Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/yF4T2BvsQBfwvn5vM3CSIRdWb3E.roa
File: yF4T2BvsQBfwvn5vM3CSIRdWb3E.roa (raw, json)
Hash identifier: Q5GwHWLsYVaLdl5leT7Xw+pmOyy5hTO9IyBBxWZFP8E=
Subject key identifier: C8:5E:13:D8:1B:EC:40:17:F0:BE:7E:6F:33:70:92:21:17:56:6F:71
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10D2
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/yF4T2BvsQBfwvn5vM3CSIRdWb3E.roa
Signing time: Wed 01 Feb 2023 10:29:04 +0000
ROA not before: Wed 01 Feb 2023 10:29:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131586
IP address blocks: 106.106.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4306 (0x10d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:04 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C85E13D81BEC4017F0BE7E6F3370922117566F71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d9:11:e3:55:c0:89:80:bb:31:90:ff:d0:76:
d7:01:c1:c6:77:e2:7d:94:8b:41:e7:32:7c:5f:91:
c9:51:6a:0d:04:be:62:58:5b:2a:fc:c0:2a:bb:31:
ec:73:e5:95:5e:84:56:1f:c2:a6:75:15:46:b1:e8:
51:69:50:3e:67:b3:75:3d:8c:c3:65:cf:e8:9f:6e:
b8:36:b7:9f:33:83:cf:63:80:f8:43:f4:2d:40:39:
13:cd:c6:c0:13:d0:ac:6a:53:05:25:47:f0:c0:a0:
ba:b6:68:ae:ed:2f:9d:cf:4f:39:e1:cf:de:06:b8:
7b:71:90:75:78:5c:d4:e8:92:8f:bb:dc:61:c3:7a:
05:79:01:a9:6f:a9:4b:1b:ff:5d:85:c9:ec:f7:f6:
32:b5:f3:81:9d:24:e5:cc:24:f9:65:02:1e:04:63:
f3:2e:5c:c9:75:52:eb:33:e8:e4:12:7d:59:0b:cc:
fe:d1:97:15:40:e9:9a:42:5d:f4:c9:72:00:81:07:
b8:c9:8a:f0:da:e4:bb:d8:07:8e:a6:4b:46:1d:5e:
b5:f8:34:30:34:92:55:89:c4:61:b3:ca:d1:54:7c:
d4:db:77:0a:e1:d8:b3:7b:db:31:cd:28:64:64:8e:
b5:fb:0e:a1:d0:d4:25:14:0f:e7:ce:f6:09:1d:e7:
12:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5E:13:D8:1B:EC:40:17:F0:BE:7E:6F:33:70:92:21:17:56:6F:71
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/yF4T2BvsQBfwvn5vM3CSIRdWb3E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.106.0.0/16
Signature Algorithm: sha256WithRSAEncryption
59:44:b7:6d:34:c7:28:22:78:39:f9:bb:f4:97:c7:49:dc:bf:
11:6f:8a:fa:1c:6a:73:08:7e:48:4a:fe:25:96:1c:fa:31:b6:
28:a0:cb:39:d4:5f:1c:85:c7:eb:c0:12:2c:6e:2a:0f:09:ab:
cb:df:50:8a:dc:6c:8c:bf:ee:78:3b:11:13:19:58:f3:a5:ac:
51:69:b5:ca:72:ba:15:c0:22:36:09:db:f4:77:7f:99:89:35:
19:29:4e:ce:b9:8f:b9:d0:6d:67:a3:3f:d4:81:b8:39:c3:27:
da:07:cd:ed:14:d6:a1:c6:82:42:42:d6:3d:c3:df:67:e0:04:
72:31:4e:5a:74:eb:b5:6c:ef:39:9d:e9:3c:35:ff:8f:e2:2d:
7b:61:88:21:43:04:8e:06:3b:37:ca:c0:9a:85:b8:2f:9e:cd:
5d:0d:80:a7:3f:da:1c:00:82:a3:fe:ae:32:b9:25:71:46:92:
07:32:31:03:ab:54:be:6a:ee:34:9b:7b:3b:0e:23:33:7a:ae:
d4:c4:3b:62:90:a3:df:38:d5:f1:61:07:cf:52:c3:72:45:7e:
6e:79:80:bc:83:aa:a5:01:a9:2e:f8:60:95:3e:9f:9c:03:50:
1f:86:bd:2e:98:64:01:6d:8d:8e:52:58:c9:a5:f6:c5:64:ee:
f7:a7:2e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:51 2023 by rpki-client on console-ams.rpki-client.org