Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/QmKBNwZpaQKrsQm69n5H5oSGcno.roa
File: QmKBNwZpaQKrsQm69n5H5oSGcno.roa (raw, json)
Hash identifier: NHEmM5NnJY5syTQ84rPXevX087tDsnpefLTvdYJkyuI=
Subject key identifier: 42:62:81:37:06:69:69:02:AB:B1:09:BA:F6:7E:47:E6:84:86:72:7A
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QmKBNwZpaQKrsQm69n5H5oSGcno.roa
Signing time: Thu 15 Sep 2022 02:42:42 +0000
ROA not before: Thu 15 Sep 2022 02:42:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 122.146.104.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4262813706696902ABB109BAF67E47E68486727A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:f4:c7:ae:6d:e8:ad:1c:40:bd:e6:fe:fb:
40:be:05:9e:b4:84:67:d7:b7:b8:ef:4a:19:b0:dc:
5c:dc:c1:ee:21:bc:8f:eb:9f:a6:67:69:b5:2d:99:
85:e3:fd:80:3a:a2:4e:85:cc:0f:e7:f8:55:eb:f2:
ab:fb:13:40:85:ee:7b:30:23:38:65:48:c2:8b:4a:
45:9e:cb:ae:45:b8:41:8b:66:93:4d:2e:83:1b:86:
31:fc:06:5a:56:cc:e2:0f:e4:71:81:8a:ae:29:9d:
2e:89:49:eb:33:76:80:68:62:f5:b0:b1:9e:86:c5:
bd:f7:2f:6b:ab:4d:cf:49:68:98:87:6d:0d:ee:c3:
a8:58:ec:76:f0:af:c6:e1:63:8d:5a:8a:b9:30:4d:
6e:e7:5f:21:21:49:1c:ea:79:34:f2:2a:7f:cb:4e:
51:cb:84:c1:1f:6d:e7:a3:66:b7:f0:af:dc:6a:6e:
09:56:f8:87:62:79:f7:2c:09:11:af:20:80:a4:af:
0a:5b:61:c5:53:a6:4d:ac:9f:e2:e2:0c:1d:02:80:
b3:69:03:73:97:1e:85:21:43:67:cb:dc:92:53:35:
00:33:6f:84:d6:cd:d9:3f:59:e3:0d:c8:9c:d3:af:
de:11:4b:f1:14:ef:c5:1e:99:64:07:d2:43:2e:29:
c8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:62:81:37:06:69:69:02:AB:B1:09:BA:F6:7E:47:E6:84:86:72:7A
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QmKBNwZpaQKrsQm69n5H5oSGcno.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.104.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:99:6b:71:25:37:7e:8d:ca:a7:68:4a:b9:2d:23:50:a0:4a:
55:e1:ac:8e:29:0e:c3:a6:98:62:12:ab:2e:98:4d:2d:d1:df:
06:0c:fe:7b:e7:a0:03:53:fd:1c:8c:59:ec:c5:04:eb:74:e7:
c7:a4:df:31:34:9b:27:c0:2d:ce:65:ea:b7:88:d1:ca:c0:d5:
db:b1:46:7d:d0:a8:b6:2d:3f:99:ab:ed:cd:26:4f:0d:10:69:
9d:41:31:e7:15:ad:6c:f5:7a:64:9a:b1:d0:7d:64:7b:2e:9a:
1c:af:5d:e0:40:46:65:46:d1:24:15:82:45:d8:11:d6:cd:61:
af:81:0f:77:ff:f1:78:84:37:f8:1b:7f:ad:69:ea:80:f1:47:
f8:e6:77:41:18:6d:94:cf:4f:d5:87:9f:20:a4:81:05:3a:ea:
6a:44:15:5c:42:86:1e:22:2b:b0:8d:38:ab:dd:af:cd:92:6c:
6a:5f:de:94:c9:0b:8d:f3:ce:f2:1d:db:e0:f6:d2:12:49:d2:
6f:8b:23:dd:27:f2:fa:b2:c3:c7:1a:05:8d:22:f9:e4:b6:86:
f0:46:b1:55:85:00:b8:56:48:93:ca:b5:3b:78:68:c2:b0:db:
9d:f1:13:b0:b5:b8:77:11:07:fb:bb:fe:a4:f2:7b:83:15:d1:
81:80:a2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org