Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/RKUuHe65YoKhlHsTK-ZzdTolE6o.roa
File: RKUuHe65YoKhlHsTK-ZzdTolE6o.roa (raw, json)
Hash identifier: zV74mBdHwn8pwLfw/CHYcKkttTB7seapXVcmTtzBIG0=
Subject key identifier: 44:A5:2E:1D:EE:B9:62:82:A1:94:7B:13:2B:E6:73:75:3A:25:13:AA
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/RKUuHe65YoKhlHsTK-ZzdTolE6o.roa
Signing time: Thu 15 Sep 2022 02:42:41 +0000
ROA not before: Thu 15 Sep 2022 02:42:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 106.105.128.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=44A52E1DEEB96282A1947B132BE673753A2513AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:f7:f8:dc:5c:cf:2d:9a:73:bb:c3:4e:10:
d8:0a:0f:03:96:85:32:7e:23:a2:0c:3b:1d:1d:94:
c3:e7:52:1e:b6:7d:b9:b3:b6:b4:d0:38:30:34:d2:
2c:9f:8d:00:b3:5c:45:8e:f7:05:6b:26:24:8b:09:
30:0b:d7:2e:83:6b:19:ad:06:40:6c:22:6e:31:c2:
a8:0c:17:79:5e:9f:5a:e4:00:e1:b2:ed:1a:67:26:
8a:b0:05:ee:cf:d8:e0:8b:5d:0e:1c:2d:96:ac:77:
56:2f:c6:22:dd:56:b2:2c:7b:97:fc:d2:dc:f5:ce:
e0:b3:b0:3f:1c:9d:13:ce:60:0c:82:44:15:32:f6:
5b:79:92:a4:05:2a:c7:8c:48:cd:d2:b0:de:50:de:
86:8d:8a:33:c8:8c:e2:40:aa:ed:6f:24:7f:0c:ac:
d3:6d:1c:9a:a9:d2:11:24:bd:22:d8:c7:58:d7:47:
37:64:1f:9f:2f:7d:dd:95:f9:0b:e9:4f:90:cc:ff:
99:76:66:eb:47:ad:c9:87:d9:82:42:40:7b:47:88:
9e:4f:ef:ce:1f:cb:e3:cb:44:85:9c:52:02:5b:07:
64:3e:a7:20:fa:53:d6:f7:16:f0:b7:da:46:63:f5:
63:79:ec:69:f9:ba:9c:c7:18:69:91:0d:bc:4e:10:
04:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A5:2E:1D:EE:B9:62:82:A1:94:7B:13:2B:E6:73:75:3A:25:13:AA
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/RKUuHe65YoKhlHsTK-ZzdTolE6o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.128.0/19
Signature Algorithm: sha256WithRSAEncryption
2d:0d:54:27:47:a4:89:fc:a4:f6:39:f4:2e:ec:f3:30:54:84:
d4:48:af:05:72:0e:95:c2:ce:2e:3a:18:45:0f:02:d0:86:8d:
05:b6:f6:88:65:4e:66:f1:8a:65:2b:df:08:f0:da:d9:91:e0:
e2:aa:d2:74:83:59:70:6c:82:3f:b2:24:27:18:df:a4:a8:2e:
c7:4b:2f:48:bc:4b:d9:41:11:da:e8:10:cf:30:14:60:2a:01:
0a:08:35:64:08:f9:ed:52:4b:57:25:19:cc:4a:9c:d7:6a:c9:
d5:9c:d0:38:7f:2d:74:be:5b:d1:78:94:cf:2e:7e:83:e2:a4:
b8:3f:45:43:88:c7:c1:6e:f1:e9:8b:95:9d:c3:c5:18:b4:61:
e3:8f:92:e6:79:aa:2e:6c:d5:0b:8b:4b:a1:7c:24:74:53:c5:
23:eb:f5:97:18:a4:be:cf:cf:c6:82:f0:75:fb:5b:ed:ad:c9:
f4:99:bf:d7:09:8c:0e:30:0a:91:04:d5:53:86:b1:58:32:e8:
15:28:d4:b3:b1:23:70:ec:1c:7c:28:7d:a9:10:0d:11:30:8d:
a4:3e:b4:2d:5a:a3:10:38:4c:83:17:b4:31:46:51:3e:91:ed:
78:75:a4:e4:80:08:6f:09:4f:50:63:8b:c3:a9:bd:82:9c:7a:
e6:ba:22:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:59 2023 by rpki-client on console-ams.rpki-client.org