Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/wQEC4AJU2I5p7omow5ruwL1OJBY.roa
File: wQEC4AJU2I5p7omow5ruwL1OJBY.roa (raw, json)
Hash identifier: +rOJlRDcdopjE8dPfpLKBuBmmeHUFfSbtE48EEQozyE=
Subject key identifier: C1:01:02:E0:02:54:D8:8E:69:EE:89:A8:C3:9A:EE:C0:BD:4E:24:16
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wQEC4AJU2I5p7omow5ruwL1OJBY.roa
Signing time: Thu 15 Sep 2022 02:43:35 +0000
ROA not before: Thu 15 Sep 2022 02:43:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131584
IP address blocks: 106.105.179.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C10102E00254D88E69EE89A8C39AEEC0BD4E2416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:26:51:e2:e0:00:7e:53:4c:09:09:40:4d:
5f:b9:31:a6:19:29:e8:e5:4d:2e:da:c5:bc:f3:4d:
a0:47:f9:6b:ac:99:f8:4e:18:09:9b:c3:b4:6f:66:
69:d3:8f:3d:03:45:87:e8:99:e4:09:cf:c9:63:60:
fd:f1:1b:80:d9:59:00:60:3c:32:f3:30:91:77:14:
74:4d:93:d6:46:58:9f:4a:2d:25:3e:92:03:31:bf:
fb:a5:78:3f:bd:6b:f4:9d:dc:c7:fb:2c:20:e9:49:
77:a6:aa:2f:d5:5d:c6:05:f9:f5:99:08:8e:67:ed:
d7:97:d3:f9:da:56:6d:1d:b2:84:a6:57:b5:c4:9f:
78:10:4a:4b:42:3c:a2:27:9d:13:d6:60:6c:55:9e:
aa:1c:f8:b2:56:ad:e5:66:6b:db:93:84:3b:56:2d:
37:c8:55:89:2a:27:f0:45:d6:1a:9d:d9:f7:26:f0:
cc:6a:bb:a6:db:14:b2:4b:a9:8f:98:20:e6:0a:ad:
8d:ba:c1:6f:1f:99:ee:f5:11:e4:1b:fb:bc:e4:87:
0f:1b:6a:7d:de:26:e5:c6:04:a3:6b:7a:0d:fe:de:
69:36:9f:2d:50:d8:1b:ad:11:ad:3a:71:b3:19:c2:
13:29:c7:75:6c:0d:f9:f7:7e:a9:ab:5f:f9:50:d2:
39:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:01:02:E0:02:54:D8:8E:69:EE:89:A8:C3:9A:EE:C0:BD:4E:24:16
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wQEC4AJU2I5p7omow5ruwL1OJBY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.179.0/24
Signature Algorithm: sha256WithRSAEncryption
49:b6:4a:c3:11:9f:0f:4e:4e:68:82:2c:64:77:f6:32:82:30:
da:0f:7a:de:11:49:f9:f4:f4:7b:de:31:23:b1:8b:a1:cd:48:
00:09:2b:1f:e7:1a:0e:2a:3d:e1:54:a8:b0:cd:0e:68:e4:3d:
aa:82:78:41:07:ff:77:76:ec:b1:bf:fd:88:e8:eb:f2:64:7a:
9e:7d:0d:21:84:af:bb:b8:9e:32:69:5d:b1:70:5f:56:e8:57:
67:8e:7f:17:a2:ab:f3:0a:25:15:ec:c4:d6:24:3b:d0:11:61:
ee:0d:63:22:10:31:e5:89:9a:62:03:96:f7:c4:e0:ac:d3:c5:
4e:2a:1a:50:6c:2e:46:e2:d7:27:e1:5f:98:75:9e:d5:4e:08:
8d:68:2b:e1:d6:e6:bb:2f:49:8b:a8:d7:96:39:66:27:4a:90:
8b:6b:bc:7a:31:b3:75:fb:0e:9d:59:0c:31:22:c9:c9:c6:fc:
d9:7b:57:85:bd:b3:99:50:33:81:12:46:58:16:64:d7:ce:7c:
a2:97:8c:47:18:e8:dc:e8:4e:47:02:72:9d:61:ce:78:4c:ae:
f3:9f:67:8c:4c:14:d7:d7:59:9d:e2:32:73:26:c2:ed:6b:49:
b9:5b:bc:98:27:cd:4e:70:91:a9:10:d5:08:15:37:17:f8:04:
2d:d6:89:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:13 2023 by rpki-client on console-fra.rpki-client.org