Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/M0jq4_YsJMwFtuEpFNoDKlVlT2A.roa
File: M0jq4_YsJMwFtuEpFNoDKlVlT2A.roa (raw, json)
Hash identifier: 2jMfkGcbJnjpxv26lgzwVsmFJN4OXhgKGVECTu5Dr2k=
Subject key identifier: 33:48:EA:E3:F6:2C:24:CC:05:B6:E1:29:14:DA:03:2A:55:65:4F:60
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/M0jq4_YsJMwFtuEpFNoDKlVlT2A.roa
Signing time: Thu 15 Sep 2022 02:43:06 +0000
ROA not before: Thu 15 Sep 2022 02:43:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 106.105.104.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3348EAE3F62C24CC05B6E12914DA032A55654F60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:90:d4:5a:7a:ee:9f:e1:80:e9:69:d5:f8:9a:
c8:16:a9:66:ff:06:74:f3:ae:a3:77:a2:ac:b7:0b:
66:fa:47:bc:75:fd:8b:18:76:fd:ec:94:c2:63:77:
64:4a:e1:85:52:be:0f:07:7f:cb:ba:c2:8d:db:6b:
2a:2f:4f:95:e5:d7:34:46:33:db:17:1f:08:4a:0b:
41:8f:fe:02:98:b0:c2:3f:df:d4:ff:ba:df:40:ad:
f9:ee:ce:d7:0b:1c:7c:b4:02:45:f9:95:ff:48:cf:
b1:14:91:bf:c4:11:81:7d:7c:35:ad:3e:c4:31:27:
b7:07:e5:8c:74:da:c1:00:08:64:25:23:a2:23:a8:
e9:4e:71:54:ca:fe:d8:a5:7a:7a:41:d0:bb:a7:0f:
a7:31:4b:2f:99:b3:6a:5d:8e:7e:09:9c:82:bc:ac:
55:16:ca:b1:cd:7a:b2:32:d9:bd:3e:60:97:cb:31:
f1:ca:60:70:15:4d:b7:f3:84:a6:66:72:fa:b5:ee:
f1:2c:a2:66:ba:c3:34:ed:bb:f1:b8:db:e1:21:40:
2c:4d:95:c6:9a:de:ac:63:a2:d4:76:24:58:ad:1d:
d4:7b:2d:44:ee:c7:2c:96:2d:4b:1f:39:d5:36:4f:
0c:58:9f:36:b2:29:cc:18:22:b8:0c:82:da:b8:61:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:48:EA:E3:F6:2C:24:CC:05:B6:E1:29:14:DA:03:2A:55:65:4F:60
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/M0jq4_YsJMwFtuEpFNoDKlVlT2A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.104.0/22
Signature Algorithm: sha256WithRSAEncryption
19:f1:c5:05:47:0f:58:71:a9:f7:3c:04:00:d4:7f:c3:06:4e:
f0:69:28:9b:ec:d6:af:ab:97:0c:5d:2b:86:1b:d9:19:4b:94:
24:12:ff:7d:d7:26:4a:7e:37:b5:ec:ff:98:64:bb:1a:9e:20:
41:ca:b3:9e:35:da:ce:3f:50:30:cf:80:49:70:a7:db:d5:73:
bc:9f:a3:61:d4:96:fa:38:2a:d4:81:f4:e6:3a:54:e6:14:00:
86:04:fa:68:60:8f:66:3e:fe:aa:69:a4:d4:d1:d9:4d:09:a4:
73:2a:41:50:49:19:a6:7f:9c:10:f5:4c:c8:e6:29:4a:de:a6:
85:74:84:a9:49:ec:ef:0c:a2:f1:28:32:f8:28:e0:d6:dd:27:
7f:f4:99:dd:51:ba:9a:24:61:a3:ca:b3:43:ed:1b:49:b4:b1:
ab:87:f7:2b:92:81:ae:d5:3f:45:cd:80:e8:25:e3:ea:84:b4:
a6:aa:e3:93:54:94:91:bc:1d:9f:9b:c1:48:fc:c0:f0:30:ad:
e5:2f:eb:93:59:3a:98:45:e2:76:ad:26:92:3e:fa:31:fa:d0:
92:37:cd:64:1a:d2:a4:d2:35:37:47:02:b6:93:46:df:d2:83:
22:0e:9a:49:ce:7c:53:39:c3:b0:b1:2e:1f:b0:57:30:3c:ee:
24:8d:46:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-fra.rpki-client.org