Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/v1s0uT07npDYFcxtUkZXbwp3sug.roa
File: v1s0uT07npDYFcxtUkZXbwp3sug.roa (raw, json)
Hash identifier: pg+a9nmS9TdxobWknJyGlVl5sMju8KOg83J/Xt4r4gk=
Subject key identifier: BF:5B:34:B9:3D:3B:9E:90:D8:15:CC:6D:52:46:57:6F:0A:77:B2:E8
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/v1s0uT07npDYFcxtUkZXbwp3sug.roa
Signing time: Thu 15 Sep 2022 02:42:44 +0000
ROA not before: Thu 15 Sep 2022 02:42:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 106.105.32.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BF5B34B93D3B9E90D815CC6D5246576F0A77B2E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b0:51:77:3d:40:77:0e:f6:2d:a9:0a:d5:8b:
7a:bb:86:8a:11:0c:e8:12:df:34:77:67:ca:da:8c:
f1:9f:8b:7e:6f:02:20:e8:fb:a9:7c:4e:3e:bc:95:
98:b2:dc:9b:36:ae:33:a6:3b:27:c2:28:01:c3:7e:
f3:92:10:48:47:1f:87:cb:ed:79:ce:bc:a1:4f:75:
98:91:d1:46:6b:4f:e1:18:a8:56:dc:11:3e:7e:07:
db:ad:d9:4b:d5:b0:28:24:84:7c:98:1f:f8:5e:fe:
ac:e2:d6:f9:0e:b9:00:00:e4:92:1d:52:76:38:16:
8f:95:97:a1:6e:21:7a:9c:4e:89:f5:57:d0:21:3e:
35:7b:62:a5:4a:b6:26:67:9b:d7:7f:39:df:07:41:
e5:54:8e:c4:bf:e4:5b:ef:d4:40:2e:7a:2e:ed:a6:
3a:3c:02:78:35:46:0f:a5:e4:48:9b:4a:4e:e7:d4:
a9:bc:38:78:7b:60:c2:27:26:c9:cb:93:27:b2:f3:
46:fe:3b:3e:c8:ff:c8:0c:a5:01:61:a3:7a:bf:89:
5c:3f:7c:73:59:7b:eb:e1:c3:41:b7:04:28:ea:df:
35:25:be:a8:3d:20:68:0e:78:09:96:3f:2d:82:c1:
18:ac:6a:37:b1:df:55:6c:f5:31:2e:01:f4:f7:5a:
a8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5B:34:B9:3D:3B:9E:90:D8:15:CC:6D:52:46:57:6F:0A:77:B2:E8
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/v1s0uT07npDYFcxtUkZXbwp3sug.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.32.0/19
Signature Algorithm: sha256WithRSAEncryption
be:62:9c:91:6f:02:68:68:d0:1c:0d:d0:18:52:eb:b7:24:82:
d5:55:3f:97:2b:82:3e:03:8f:2c:91:5f:c5:1a:49:ca:09:1e:
9c:09:cd:4a:96:2c:b9:ee:ad:25:8f:53:35:7e:37:f4:42:be:
3d:92:7d:bb:23:e0:83:4b:8c:6a:ab:68:3b:d2:1c:b1:cd:44:
25:39:4a:81:8e:86:6a:57:63:dc:a8:9b:81:45:3d:5f:b6:16:
ae:2b:6a:95:b4:0d:fc:f8:e0:79:98:2b:cb:22:ae:da:1b:e9:
86:16:c1:ad:4a:fc:8c:06:ba:30:3d:ba:12:53:fe:b3:a1:95:
73:7f:09:bd:0d:3a:20:b4:a6:68:cf:9d:77:fa:11:e2:28:74:
17:36:a9:9b:c6:08:7e:59:89:97:8b:22:c7:e0:30:9c:57:46:
d3:bb:7a:49:de:1d:5d:cf:82:84:75:0b:6e:02:d7:50:85:4c:
63:be:6e:8b:c3:d3:a9:23:e1:c8:98:d6:57:0f:35:a5:a1:23:
a0:f4:3b:56:09:15:e9:b9:38:7e:61:7c:a2:9f:94:eb:31:ba:
a3:a7:ff:47:17:e1:89:69:27:0c:9e:fd:01:7b:85:cd:c0:e0:
0c:a8:35:e0:88:1f:0e:7b:3d:59:46:eb:bc:ad:1d:19:b2:ab:
c5:01:9b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:13 2023 by rpki-client on console-fra.rpki-client.org