Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/mi5fNmnYnwDj49tQmjNwYyaAgYc.roa
File: mi5fNmnYnwDj49tQmjNwYyaAgYc.roa (raw, json)
Hash identifier: 2BbQ99PUgDDnCtvdUJKAWXSExblCt/qUbOMu85xALFs=
Subject key identifier: 9A:2E:5F:36:69:D8:9F:00:E3:E3:DB:50:9A:33:70:63:26:80:81:87
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mi5fNmnYnwDj49tQmjNwYyaAgYc.roa
Signing time: Thu 15 Sep 2022 02:43:04 +0000
ROA not before: Thu 15 Sep 2022 02:43:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 106.107.128.0/17 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9A2E5F3669D89F00E3E3DB509A33706326808187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:d2:58:ed:ad:d7:c2:3a:e1:d2:5a:c2:a8:
c1:8e:64:2d:61:65:15:98:d3:b1:a1:77:5c:a9:db:
a7:de:58:36:63:c0:76:6d:a7:9f:bf:25:8f:3e:33:
3a:f5:6d:d9:b6:7b:8a:ee:b8:25:1a:d1:da:48:da:
40:a6:9a:25:17:85:4b:c2:37:94:f8:6a:55:b8:91:
45:f6:01:91:a5:27:87:a5:95:e3:0b:af:60:73:9c:
54:3c:bf:58:ca:a4:05:aa:d2:dc:3f:28:b9:c0:c6:
19:5d:d3:2e:8a:07:12:bb:31:3e:35:0a:c1:5f:6b:
b2:43:5a:df:c4:15:94:26:c7:8e:4b:04:ee:45:95:
8d:42:34:a9:c4:35:69:ee:9f:c6:f1:ed:d1:a9:a1:
d6:01:1e:fa:7a:7d:b5:5d:ca:e3:f6:6c:4a:b9:a0:
4a:c9:e5:ab:75:10:59:4a:0a:53:80:39:83:2c:f8:
da:76:76:47:f0:99:16:3e:20:00:8a:b8:86:37:5f:
c4:fa:45:48:57:eb:d1:bb:0e:01:17:a8:c2:5f:c0:
9f:c1:49:64:dd:ea:6d:c4:66:32:6e:fe:c6:20:32:
3c:47:89:d9:6b:5b:7a:4e:3c:d2:a8:15:72:b6:58:
6a:5b:37:ce:0a:50:13:fd:61:e9:74:1c:2a:e9:5e:
1e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:2E:5F:36:69:D8:9F:00:E3:E3:DB:50:9A:33:70:63:26:80:81:87
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/mi5fNmnYnwDj49tQmjNwYyaAgYc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.128.0/17
Signature Algorithm: sha256WithRSAEncryption
36:b7:8e:92:3d:9e:ab:3e:c1:24:d6:e0:32:0d:67:1b:ef:ae:
53:1e:13:5c:0a:e0:6e:53:7d:96:86:a0:97:76:4a:cc:f6:52:
f3:f6:b1:de:05:3b:05:eb:a7:ad:40:8d:fc:81:ba:5c:d9:56:
55:18:8c:e7:9b:76:a4:bb:06:c0:94:a7:cb:0f:59:fc:0c:a5:
ed:86:c8:7c:1e:72:8e:06:ce:23:c0:a9:23:bb:fe:1b:88:84:
1c:70:82:dc:7e:a4:4c:c7:a7:01:98:5e:29:90:e0:eb:2a:8e:
84:2e:44:1c:bf:45:29:00:9c:7d:63:26:83:b2:f4:ef:2c:b0:
e0:6e:c0:19:d5:0e:be:c5:97:c7:34:61:0e:4d:bb:85:29:95:
c3:66:f3:ef:e6:9c:7b:af:e8:31:86:d5:fa:16:d6:1e:93:a8:
88:7a:75:a5:3c:4c:7f:56:28:aa:97:7f:3f:e6:a1:97:d1:39:
6d:bc:4a:f2:2b:60:fc:08:77:28:71:ca:00:70:94:3a:33:36:
ba:05:9f:a0:fe:ed:48:7a:ca:1e:af:d8:03:99:33:8b:d5:1b:
ae:c2:ed:67:54:6c:9f:fe:bd:10:7b:2e:d7:eb:79:5d:4a:1d:
f9:ab:20:49:ed:cf:46:70:e1:fc:0c:f1:f9:a3:b2:e2:aa:6e:
1e:cc:05:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:12 2023 by rpki-client on console-fra.rpki-client.org