Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/hGFexc_EKFGnL0vnvgCI--lo5S8.roa
File: hGFexc_EKFGnL0vnvgCI--lo5S8.roa (raw, json)
Hash identifier: y5Jr3nwnxpVEXokT8qELJW5LZE7VOvEIh55Aax51q8o=
Subject key identifier: 84:61:5E:C5:CF:C4:28:51:A7:2F:4B:E7:BE:00:88:FB:E9:68:E5:2F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 104F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hGFexc_EKFGnL0vnvgCI--lo5S8.roa
Signing time: Wed 01 Feb 2023 10:28:23 +0000
ROA not before: Wed 01 Feb 2023 10:28:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 112.105.0.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4175 (0x104f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:23 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=84615EC5CFC42851A72F4BE7BE0088FBE968E52F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:06:45:0d:e4:3c:87:2a:12:20:ad:01:2e:
0a:b8:d9:5b:be:8c:37:55:db:46:e0:c1:50:92:98:
63:a6:4c:45:ac:8f:5d:94:1b:3b:6f:78:7c:04:3a:
60:e0:8b:7a:45:75:97:66:29:df:7c:2d:3f:80:44:
23:d8:9c:3f:b4:16:94:bf:65:96:64:fe:4c:f5:ce:
a0:09:43:46:c0:2d:d6:85:3b:db:99:e0:63:62:82:
6e:b9:e3:e7:5c:07:eb:b9:c1:b4:1e:05:b3:0e:a9:
08:76:a4:50:09:af:90:4f:f3:91:04:14:03:2c:74:
7f:da:9d:e8:1f:f2:d8:b2:d3:fd:ac:39:d5:c4:b5:
a0:88:44:03:9a:93:c5:64:11:34:39:b3:fc:52:d1:
56:19:86:1a:72:11:d2:5e:25:2e:86:27:27:6a:60:
21:67:d7:21:37:4f:ae:ac:e8:f2:86:8a:0d:d1:2d:
98:ab:e4:f2:93:b0:94:bb:50:30:37:4b:f3:05:f4:
01:e3:1e:62:e9:dc:95:cb:1b:e2:3d:60:e4:6d:31:
03:ef:bf:d3:92:16:f2:30:a0:09:03:92:49:21:4a:
90:7d:8f:bc:59:8e:2d:22:a4:28:be:51:1f:90:f3:
b6:27:44:8b:2c:8d:2e:1e:8e:cb:bf:cf:07:fb:a2:
50:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:61:5E:C5:CF:C4:28:51:A7:2F:4B:E7:BE:00:88:FB:E9:68:E5:2F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hGFexc_EKFGnL0vnvgCI--lo5S8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.0.0/18
Signature Algorithm: sha256WithRSAEncryption
61:03:8b:e3:93:d2:06:eb:9d:71:de:f5:80:ec:4d:3c:09:2c:
95:1a:2e:5f:88:d4:34:6e:22:1e:09:76:eb:35:66:8b:8b:76:
3a:55:84:12:9d:1e:5b:cb:7d:10:f2:ce:c4:e8:89:7f:59:ad:
ae:5f:ac:59:27:7e:cf:ac:fd:31:cb:13:25:77:ee:31:27:34:
88:81:96:90:74:5e:1b:ea:3b:3e:4b:05:92:93:76:67:30:1d:
87:06:50:e5:c0:46:0c:c2:fc:65:9a:b0:2b:33:21:b1:83:7a:
9d:fd:c6:88:67:d8:d9:09:2b:30:a5:72:7b:81:37:9f:ad:60:
69:8d:e8:a3:bb:e2:dc:28:16:c5:97:f4:fb:af:97:75:ac:55:
71:13:78:99:eb:30:db:c9:73:3f:a2:f8:e0:50:dc:2e:4e:5c:
0a:58:00:1c:c9:c7:27:a4:b7:9c:9e:88:ea:2b:9d:9d:d1:f4:
80:f4:25:0b:2c:6d:b0:28:d0:66:5f:03:d2:bc:e0:cd:73:b3:
dd:a3:db:ce:47:5f:92:5f:f6:b3:aa:d6:7e:e0:e6:a4:f0:c4:
2e:51:ea:2f:b6:f0:c1:fc:9d:0d:04:91:57:1d:1b:a4:8c:6e:
e6:e4:88:11:c2:8e:73:7b:43:7e:bf:47:e0:1a:d9:70:88:fa:
dd:e9:2b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:51 2023 by rpki-client on console-ams.rpki-client.org