Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/t-ty7rpNYpeqZkG_xnGbW1q_sYY.roa
File: t-ty7rpNYpeqZkG_xnGbW1q_sYY.roa (raw, json)
Hash identifier: P/7HXulHOgZVXzC81pQisb5c+AdWOPWfXfxOdOqv8BA=
Subject key identifier: B7:EB:72:EE:BA:4D:62:97:AA:66:41:BF:C6:71:9B:5B:5A:BF:B1:86
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10D7
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/t-ty7rpNYpeqZkG_xnGbW1q_sYY.roa
Signing time: Wed 01 Feb 2023 10:29:06 +0000
ROA not before: Wed 01 Feb 2023 10:29:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131584
IP address blocks: 106.105.179.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4311 (0x10d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:06 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B7EB72EEBA4D6297AA6641BFC6719B5B5ABFB186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:37:58:b7:ce:6d:1d:1b:18:d2:cc:8c:d1:
cf:36:8b:0f:5d:4d:7f:fa:49:1b:48:2e:98:85:0d:
76:f2:e6:fc:3e:4e:6d:29:e3:90:3c:54:b5:18:23:
8b:df:ed:2b:53:e8:3d:aa:ff:a3:00:2d:cd:43:af:
96:71:ba:5e:b2:92:95:b5:a1:02:e7:de:3b:07:a2:
0c:be:f0:78:c0:88:eb:8f:af:94:8d:55:6f:6c:56:
e6:49:22:f9:fb:b6:8a:98:93:c7:46:53:21:17:5a:
ce:a2:cd:b2:eb:35:b0:ab:a6:f8:3e:e2:e7:3e:35:
f2:2c:de:eb:62:94:d7:56:9f:a9:0f:54:5e:62:c9:
da:66:36:a6:02:52:9b:14:8e:3c:ea:27:b0:9f:12:
e8:09:02:89:75:aa:5a:ef:a4:c4:96:63:ad:7b:bb:
7d:32:83:c4:b7:ce:01:c4:db:76:38:5d:10:db:28:
d7:0a:9d:a2:f8:ce:a0:6f:f8:bc:e0:d9:36:f5:9f:
54:df:e2:54:59:3e:a2:cd:0e:b5:9f:2f:fe:b1:41:
33:4b:43:f5:65:39:41:c7:0f:a6:72:30:85:c3:40:
3b:1b:e8:96:99:f7:dc:4a:a4:17:49:11:a4:10:0a:
d1:5e:99:53:cb:83:37:3a:0c:f3:39:c2:bb:f8:5f:
83:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EB:72:EE:BA:4D:62:97:AA:66:41:BF:C6:71:9B:5B:5A:BF:B1:86
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/t-ty7rpNYpeqZkG_xnGbW1q_sYY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.179.0/24
Signature Algorithm: sha256WithRSAEncryption
04:1a:92:bc:74:6f:92:c8:21:17:34:66:fd:78:35:51:b5:d4:
0a:83:b1:3f:95:54:56:3f:72:2b:3b:47:c0:98:2b:d5:ee:19:
e5:94:f9:45:b9:7e:84:b7:ab:6d:d1:3f:db:8a:b4:3d:7e:50:
0b:c7:56:54:28:03:a7:33:6c:54:4f:db:d1:8c:7b:9e:b8:d5:
4a:91:76:87:d3:0d:50:2f:78:fb:e6:8c:6c:a8:78:db:15:97:
98:8b:5f:04:66:d4:ce:26:37:30:65:ce:a9:ef:5f:cc:0b:0d:
a4:cd:f2:96:49:60:4a:52:24:20:1a:0e:7e:ae:b7:f3:fd:3c:
93:d6:d4:7f:be:d6:ab:e1:12:ea:b3:c6:a4:70:2e:1b:a6:5b:
7e:f3:ef:d3:d2:04:f7:3f:2c:6e:8e:aa:31:0b:f9:34:da:15:
a2:a4:9f:dd:87:cc:22:02:02:35:83:e9:f2:b6:60:01:b8:bc:
f6:c4:63:6e:09:c9:04:ce:cb:da:30:a0:48:f0:fc:bd:33:a0:
bb:1d:b7:d7:74:de:92:8f:81:53:7b:6d:42:94:e9:09:57:55:
85:ca:f5:64:82:c2:6f:22:27:60:4e:6b:cc:f3:5f:21:e9:b8:
89:eb:9d:60:a2:e7:54:56:37:da:a2:02:90:56:ce:a8:51:2a:
1b:64:43:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:16 2023 by rpki-client on console-fra.rpki-client.org