Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/oSG_llbroAZgNtiGTUc1R55K8K4.roa
File: oSG_llbroAZgNtiGTUc1R55K8K4.roa (raw, json)
Hash identifier: UyWy7Sc5gzeplvTKBdBNDaXUVIOm2ljsFrkUQt3jD+8=
Subject key identifier: A1:21:BF:96:56:EB:A0:06:60:36:D8:86:4D:47:35:47:9E:4A:F0:AE
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/oSG_llbroAZgNtiGTUc1R55K8K4.roa
Signing time: Thu 15 Sep 2022 02:43:51 +0000
ROA not before: Thu 15 Sep 2022 02:43:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 112.104.0.0/15 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A121BF9656EBA0066036D8864D4735479E4AF0AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:33:3e:ba:aa:dc:32:a9:c0:63:02:af:66:
35:46:66:a3:4f:b5:ff:e0:b8:78:a5:7d:a2:4d:8a:
d9:ff:ef:70:04:b5:7c:c0:82:87:56:7e:60:55:3b:
63:02:38:c7:c4:8f:9b:35:66:a4:0c:58:77:a2:d6:
e3:a1:a0:ad:0d:20:5c:eb:f7:67:1c:cb:2d:a7:7b:
34:ac:22:34:b1:04:a4:09:1f:73:88:ea:23:66:4e:
3b:cf:b4:5a:4c:92:53:c0:d7:76:7c:48:de:96:50:
51:c0:ea:f3:b6:ce:e4:ba:19:50:a3:ff:71:16:95:
d5:c9:89:ab:16:5e:67:ef:ce:88:66:32:70:99:2c:
76:32:28:53:49:aa:25:ad:e7:f9:b0:d0:d3:f5:d4:
dc:c4:37:43:cf:c2:24:1f:b3:07:99:9d:b5:7c:7e:
c1:4c:2b:c4:4c:22:b3:61:d3:8a:cc:88:8f:6e:61:
e0:0d:00:ac:15:72:d5:1e:46:41:b7:18:bc:07:0a:
cf:f8:b8:76:54:5c:fc:67:7e:b6:59:fa:d2:45:98:
b0:06:1b:a3:a8:1c:08:8f:b0:e8:4a:c1:0d:7c:f6:
38:3f:5a:54:5b:89:27:c6:e2:9a:ca:03:25:d6:d8:
17:46:15:ea:8d:4c:38:94:bf:8e:e6:0a:39:20:74:
f1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:21:BF:96:56:EB:A0:06:60:36:D8:86:4D:47:35:47:9E:4A:F0:AE
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/oSG_llbroAZgNtiGTUc1R55K8K4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.104.0.0/15
Signature Algorithm: sha256WithRSAEncryption
42:39:d7:93:a6:69:b4:fb:20:fc:43:98:37:bc:ea:17:09:ea:
39:08:9a:76:2d:b8:b2:15:9b:93:76:69:c1:91:c8:1e:d0:0d:
a1:50:0f:59:30:3b:91:3c:ef:ee:f6:a1:1b:28:f9:c6:89:64:
03:a8:2a:13:e0:ce:6b:42:59:9a:46:0e:29:8a:fd:b3:9c:4b:
ef:60:fd:b0:2b:b5:18:5f:11:ca:be:45:7e:c7:2d:f3:d5:b3:
60:a2:fd:80:52:77:1c:5d:03:01:39:d7:1c:6f:09:9b:0b:7d:
68:b4:4a:0d:80:95:77:61:43:48:0f:b7:c5:a1:53:b1:8f:bb:
fe:b2:e0:8c:ec:09:93:90:2e:c9:b9:fa:94:e2:3c:0b:ec:6a:
2c:15:19:31:ac:72:62:52:11:07:c9:45:14:11:6c:5b:ed:1a:
dc:60:cf:58:5f:57:4b:c6:08:e4:82:2e:14:43:27:7f:58:72:
ed:32:ea:40:75:08:9b:24:98:58:ab:f4:04:f5:dc:98:9d:70:
5f:4f:bd:eb:ed:75:fb:16:6f:29:c4:0b:b5:56:1d:5a:1c:47:
4b:b0:72:e1:d0:ec:97:bb:ad:05:ad:b7:ed:65:2e:db:0d:2e:
43:1d:4b:d5:fb:ea:bf:8f:3e:56:31:a8:40:22:44:94:73:55:
b5:25:59:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:13 2023 by rpki-client on console-fra.rpki-client.org