Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/iD91zlU5W41yk2pu9uit5SdQMVg.roa
File: iD91zlU5W41yk2pu9uit5SdQMVg.roa (raw, json)
Hash identifier: /PZVnd5L2vxu0Py2WNAx1YQFBFaQqwgDyFg0B0SLUTo=
Subject key identifier: 88:3F:75:CE:55:39:5B:8D:72:93:6A:6E:F6:E8:AD:E5:27:50:31:58
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 114C
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iD91zlU5W41yk2pu9uit5SdQMVg.roa
Signing time: Thu 06 Apr 2023 06:33:43 +0000
ROA not before: Thu 06 Apr 2023 06:33:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131602
IP address blocks: 106.105.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4428 (0x114c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Apr 6 06:33:43 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=883F75CE55395B8D72936A6EF6E8ADE527503158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d5:2f:6b:ca:29:41:50:d1:d0:c3:c1:b4:bc:
3b:c0:4d:e5:f1:5f:ef:3e:12:aa:32:74:5e:a9:2a:
ff:02:ef:84:59:27:96:34:72:95:9b:cd:46:3b:39:
ae:e2:db:c2:1e:4b:50:f4:80:54:7b:35:e3:b6:be:
d9:5d:72:b4:c4:44:99:60:72:ec:02:de:5a:1f:f8:
a6:3c:9c:87:04:2e:81:32:de:30:1a:17:2a:7b:09:
4f:5f:ad:43:13:69:1f:0b:a7:6c:80:44:9d:8c:b4:
f7:db:bb:93:89:77:60:b9:2a:79:9f:d6:31:97:ad:
a4:e4:b7:46:a7:c7:da:a0:b3:a0:64:48:2b:97:3a:
de:88:89:f7:17:80:89:10:51:8f:fa:c8:b8:d8:0d:
88:72:76:87:c8:d6:66:1b:ab:80:3d:e7:3b:6b:ea:
11:cb:bb:a5:98:2f:f6:91:9e:29:e9:2e:db:53:2d:
ec:f7:98:11:f8:27:e5:06:91:17:4a:fa:68:2a:fe:
a3:24:bf:a4:7d:11:e0:b4:f2:c8:85:44:09:e1:90:
81:c6:d5:ef:31:c3:c9:8a:87:19:5f:4b:83:78:d8:
ba:dd:8c:a7:af:9a:61:cf:64:8b:1d:d5:1c:65:66:
c8:57:9b:eb:e1:28:5f:29:02:6e:42:d9:e5:b4:8b:
bc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3F:75:CE:55:39:5B:8D:72:93:6A:6E:F6:E8:AD:E5:27:50:31:58
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iD91zlU5W41yk2pu9uit5SdQMVg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.111.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:6b:42:08:6d:f6:65:c4:35:1e:0a:eb:bd:13:b6:8f:0f:e6:
08:3d:a2:42:7c:11:44:f4:06:6c:9f:6f:b2:d5:02:f0:b0:39:
84:06:d9:a5:83:43:c4:46:3b:d7:78:1a:e8:db:a3:54:13:52:
93:8b:8c:04:ad:48:d9:51:31:6e:d9:48:98:5f:53:d2:03:9f:
19:ee:8b:a4:0e:e2:8e:b8:4d:af:c4:3e:b9:e3:e5:df:8d:dc:
98:75:4b:ba:36:80:e1:04:82:6a:02:c6:2c:01:48:54:ca:e0:
51:12:9a:d0:8a:11:b5:d7:8b:28:1d:f1:91:d0:bf:40:33:ce:
01:6b:26:d3:a0:ca:86:a2:85:b9:57:60:12:c2:cd:9a:14:0f:
1b:ba:f4:d3:94:f6:51:63:9a:de:35:39:ff:2b:06:c1:8a:c2:
a4:af:5e:14:ff:97:18:1a:c6:dd:24:63:15:3b:dd:a7:fe:cc:
1f:5f:96:1a:d3:83:2b:e5:c4:40:85:6d:e6:28:bf:4a:25:4a:
86:42:41:ad:db:51:b4:53:4e:7b:27:42:d0:93:f2:7d:d6:64:
97:24:ae:dd:bc:6f:b0:18:87:30:a2:4c:a9:c0:45:ca:ef:5c:
75:41:ad:fa:1c:c4:0b:9f:86:6e:ad:8e:90:9f:7c:b6:81:e1:
a4:97:38:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:16 2023 by rpki-client on console-fra.rpki-client.org