Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ba1SZ-PT3SnAYE98f5vQlTK1S8A.roa
File: ba1SZ-PT3SnAYE98f5vQlTK1S8A.roa (raw, json)
Hash identifier: s0eY6JY0mXz7hXLihOAXzorRwrg3tQ09gIn0zwq0P74=
Subject key identifier: 6D:AD:52:67:E3:D3:DD:29:C0:60:4F:7C:7F:9B:D0:95:32:B5:4B:C0
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ba1SZ-PT3SnAYE98f5vQlTK1S8A.roa
Signing time: Thu 15 Sep 2022 02:42:52 +0000
ROA not before: Thu 15 Sep 2022 02:42:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 112.105.0.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6DAD5267E3D3DD29C0604F7C7F9BD09532B54BC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:09:22:7d:2b:cf:33:27:cd:2a:03:55:28:
35:16:41:43:ee:61:0e:a6:35:ad:4a:a6:5b:e3:cc:
d9:01:34:97:f1:90:93:40:53:8b:83:7c:d0:3c:7c:
18:cf:b6:6c:32:5a:dc:14:5e:ac:66:88:2c:4e:70:
e8:5e:3b:6f:94:49:d8:af:97:69:f4:4d:55:ae:54:
54:fc:08:17:8b:98:65:9a:f2:47:c2:17:54:9f:ad:
5d:15:99:03:ef:bb:2d:05:8b:82:1a:99:49:c8:e5:
cf:b7:f4:ad:31:74:6f:ec:f8:fe:8c:f4:c2:f0:75:
43:77:e5:b4:1e:75:a0:9b:76:ad:3a:d7:4e:6f:bc:
bb:95:e6:8f:1a:1c:b3:69:d0:bb:e1:2d:e0:ba:1d:
55:02:d1:02:de:0f:6b:68:a0:d9:7f:c5:54:57:d9:
67:c3:a2:5c:90:bb:5d:23:c9:3e:51:04:ba:89:73:
49:d3:59:cc:e5:1f:c9:b6:78:f6:12:cb:b5:b7:39:
a2:73:f8:fa:57:0b:4b:58:46:3a:f4:b0:11:30:0e:
6d:b1:69:e3:c2:d1:3c:ef:63:70:5a:f8:08:a5:11:
b6:c8:e6:32:30:0d:85:55:ae:c8:33:f4:3c:55:e2:
da:3d:96:52:a1:f5:84:27:d1:2b:49:7c:57:1b:8c:
2b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AD:52:67:E3:D3:DD:29:C0:60:4F:7C:7F:9B:D0:95:32:B5:4B:C0
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ba1SZ-PT3SnAYE98f5vQlTK1S8A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.0.0/18
Signature Algorithm: sha256WithRSAEncryption
63:8e:b7:7e:54:b5:0c:e2:a2:95:35:eb:ad:a5:05:df:7a:51:
e0:aa:ed:4e:da:6a:06:fd:41:7a:3c:cd:63:e4:3c:fd:69:1b:
67:18:e1:93:c8:f2:5d:2c:2d:1b:52:41:a6:ad:15:d2:aa:b7:
a2:26:b4:05:6f:c0:16:4d:01:63:9f:fd:14:4d:54:d6:ab:ba:
af:23:25:b6:7a:26:1f:13:58:ba:ab:e1:ad:13:0d:69:ca:40:
5b:2e:fd:81:7b:c7:8b:09:6f:6f:4f:ca:f4:ec:86:88:8f:3d:
96:77:3c:72:60:84:73:04:53:b4:ee:27:67:35:18:a4:d8:d9:
14:fb:fa:b3:64:7e:20:c2:18:1b:51:2d:be:ae:66:a1:63:62:
15:55:9b:11:4c:09:5a:24:f4:20:57:45:5b:7c:15:88:2e:41:
85:de:52:45:84:5d:05:6e:fd:f4:6b:53:a1:a5:2d:1a:93:0e:
9d:c5:69:d3:7a:17:87:46:c8:b4:4a:50:ca:9b:53:bc:88:fb:
f1:28:86:d0:cf:0f:10:ce:4d:48:fb:ac:4d:e6:ef:d1:76:52:
7a:11:ac:4b:bf:cb:e7:4a:3d:fc:35:fd:3c:0f:91:7c:52:98:
7d:31:c4:40:b8:70:8c:e3:02:95:cb:11:3c:d3:93:85:f6:66:
d4:46:32:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:12 2023 by rpki-client on console-fra.rpki-client.org