Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/YG7W7Z1eEy5BUBGzOCtAI0oYm2A.roa
File: YG7W7Z1eEy5BUBGzOCtAI0oYm2A.roa (raw, json)
Hash identifier: u4QoLe19IlPC6dAt8wFc8iG+BMnH2u4KpqkXz2+CUk0=
Subject key identifier: 60:6E:D6:ED:9D:5E:13:2E:41:50:11:B3:38:2B:40:23:4A:18:9B:60
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 110C
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YG7W7Z1eEy5BUBGzOCtAI0oYm2A.roa
Signing time: Wed 01 Feb 2023 10:29:24 +0000
ROA not before: Wed 01 Feb 2023 10:29:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 106.105.48.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4364 (0x110c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:24 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=606ED6ED9D5E132E415011B3382B40234A189B60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:06:eb:15:a5:cd:2c:b4:de:56:3e:28:67:e4:
c6:3d:ba:ea:c1:ac:dd:89:0f:cb:b5:4c:b4:57:71:
a3:16:1d:46:7d:91:1e:c7:06:b5:9a:95:33:8d:0c:
27:fb:4f:70:44:43:03:43:43:f9:fe:12:37:20:df:
a1:e9:dd:6d:3d:5c:98:a1:41:fe:ab:05:f6:38:44:
09:50:05:40:27:91:c5:42:e7:96:5a:a2:be:f1:15:
0a:3b:5c:b2:7a:c5:9b:9d:28:ed:b4:1e:37:95:fc:
9e:72:df:36:8c:e0:d4:85:91:50:f6:c5:11:c1:8a:
7e:87:31:27:42:73:bb:f8:2c:fa:fc:d0:10:ba:26:
c9:f0:2b:84:62:11:e4:91:53:d2:9d:12:f6:4f:88:
bf:6f:c7:dc:6a:43:19:a4:d0:99:f4:d0:71:de:73:
ac:48:af:d7:39:cf:4f:94:fe:03:fe:13:eb:8c:d6:
9e:ac:8f:0c:90:d1:a3:68:bc:25:6a:5d:8f:28:47:
5c:50:a2:69:a0:4f:9b:7c:b6:ef:26:f9:5b:96:d0:
f5:7d:2c:dc:24:6a:02:c3:7a:55:e9:47:e3:33:b6:
b1:36:75:67:27:62:ab:01:af:66:14:02:ba:a2:19:
f0:eb:a6:7c:d1:58:b7:93:bc:e5:89:43:5f:f7:c0:
10:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6E:D6:ED:9D:5E:13:2E:41:50:11:B3:38:2B:40:23:4A:18:9B:60
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YG7W7Z1eEy5BUBGzOCtAI0oYm2A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.48.0/20
Signature Algorithm: sha256WithRSAEncryption
03:00:bd:3e:05:5d:10:2c:32:b5:56:3d:f1:40:54:ea:f8:c2:
17:45:7a:49:fa:e5:33:c4:d2:31:de:f1:4b:26:d7:bb:7b:12:
a8:aa:b5:59:37:56:96:48:55:51:87:7e:6b:cb:e3:1a:1d:0c:
d1:89:60:d3:c7:a3:0c:12:28:76:7c:6b:53:7c:0b:66:86:b0:
6f:69:1b:e7:fb:f8:50:f3:17:84:99:b3:c4:a2:13:cb:e8:3e:
e5:e6:3c:02:ae:6a:74:50:7e:d6:88:a5:62:d1:00:5b:3b:20:
11:0e:18:7c:b9:4f:1a:13:f3:01:13:6f:bc:38:82:65:e9:36:
63:40:87:ef:bc:5a:90:be:5d:04:86:fc:71:71:50:7a:f6:d6:
3a:c7:01:80:aa:f4:25:71:31:b9:3c:8e:61:24:e4:bf:80:33:
91:00:03:58:60:4c:f6:01:14:5f:c4:7b:fe:83:fe:60:d0:23:
1f:88:ca:17:0b:ce:bf:a3:4d:85:6f:88:34:71:9c:7f:15:81:
37:e7:64:83:c4:7e:6e:76:cc:61:6d:8e:b2:a3:8e:9f:f6:6f:
8a:23:f0:d8:ee:01:69:81:17:64:9e:50:f8:0c:a8:6b:1b:0e:
ad:2f:62:ce:f6:6d:8e:2b:01:0e:b3:1f:1b:5f:8e:e8:d4:14:
40:ec:9a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:51 2023 by rpki-client on console-ams.rpki-client.org