang39kpU06UunA4LW3uEd0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.56.0/22
Signature Algorithm: sha256WithRSAEncryption
50:fd:64:cc:6c:03:e6:7b:3b:5d:7b:75:61:c3:b6:b2:df:a5:
d1:06:ac:47:13:01:e5:ae:be:fd:4d:3b:48:54:4e:b2:a0:8b:
14:af:55:fc:59:98:ec:81:5f:ad:52:e4:1b:8a:44:7e:6f:fd:
8e:c0:4a:67:f6:6d:92:42:df:29:18:69:07:4d:9f:cc:a4:79:
8d:1c:4b:8e:fb:da:ae:a5:68:73:a2:65:45:ef:db:f9:5b:ed:
7a:97:0d:0c:60:e2:ec:f3:19:44:aa:af:c8:ea:b2:77:26:7d:
8f:e8:d8:91:20:0d:96:8c:33:46:37:eb:89:33:4d:c5:ae:fa:
ff:d5:7a:64:08:ea:1c:a2:ef:55:b9:95:30:ba:87:bc:f2:17:
46:ed:45:5b:21:89:1e:67:70:00:9f:bc:18:0f:38:cf:45:9f:
35:34:6a:33:bb:6d:a8:e5:4e:b3:38:6a:4a:85:bf:68:90:83:
dc:72:41:3b:a1:75:11:da:87:99:10:17:a6:b3:53:8a:05:5f:
db:04:bc:3f:c1:10:c3:79:0e:c4:85:1c:8e:06:32:78:6e:e8:
44:4b:c1:27:4f:d0:39:21:0f:ad:b3:98:f2:a6:d6:86:ef:45:
9b:54:4a:98:ed:9c:8a:1a:ed:d3:c7:5a:12:1d:d5:af:f7:23:
c7:c9:03:a0
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQyNTlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDI4RjFGN0VEQTlFMERG
RDkyOTUzNEU5NEJBNzAzODJENkRFRTExREQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDu/b5ZvofMLc3ioc9izBruSbKcNbHzAGxMuGv8ic3+lHlUQdvn
SRqyGs/rzjEzgSPJ/n3IWe+qdG0/n9UFd6yMp5hxcdV8xQ55z7e6a46BnT1zfDZn
7abpWrx7mprlg5Lq5YXn6VR/CuW4kRj0wy50gsakdaymDtQACTWPkvA52smR3b4l
QjDoHW7LF3g5MZPecaPTeNfSpyCJYdVR1s+hInMe0wktauAwBVT0evEdGE7dyd6B
LZOC2X2UzjB7l0Nf9ziQdQ4kx6ZNcXt6Y7sncLM1ePF3uZ+iuDH9rOLeHdA+Wyoj
dR+t17wqe9VjaAqaCQIqb6v8z+rbKf0GzdX7AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUKPH37ang39kpU06UunA4LW3uEd0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvS1BIMzdhbmczOWtwVTA2VXVuQTRM
VzN1RWQwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnBpODAN
BgkqhkiG9w0BAQsFAAOCAQEAUP1kzGwD5ns7XXt1YcO2st+l0QasRxMB5a6+/U07
SFROsqCLFK9V/FmY7IFfrVLkG4pEfm/9jsBKZ/ZtkkLfKRhpB02fzKR5jRxLjvva
rqVoc6JlRe/b+VvtepcNDGDi7PMZRKqvyOqydyZ9j+jYkSANlowzRjfriTNNxa76
/9V6ZAjqHKLvVbmVMLqHvPIXRu1FWyGJHmdwAJ+8GA84z0WfNTRqM7ttqOVOszhq
SoW/aJCD3HJBO6F1EdqHmRAXprNTigVf2wS8P8EQw3kOxIUcjgYyeG7oREvBJ0/Q
OSEPrbOY8qbWhu9Fm1RKmO2cihrt08daEh3Vr/cjx8kDoA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-fra.rpki-client.org