Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_Hn6IL4dYum3-jK3T56SrcVkUwQ.roa
File: _Hn6IL4dYum3-jK3T56SrcVkUwQ.roa (raw, json)
Hash identifier: qwrEIOKpSR3QPZFmOzMTRYkhz19K3HvENXCHTd/VHX8=
Subject key identifier: FC:79:FA:20:BE:1D:62:E9:B7:FA:32:B7:4F:9E:92:AD:C5:64:53:04
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_Hn6IL4dYum3-jK3T56SrcVkUwQ.roa
Signing time: Thu 15 Sep 2022 02:43:30 +0000
ROA not before: Thu 15 Sep 2022 02:43:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131584
IP address blocks: 106.105.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FC79FA20BE1D62E9B7FA32B74F9E92ADC5645304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:37:7a:30:32:5b:e6:c5:69:90:84:97:49:c8:
4f:f2:d7:05:01:e5:28:e7:01:61:31:d5:d4:fb:60:
1c:24:9c:5d:fd:ff:ad:0b:43:ff:25:c4:39:5b:d6:
68:d6:d8:10:e4:0d:33:4a:3d:fa:f9:a1:fa:8d:77:
41:5d:d9:44:84:45:6d:5d:4f:78:7e:7e:af:af:df:
8d:b1:17:64:9a:f0:68:cd:7a:ef:dd:dd:92:1b:28:
2c:21:6f:87:1c:00:b2:96:ce:bf:15:81:7a:1e:e1:
22:c8:2b:26:e2:66:6f:dd:04:a9:ed:b3:db:e0:e1:
7d:40:a2:dc:ea:91:a7:e7:eb:93:cc:e5:21:59:45:
b9:db:40:4b:b7:bd:e0:e5:37:9d:ce:14:d1:99:47:
d2:f6:ae:56:6e:14:e8:16:0f:70:9d:0c:1f:36:a4:
eb:5c:5f:bc:61:57:10:0b:ed:41:4f:7c:c2:17:ca:
b4:54:40:d3:23:2c:e6:d3:bb:b1:65:3e:02:01:af:
f9:5b:3d:da:df:7e:80:27:85:e7:ba:8e:2e:e6:b5:
6c:fc:b1:18:4d:be:51:e4:68:ec:f1:dc:f2:f6:5b:
8c:66:e6:14:d0:6a:66:5a:92:33:60:9d:86:fc:05:
b0:2a:5d:20:45:26:1c:52:9b:49:46:b0:d7:05:af:
e8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:79:FA:20:BE:1D:62:E9:B7:FA:32:B7:4F:9E:92:AD:C5:64:53:04
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_Hn6IL4dYum3-jK3T56SrcVkUwQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.182.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:c6:2f:8a:7a:9d:4c:d1:c5:a9:35:56:6f:e9:ee:4a:b4:32:
7b:41:6d:36:89:46:91:4f:8e:ad:33:f6:f4:76:50:0c:f5:06:
ff:41:2f:39:fc:7f:8e:05:b6:1b:06:64:d8:ab:83:57:e9:24:
a7:04:7a:5f:ac:42:dd:cb:88:ec:79:f3:9c:0f:16:41:40:4a:
88:2e:94:ad:c0:6b:a0:6f:fa:53:60:7a:cf:d6:92:15:89:d6:
d4:69:ea:54:1a:27:c2:ee:e9:3f:11:86:35:95:f2:fa:6e:79:
79:61:92:81:c4:f6:8a:ed:c0:7b:55:e6:a1:37:4a:ae:4a:ca:
53:80:65:3a:e3:e8:66:f6:9a:03:e3:9f:04:32:2c:d4:59:2e:
6e:26:a4:38:56:7b:61:5f:68:fa:61:50:d4:24:02:bd:94:65:
02:74:82:9d:d6:7c:72:c5:26:8b:f7:8f:f0:83:c4:de:11:db:
22:7a:55:93:e8:f9:e8:85:e7:c1:d7:ec:21:86:f5:d7:18:b5:
3f:d8:82:40:93:81:a5:e8:68:fa:15:e0:ba:d5:69:bb:9e:cc:
fb:55:54:2a:59:dc:4b:15:4e:f8:77:dd:f3:1c:80:08:7d:99:
fd:fb:d7:88:b5:0c:d2:66:d3:6c:c2:b0:e1:cd:1c:63:48:3f:
3e:ad:a0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:00 2023 by rpki-client on console-ams.rpki-client.org