Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/mcc4JuyeR92kxhw4pkIFaaOMa_U.roa
File: mcc4JuyeR92kxhw4pkIFaaOMa_U.roa (raw, json)
Hash identifier: OSlGa/1q8yd7udi9a5QD4QL8abj3NY+LNdistym84mg=
Subject key identifier: 99:C7:38:26:EC:9E:47:DD:A4:C6:1C:38:A6:42:05:69:A3:8C:6B:F5
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mcc4JuyeR92kxhw4pkIFaaOMa_U.roa
Signing time: Thu 15 Sep 2022 02:43:45 +0000
ROA not before: Thu 15 Sep 2022 02:43:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 106.107.176.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=99C73826EC9E47DDA4C61C38A6420569A38C6BF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8a:22:67:d8:9a:07:b5:6f:78:e7:f7:99:9c:
37:e2:1c:60:5b:cf:d7:70:bb:ca:03:47:02:d6:fa:
6b:1f:22:3e:19:40:b0:8d:1d:4c:e6:c6:c1:c6:9b:
84:2d:ce:17:85:3c:ed:e3:2d:41:91:af:78:18:a7:
fd:d5:ee:78:fa:6a:79:8d:e6:06:f0:b7:2f:ba:39:
ae:9c:7d:df:8f:74:9e:3a:70:8d:44:95:4d:0e:87:
f9:2e:ed:b5:34:fb:83:ef:10:8b:10:7c:8a:b6:fc:
03:97:53:c4:95:cf:3e:01:2c:8b:f2:93:1f:35:ae:
d7:32:27:3c:7b:8d:b6:da:18:dc:59:17:36:65:21:
73:6c:0d:fa:06:20:05:38:d8:02:75:20:0b:cf:d4:
de:b0:ad:31:24:0c:71:4d:3b:e2:a6:de:13:53:92:
d7:f6:30:2a:24:54:02:3c:ad:3e:44:5c:a0:eb:9c:
5f:2b:c4:de:39:65:18:ff:4f:f8:a6:53:ca:4a:4a:
fe:b1:d9:80:fd:fa:ef:50:f4:a9:75:60:67:e1:16:
d4:a6:48:4c:df:7a:54:88:4a:08:38:7a:d6:4a:3d:
6b:7c:a0:67:ee:7f:1d:a2:8a:02:53:8f:e1:48:87:
ce:0c:a8:26:23:3e:2f:17:3a:90:84:ef:fc:60:71:
e3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C7:38:26:EC:9E:47:DD:A4:C6:1C:38:A6:42:05:69:A3:8C:6B:F5
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mcc4JuyeR92kxhw4pkIFaaOMa_U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.176.0/20
Signature Algorithm: sha256WithRSAEncryption
24:b0:42:2c:7d:bc:ab:96:6c:05:4b:e0:a2:15:a6:90:dc:96:
1a:ec:68:11:3e:6a:26:a8:a4:49:55:77:0a:fe:3a:7b:f3:30:
49:18:1c:45:f3:5e:78:2f:29:4e:fb:a9:8f:4e:5e:36:91:a5:
b6:22:f4:24:c9:f0:26:fb:99:7a:86:a2:7a:1f:bc:5f:d4:e8:
d5:f9:da:56:b7:8d:6d:96:77:30:85:f1:fa:ca:f0:53:8a:ef:
f8:c8:c2:23:7c:43:d9:1a:0e:08:4f:de:03:02:ea:07:fd:26:
27:97:a5:ea:87:3a:80:b2:35:ba:89:fa:7a:86:fa:d7:11:30:
c5:69:3d:48:76:b8:f2:2e:6e:67:a9:eb:12:a6:a8:6a:68:ff:
dc:86:ad:ae:31:f2:22:87:ee:d0:e4:53:46:79:28:f3:78:fa:
a0:7a:89:21:22:cd:7d:cd:ce:68:4d:7b:8d:09:11:03:67:cc:
11:60:13:16:89:d3:05:85:6c:bf:27:b4:97:18:c5:1d:0f:eb:
e1:63:fe:df:95:fa:e0:ae:13:2c:22:00:1e:7c:e7:33:cf:c4:
f1:ed:54:06:0a:25:ac:12:30:14:7e:fc:d8:c6:98:95:3d:4b:
60:41:46:5e:43:5e:78:a6:d6:5a:39:c2:7d:20:85:31:4f:cd:
a5:46:e3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:01 2023 by rpki-client on console-ams.rpki-client.org