Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/zqSkGC5rrUqi7cBpRxJ7dSbNkh0.roa
File: zqSkGC5rrUqi7cBpRxJ7dSbNkh0.roa (raw, json)
Hash identifier: rl1JgsR+Te4PRiiEzzs+wibaxWTKI4Ts7wRgON4GaCg=
Subject key identifier: CE:A4:A4:18:2E:6B:AD:4A:A2:ED:C0:69:47:12:7B:75:26:CD:92:1D
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1061
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zqSkGC5rrUqi7cBpRxJ7dSbNkh0.roa
Signing time: Wed 01 Feb 2023 10:28:29 +0000
ROA not before: Wed 01 Feb 2023 10:28:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 106.104.0.0/14 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4193 (0x1061)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:29 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CEA4A4182E6BAD4AA2EDC06947127B7526CD921D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c5:3a:54:bc:ad:d1:f8:49:a8:d3:b3:1d:52:
f8:b8:92:4f:47:82:87:82:c0:0f:9b:5f:31:6d:0f:
d4:0a:4c:ce:7e:3a:d7:9a:63:62:58:5d:50:46:ae:
b0:69:72:67:f9:7a:b2:57:28:61:42:3e:36:a4:64:
9e:78:95:9e:54:0a:05:4e:13:c2:c9:8b:52:43:64:
aa:8d:cb:c9:ca:56:bd:4a:cd:18:2f:d6:e1:90:3a:
7a:98:f5:85:31:74:fb:64:0f:08:03:6a:d5:7a:2f:
d2:40:69:bc:da:6c:55:c4:a2:ff:bc:5b:84:ef:41:
36:2d:41:58:18:30:21:35:92:7e:eb:da:90:a0:04:
17:21:3e:73:eb:ac:45:a3:29:e1:63:03:73:23:b4:
cf:d8:21:16:35:5d:60:e2:22:04:0b:0c:cf:d1:cd:
06:ad:39:78:f2:45:fd:35:4d:7f:05:1d:e8:6c:d5:
f0:7e:a3:d3:60:0c:fd:bf:c0:ce:94:3b:2c:1a:37:
0a:3e:b6:fd:35:5d:14:fc:5e:ad:de:79:ee:49:cb:
0e:41:36:6c:b9:0a:21:7c:04:ac:65:4f:e4:51:4b:
4b:38:8e:d3:4a:58:36:1a:11:1b:6f:3f:c9:3e:1f:
72:af:f5:c7:4a:4a:2e:ce:b6:eb:10:30:1a:ba:40:
2c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A4:A4:18:2E:6B:AD:4A:A2:ED:C0:69:47:12:7B:75:26:CD:92:1D
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zqSkGC5rrUqi7cBpRxJ7dSbNkh0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.104.0.0/14
Signature Algorithm: sha256WithRSAEncryption
37:d1:a6:b9:b7:3f:b4:90:32:f8:c4:58:33:4b:2d:d9:91:97:
ce:d6:46:77:af:40:ca:2b:c2:3c:d5:76:d0:9f:4c:5c:87:64:
b2:0a:33:13:80:14:df:d3:00:13:6c:da:06:c5:4a:ab:eb:14:
bd:e1:47:7a:76:6a:65:2b:85:4b:47:3c:27:45:a8:b6:e5:67:
32:7a:ae:20:b9:40:e0:5f:d7:f8:de:46:e7:95:1c:9e:1a:1f:
d2:cf:fa:2d:4d:e9:9c:a0:3a:8a:dc:4e:bf:52:63:9a:96:c5:
0e:50:20:6a:7f:4c:cb:a4:7b:09:73:51:12:08:9b:3d:23:d2:
05:db:54:bc:ad:f0:5b:de:34:ba:e3:bf:66:3c:9f:af:db:06:
ad:06:3f:8f:0e:07:be:94:e2:f2:77:25:8d:bb:77:51:77:ad:
ec:67:b9:14:31:d3:ca:88:61:94:e4:2d:42:c5:df:87:34:ce:
f5:99:0a:8c:48:19:67:5d:fd:17:fe:86:97:3a:a2:fe:80:aa:
4a:92:71:02:8d:21:aa:84:1e:56:48:0a:3d:af:ee:6a:0a:54:
ee:5d:e2:e9:1e:16:14:82:3c:93:5f:d2:94:1e:33:64:4f:e7:
82:f4:f3:ca:00:34:31:7e:5b:51:83:bf:22:d5:9e:c3:e8:53:
a6:79:30:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:16 2023 by rpki-client on console-fra.rpki-client.org