Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Qoc1wFyLf7cH3gX07d1nHJS96_o.roa
File: Qoc1wFyLf7cH3gX07d1nHJS96_o.roa (raw, json)
Hash identifier: RVAX1h54kjMEK0YThzm1kMfCPKyqLRfwrEu7n2ICOh0=
Subject key identifier: 42:87:35:C0:5C:8B:7F:B7:07:DE:05:F4:ED:DD:67:1C:94:BD:EB:FA
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1037
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Qoc1wFyLf7cH3gX07d1nHJS96_o.roa
Signing time: Wed 01 Feb 2023 10:28:17 +0000
ROA not before: Wed 01 Feb 2023 10:28:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 106.105.32.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4151 (0x1037)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:17 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=428735C05C8B7FB707DE05F4EDDD671C94BDEBFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:2e:0a:f0:ae:20:06:44:b8:d2:9a:5f:1c:
79:ce:d2:69:7d:2c:9e:ec:e7:9b:bf:06:49:f1:37:
76:12:25:e3:81:ce:77:32:4c:3e:99:9f:8c:1b:17:
5c:50:26:a6:80:01:43:f8:5b:50:83:63:6c:99:bd:
54:22:3d:55:07:bf:e1:61:d1:e7:25:f1:71:37:50:
b0:f8:15:4d:f9:d3:56:c1:f7:e0:67:c8:69:20:db:
dd:1d:7d:4e:9b:39:d8:e3:d4:55:0c:74:2d:83:63:
2f:4e:ab:5c:69:23:dc:f7:22:a1:24:6b:6f:d1:aa:
19:e0:7b:8e:63:6c:a1:83:6b:5c:a8:00:ec:ca:21:
78:34:a7:99:98:19:22:10:b7:54:8a:4d:cb:fa:1b:
fe:cf:58:53:0a:c2:c1:ea:e0:49:0b:b4:94:72:2d:
75:3e:53:eb:7a:51:81:72:34:4b:a6:08:56:51:d3:
c0:81:65:5d:b3:78:e2:a1:04:c6:17:b8:af:c0:66:
ae:3b:62:d6:10:26:64:c9:e9:e6:51:a8:03:d4:65:
27:18:97:0c:5b:5a:4e:74:7f:76:0f:d8:a5:ce:67:
d1:cc:4b:ed:79:bb:6f:28:15:3a:4a:84:90:51:33:
f9:0b:f7:12:9e:ee:4e:b2:a9:3f:7f:6e:13:10:80:
03:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:87:35:C0:5C:8B:7F:B7:07:DE:05:F4:ED:DD:67:1C:94:BD:EB:FA
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Qoc1wFyLf7cH3gX07d1nHJS96_o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.32.0/19
Signature Algorithm: sha256WithRSAEncryption
14:d7:d2:b7:81:1b:3f:66:44:73:29:7a:9a:0c:5b:53:7d:2e:
09:43:0f:1f:ba:86:29:4a:27:d3:1d:a2:d3:4e:04:fd:1d:44:
46:1a:95:98:7d:6e:e0:6f:5f:66:37:de:54:22:c5:28:2c:21:
ae:6a:74:26:c5:de:4a:80:b1:92:b7:de:fd:f6:81:d6:60:3c:
a7:97:53:cb:05:a3:71:01:e3:ca:e1:4c:f0:ee:46:0f:94:70:
f8:f6:ed:82:94:f9:6b:1b:01:b3:3e:7c:e5:14:fa:1e:99:38:
7c:9a:a5:eb:ec:c2:13:2e:ac:40:cc:55:6c:17:52:1d:99:10:
d5:11:d2:32:ad:11:4d:00:ee:e9:67:65:4b:28:0f:db:c3:d7:
15:47:3b:83:54:0c:cd:11:c3:11:5e:04:ab:6f:d6:34:58:ba:
45:b2:4f:d4:c3:48:a1:b7:66:6d:92:01:4f:6c:62:76:cd:8d:
68:2f:a2:39:a1:a9:1d:9c:6a:1c:9f:a4:d5:90:70:4c:48:13:
f8:b9:69:71:a8:a9:5e:a4:c0:be:e4:6c:5f:9b:37:f6:f1:7e:
6f:9f:90:a5:be:45:00:63:c9:3a:2d:3d:9f:37:5a:20:b3:6f:
de:88:7d:bd:ab:30:48:28:d3:12:b7:f7:43:08:03:c4:b4:f7:
be:5c:b2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:15 2023 by rpki-client on console-fra.rpki-client.org