Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/jBLLguHwUN7CxZ3F6n9Hu9_LJ8I.roa
File: jBLLguHwUN7CxZ3F6n9Hu9_LJ8I.roa (raw, json)
Hash identifier: StKlLLHRfTuaN6493SsYTdTbiC4abgnoI+TW1jG7YVE=
Subject key identifier: 8C:12:CB:82:E1:F0:50:DE:C2:C5:9D:C5:EA:7F:47:BB:DF:CB:27:C2
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10DB
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/jBLLguHwUN7CxZ3F6n9Hu9_LJ8I.roa
Signing time: Wed 01 Feb 2023 10:29:07 +0000
ROA not before: Wed 01 Feb 2023 10:29:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 112.105.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4315 (0x10db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:07 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8C12CB82E1F050DEC2C59DC5EA7F47BBDFCB27C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:63:b5:72:a0:2c:4b:ab:96:3c:e0:58:48:bf:
03:b4:ba:6c:96:dc:f2:81:f3:05:9c:47:5c:7b:5c:
82:44:f8:9b:c4:b9:08:2c:97:c0:c3:89:05:fb:15:
d0:84:c8:f4:20:1f:af:6a:29:c4:24:46:18:75:3e:
88:76:fb:8b:15:ee:e0:7e:6a:cb:e6:b6:6c:6d:5e:
30:af:ce:0c:fc:a3:74:b4:ef:ab:42:36:f0:8d:92:
a3:df:ff:f2:48:7f:fc:06:47:22:7e:39:6e:7c:cb:
76:24:39:7c:16:b2:6b:13:0f:56:53:31:b9:eb:85:
a9:57:87:5c:df:64:72:81:e6:5f:8c:7e:89:52:92:
fd:76:e3:cd:98:4d:58:58:f6:63:e4:25:94:df:ed:
2f:29:95:38:26:60:47:46:87:cd:97:e8:33:82:80:
e8:4a:9b:38:f6:51:76:62:01:99:8b:22:64:38:86:
f4:a8:61:8e:5b:42:b0:cd:ae:65:97:68:9a:89:95:
37:da:06:f4:d3:cd:56:36:38:ab:9a:b2:ae:05:1a:
d7:9e:c2:6b:d3:6a:75:9d:3c:ff:1d:20:2b:f3:79:
72:48:71:dd:d9:82:eb:bf:d0:fe:b3:8f:98:70:d4:
73:1b:35:9d:ea:bc:3f:15:b5:66:d0:1b:c8:45:8c:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:12:CB:82:E1:F0:50:DE:C2:C5:9D:C5:EA:7F:47:BB:DF:CB:27:C2
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/jBLLguHwUN7CxZ3F6n9Hu9_LJ8I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:bf:66:b9:86:93:50:70:1c:ef:ba:6e:f8:6c:f0:80:33:c5:
25:cd:02:c9:d6:55:01:d1:86:3d:0f:10:5e:2e:3c:67:a6:fc:
51:5e:9d:d8:52:f3:86:f3:7d:75:f1:58:a4:67:74:58:4f:9f:
13:59:6a:71:d2:b4:40:55:7b:2d:dd:f0:68:51:6c:9e:e7:ed:
e7:41:90:e2:4d:1a:1c:34:91:3c:c2:74:3d:c0:bd:77:70:7d:
cb:26:5a:8c:24:60:b7:10:18:3a:0c:70:e2:59:e8:cc:ca:e4:
13:3c:c6:88:b1:76:0a:11:12:6f:b6:4b:79:df:ee:15:3a:ed:
f5:82:74:54:2f:5f:74:92:e3:dd:fc:05:78:2e:42:bc:e6:94:
32:4e:9e:ff:9c:b1:a4:be:4c:0c:29:05:64:73:cf:91:a6:a4:
0e:c1:03:8d:35:a9:06:af:c8:cf:71:b7:6b:be:f8:f9:98:2e:
1c:65:09:1a:4a:cb:53:1c:29:04:e9:26:09:a7:77:bb:67:5c:
55:61:91:8b:cc:57:70:52:13:d4:9a:01:84:fd:a1:e5:94:e5:
23:1c:fb:2c:95:99:75:c2:5d:d7:a0:62:cf:34:fb:a9:89:93:
02:a9:47:59:a7:f6:e2:ea:55:55:0f:bf:7d:24:68:d0:71:b0:
7d:f2:8e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:51 2023 by rpki-client on console-ams.rpki-client.org