Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_ASM_qM_ZpozDkCTlYQet2opJUM.roa
File: _ASM_qM_ZpozDkCTlYQet2opJUM.roa (raw, json)
Hash identifier: 8R78V2lnKmvnaXbL6bnkbbv/2dqXFj72vaHJ9cB7GKU=
Subject key identifier: FC:04:8C:FE:A3:3F:66:9A:33:0E:40:93:95:84:1E:B7:6A:29:25:43
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_ASM_qM_ZpozDkCTlYQet2opJUM.roa
Signing time: Thu 15 Sep 2022 02:42:40 +0000
ROA not before: Thu 15 Sep 2022 02:42:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 106.105.72.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FC048CFEA33F669A330E409395841EB76A292543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:14:27:90:88:65:a3:09:57:38:7d:f8:20:
18:cd:13:98:6b:12:3f:ed:8e:fd:bb:14:55:31:87:
41:d1:d2:cc:6a:02:93:61:3a:fd:49:ee:6b:22:21:
1a:ef:71:0b:13:f1:92:3d:b3:54:f2:f3:90:92:b4:
25:50:89:cd:41:66:aa:f9:3b:10:52:93:a5:0d:1a:
69:d9:84:e7:62:d7:db:68:cc:33:0f:10:b3:0a:e9:
d5:3d:23:15:bd:62:21:a3:bc:44:b8:d3:fa:01:1e:
b4:6b:d7:2c:37:39:8e:aa:d7:3e:ec:52:d9:13:80:
3f:c1:5d:66:ba:2b:bf:10:96:4c:b5:de:52:e9:3b:
82:80:bd:e7:a8:ac:67:9c:65:28:26:b2:c2:e0:db:
34:34:a7:10:f4:44:56:d8:a8:50:28:73:d0:7d:8a:
6b:88:48:f2:e5:1b:f0:dd:bd:09:c9:0f:01:e0:a0:
28:90:1a:b4:fa:3e:c3:e5:a3:11:16:ab:e9:75:aa:
28:41:d5:23:55:8e:91:02:72:de:01:6b:56:08:30:
76:83:77:f1:e6:12:8d:57:1e:63:26:5c:1c:56:59:
4b:7b:7f:1a:7b:30:dc:63:18:3f:47:61:76:f1:88:
b8:8c:61:f5:5e:f1:26:61:e7:82:62:42:1a:bb:c1:
2c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:04:8C:FE:A3:3F:66:9A:33:0E:40:93:95:84:1E:B7:6A:29:25:43
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_ASM_qM_ZpozDkCTlYQet2opJUM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.72.0/21
Signature Algorithm: sha256WithRSAEncryption
c5:1b:ec:e5:be:c2:af:12:50:b1:71:64:ba:9f:ef:57:9c:d5:
0c:68:44:0a:51:66:d6:ab:43:2f:ac:8d:f8:c2:1f:c3:bc:77:
f1:82:a5:60:66:ce:47:dc:b4:0a:43:44:e7:8e:15:78:d9:08:
25:07:df:45:11:3b:67:1d:a0:a5:8e:7a:95:b1:94:9b:1a:1d:
80:42:e4:b7:33:c1:f6:ab:1a:c4:2e:ad:c7:7a:72:d8:62:bd:
09:38:f6:1a:f2:4a:52:66:18:c4:b4:32:3a:cd:54:6a:70:77:
ab:c0:1d:39:40:23:f3:7b:3f:52:d8:26:43:c1:68:1a:2e:b8:
0a:96:f3:f3:e7:c4:3a:46:cf:25:f8:4b:7d:7b:67:1b:1d:b9:
ae:30:da:b5:5e:55:bf:92:00:03:79:3d:dd:0e:ef:65:6d:30:
61:74:be:6b:74:58:53:dd:12:13:93:36:4f:10:d2:da:34:45:
f6:7b:26:cf:49:ab:49:1b:18:dd:d6:35:bf:a8:77:29:07:7c:
c5:57:59:5e:2c:d4:a6:a6:b3:fd:20:31:66:22:81:4d:55:60:
34:3a:6e:18:62:96:d6:3c:71:0d:f5:7b:cf:b2:33:9d:f4:5f:
38:ec:46:88:03:40:ca:19:f6:fd:54:88:b0:84:62:5a:a6:74:
43:fa:4f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org