Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/oxScp33YS4Nep-TlzT3cvyP9hNA.roa
File: oxScp33YS4Nep-TlzT3cvyP9hNA.roa (raw, json)
Hash identifier: PmAkVqwOACrtw19Myb2yF4IcI5AKJEoIc1Yb7P8P0FU=
Subject key identifier: A3:14:9C:A7:7D:D8:4B:83:5E:A7:E4:E5:CD:3D:DC:BF:23:FD:84:D0
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/oxScp33YS4Nep-TlzT3cvyP9hNA.roa
Signing time: Thu 15 Sep 2022 02:43:41 +0000
ROA not before: Thu 15 Sep 2022 02:43:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 106.105.88.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A3149CA77DD84B835EA7E4E5CD3DDCBF23FD84D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:73:e2:81:38:4a:bc:cd:fd:12:9c:4b:a0:
f0:96:c1:30:20:52:0d:ba:3f:f7:fe:a7:81:f4:75:
50:1d:03:32:75:75:a6:d5:6b:c8:04:ac:55:00:2a:
77:a6:41:11:2e:4b:4a:8b:13:2b:41:48:e6:e0:68:
ae:a5:54:4a:6d:e2:e8:6e:c7:da:c7:72:54:5e:6c:
83:f5:28:89:30:05:aa:19:f6:7a:5a:4b:10:6f:f6:
e5:85:77:aa:f7:4f:9a:28:0e:6d:d7:39:0e:01:e7:
6d:86:77:98:84:0c:f6:cc:07:54:34:da:90:e7:b6:
a6:e7:36:a6:f5:7f:ac:5e:1f:4c:36:da:bf:8c:09:
6c:c4:70:77:fc:06:fb:9e:93:27:5b:dd:10:39:27:
e9:c3:08:8d:c3:56:58:a1:92:a6:77:c6:c4:56:09:
a8:c8:9b:2a:d4:d8:a0:01:6e:ad:11:1d:59:5c:b0:
fa:b7:23:20:94:46:f6:a0:33:5c:e8:f9:9e:51:09:
4e:39:03:3e:23:b6:2b:b6:49:b7:15:30:a7:62:b9:
f7:26:9c:7e:fa:4f:ed:53:b6:1c:a7:63:f7:1e:90:
17:9c:48:2d:5b:17:08:b1:1e:38:3e:3f:96:09:d1:
9a:81:e0:63:05:a9:ba:31:fe:31:28:58:e8:1c:23:
ea:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:14:9C:A7:7D:D8:4B:83:5E:A7:E4:E5:CD:3D:DC:BF:23:FD:84:D0
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/oxScp33YS4Nep-TlzT3cvyP9hNA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.88.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:57:ff:5e:ce:72:1a:06:ea:63:d9:a5:90:58:d3:1c:f2:90:
af:7c:9d:d5:7c:6b:75:c4:90:d0:a9:53:ca:7b:62:22:72:62:
04:c0:73:f0:2f:80:75:0e:0b:b3:82:fe:d4:9e:be:5c:cb:d3:
ab:a4:7b:38:0a:07:23:56:72:23:92:dd:4d:7f:3a:d0:ce:a5:
4f:32:a6:99:57:5d:1e:22:39:0c:9c:57:4a:23:fd:9f:63:0a:
96:27:90:df:e6:e9:5f:6d:29:8c:a1:c4:92:37:38:be:29:8e:
a2:df:15:0d:23:c1:77:8d:04:c0:18:50:5e:c3:eb:c3:5b:11:
6d:54:54:2f:6c:f5:8f:d2:0e:23:99:a7:90:60:2d:8d:2c:7a:
f1:ec:a2:8d:36:c8:f5:ac:aa:f1:85:25:b7:8f:2a:bd:6c:02:
fe:7b:d4:8c:b9:03:89:4c:fd:96:c6:64:59:71:70:df:37:57:
98:a3:c9:eb:37:60:70:e0:8a:17:6b:57:23:85:fc:42:4c:a9:
71:95:92:73:91:5d:7f:c3:77:f2:7b:f0:bb:33:1c:79:7a:4b:
ca:99:d1:f0:cb:04:64:2d:3f:71:17:cd:5d:46:a7:23:0a:74:
94:ac:43:b6:12:27:f8:d3:13:14:48:f4:05:0a:a2:24:c2:e7:
b4:6c:d0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:13 2023 by rpki-client on console-fra.rpki-client.org