Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/k1TgTbkfUV56p8D-c4zMsCQlUKo.roa
File: k1TgTbkfUV56p8D-c4zMsCQlUKo.roa (raw, json)
Hash identifier: 8r+mKpGVSUuyRyvXTYiDT15B6nwgi7kkoQllxyHfiys=
Subject key identifier: 93:54:E0:4D:B9:1F:51:5E:7A:A7:C0:FE:73:8C:CC:B0:24:25:50:AA
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10DA
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/k1TgTbkfUV56p8D-c4zMsCQlUKo.roa
Signing time: Wed 01 Feb 2023 10:29:07 +0000
ROA not before: Wed 01 Feb 2023 10:29:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 112.105.128.0/17 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4314 (0x10da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:07 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9354E04DB91F515E7AA7C0FE738CCCB0242550AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:8d:7e:35:3e:fa:65:ae:3d:cd:ae:ab:6c:
fa:fd:db:e3:41:fa:55:5d:fc:e0:5c:f9:a0:0f:e5:
97:45:a4:fe:73:5f:c1:44:16:b8:9e:8d:ea:7c:5a:
83:70:20:25:be:e3:69:e0:a8:39:e5:ae:4e:39:01:
a8:e7:c7:32:a6:c7:b3:a2:d3:16:a7:b9:55:3b:1f:
e9:af:ae:be:09:01:ef:a9:b0:0b:62:cc:aa:b7:2b:
0b:61:c8:89:12:ea:83:a7:f3:22:d9:4d:35:b6:31:
65:94:b5:00:43:37:04:c9:7b:0d:dc:38:0b:71:8a:
31:7c:38:b8:c3:4d:83:f7:0d:52:5b:10:cb:aa:dc:
4f:e2:aa:29:9c:b3:53:5c:a9:bb:db:65:1f:9d:f8:
26:e7:20:4b:70:00:73:25:57:2b:77:60:74:01:ba:
4c:74:e4:6f:b7:e0:4a:a7:ad:51:b4:4e:c5:d0:3d:
36:01:f5:47:85:a7:71:c5:d0:ed:ca:98:75:74:fb:
9d:b7:b0:7e:3e:d2:0f:ce:1e:0a:c9:c5:b5:b4:79:
a7:27:82:4f:04:54:ae:4b:f2:57:9d:85:9b:b7:18:
d7:e8:5b:a8:46:e9:10:f5:31:a1:04:d2:c4:ec:0b:
7d:77:0b:c3:d4:ef:5d:ae:0b:fc:67:b0:4d:e3:86:
ad:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:54:E0:4D:B9:1F:51:5E:7A:A7:C0:FE:73:8C:CC:B0:24:25:50:AA
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/k1TgTbkfUV56p8D-c4zMsCQlUKo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.128.0/17
Signature Algorithm: sha256WithRSAEncryption
12:1c:71:6f:36:0d:a4:7f:32:95:43:02:14:c2:16:29:47:e7:
6f:32:93:2d:83:98:22:c3:c8:9b:50:ca:43:55:64:07:f6:f2:
64:f9:c4:40:88:f0:47:f0:cd:48:e9:9e:ec:85:01:5d:69:b4:
2b:8e:ac:ca:cb:85:e1:49:9b:2c:34:16:14:54:40:36:dd:f6:
99:80:c0:d4:e2:8c:17:a9:45:d4:72:42:e6:bd:d2:a0:f4:eb:
77:33:b0:6b:d0:27:55:7c:1d:a2:4d:68:59:98:66:61:d5:13:
2c:b5:e6:d8:16:6c:c4:68:f1:0b:a6:03:4a:d1:b7:38:df:00:
db:38:5d:90:db:17:ec:12:ae:e0:e6:fe:a2:7e:e3:d1:68:46:
d1:eb:b2:4a:33:15:b6:ad:df:ca:6c:40:18:9a:7d:c8:7a:81:
17:8c:fb:8c:25:71:52:79:a1:c7:14:a3:8e:a9:f5:cd:f7:a9:
8d:52:7c:c8:aa:6e:61:9d:ad:55:1b:8a:92:19:a7:b3:c5:0e:
e9:e4:f5:8a:5a:04:b4:f6:11:de:dd:2e:6b:56:c0:0b:d3:75:
b4:4e:e5:72:4c:c1:f7:21:49:f1:26:e9:99:3b:38:f3:4d:a5:
86:b9:f5:24:cc:62:de:2a:07:00:de:01:e5:12:bb:9a:ef:d4:
17:c7:35:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:51 2023 by rpki-client on console-ams.rpki-client.org