Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/3LINK/c6LMZ9n-YjcMwbFgYSeVPeuSP-A.roa
File: c6LMZ9n-YjcMwbFgYSeVPeuSP-A.roa (raw, json)
Hash identifier: dcfz0PcxEYHBrU6NYJLjzd+TWstG6Ebitu4cyuPgcYw=
Subject key identifier: 73:A2:CC:67:D9:FE:62:37:0C:C1:B1:60:61:27:95:3D:EB:92:3F:E0
Certificate issuer: /CN=F221632D310D085A9390799E5A49FFF18EBDFDB4
Certificate serial: 107D
Authority key identifier: F2:21:63:2D:31:0D:08:5A:93:90:79:9E:5A:49:FF:F1:8E:BD:FD:B4
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/8iFjLTENCFqTkHmeWkn_8Y69_bQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/3LINK/c6LMZ9n-YjcMwbFgYSeVPeuSP-A.roa
Signing time: Thu 15 Sep 2022 02:35:06 +0000
ROA not before: Thu 15 Sep 2022 02:35:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17408
IP address blocks: 103.123.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4221 (0x107d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F221632D310D085A9390799E5A49FFF18EBDFDB4
Validity
Not Before: Sep 15 02:35:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=73A2CC67D9FE62370CC1B1606127953DEB923FE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0d:8a:13:2e:45:a2:38:31:7e:b9:f6:89:97:
9d:98:c2:5e:c6:73:ef:00:e1:e7:3f:a6:44:7e:32:
fe:d4:73:ae:55:91:0d:9a:ba:8e:37:a3:82:0d:ae:
d4:3a:c9:8d:b6:1f:7b:42:fb:de:2b:7c:b3:70:ff:
60:66:3c:ae:5e:45:f9:2b:b4:9b:89:d1:87:4c:fd:
f9:d6:a7:3f:c4:b9:3e:01:91:e8:df:32:31:4c:e4:
9b:fb:81:4c:18:5d:5b:e5:2b:ad:5d:38:c5:1c:fd:
53:cb:27:f3:d5:94:35:5b:3d:94:b6:c0:19:36:8f:
cc:b4:0a:f2:80:c1:b5:c4:e9:84:9a:f6:65:c9:3c:
7e:0f:5c:31:31:d9:4d:bb:b4:6b:a6:f5:0c:fd:d8:
07:bc:22:80:54:ee:85:f9:ca:cd:31:3d:2f:64:97:
7d:4d:b1:c2:79:7b:03:b9:f9:44:c4:85:ac:80:f9:
09:e4:e1:1c:c9:6b:88:1d:69:5c:a6:a5:30:17:77:
e2:59:59:0d:c3:81:b2:67:91:8a:16:b0:91:e9:fa:
6f:34:68:ef:e7:e6:f1:da:a4:36:79:2f:93:b3:18:
68:a1:0e:70:98:56:9f:02:b9:5c:95:11:cd:ad:c3:
f3:c2:dd:cb:2f:b4:2d:29:19:52:54:1b:aa:e2:e4:
d6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A2:CC:67:D9:FE:62:37:0C:C1:B1:60:61:27:95:3D:EB:92:3F:E0
X509v3 Authority Key Identifier:
keyid:F2:21:63:2D:31:0D:08:5A:93:90:79:9E:5A:49:FF:F1:8E:BD:FD:B4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3LINK/8iFjLTENCFqTkHmeWkn_8Y69_bQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/8iFjLTENCFqTkHmeWkn_8Y69_bQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/3LINK/c6LMZ9n-YjcMwbFgYSeVPeuSP-A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.252.0/22
Signature Algorithm: sha256WithRSAEncryption
58:ac:b5:ce:fa:4f:de:d1:4a:5b:97:56:da:2f:81:d9:6d:09:
01:26:43:ae:97:9d:01:2d:c5:03:bb:20:94:7e:20:46:36:98:
0f:f7:ac:ad:37:8f:b9:35:d4:a1:79:dc:a1:44:56:78:a0:3e:
0c:e4:a5:00:c7:ad:fd:3b:52:0d:ee:98:e0:95:f2:7c:25:25:
00:6d:26:ad:30:a5:bb:02:57:34:c1:0b:c1:40:cf:32:7b:bb:
c5:45:58:5d:e3:86:c5:61:48:ca:a1:ab:32:d3:10:3f:17:0c:
62:83:9e:bb:1a:18:31:97:01:39:85:21:fc:5b:dd:21:a4:28:
41:f0:af:5a:1d:46:bd:dc:9d:36:d0:92:3c:ed:81:81:da:5b:
1d:f0:77:82:11:c9:e9:3a:0e:65:74:6e:08:bc:9c:68:af:44:
8f:90:2f:bc:56:b8:af:04:86:46:e8:08:18:ab:e1:fa:68:6f:
7e:e9:f7:89:4a:8d:0a:9b:ae:d0:df:67:54:57:64:8c:6c:c8:
56:22:e7:26:f9:6a:0a:c8:54:71:8f:45:cb:71:56:fa:89:90:
c7:93:99:a2:38:f3:78:a7:09:24:ab:d1:00:58:a5:06:e5:60:
bb:3c:6e:88:94:5e:ff:13:7e:59:1d:e4:be:8d:8b:d1:0c:b4:
5d:b3:cd:41
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEH0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRjIy
MTYzMkQzMTBEMDg1QTkzOTA3OTlFNUE0OUZGRjE4RUJERkRCNDAeFw0yMjA5MTUw
MjM1MDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDczQTJDQzY3RDlGRTYy
MzcwQ0MxQjE2MDYxMjc5NTNERUI5MjNGRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpDYoTLkWiODF+ufaJl52Ywl7Gc+8A4ec/pkR+Mv7Uc65VkQ2a
uo43o4INrtQ6yY22H3tC+94rfLNw/2BmPK5eRfkrtJuJ0YdM/fnWpz/EuT4Bkejf
MjFM5Jv7gUwYXVvlK61dOMUc/VPLJ/PVlDVbPZS2wBk2j8y0CvKAwbXE6YSa9mXJ
PH4PXDEx2U27tGum9Qz92Ae8IoBU7oX5ys0xPS9kl31NscJ5ewO5+UTEhayA+Qnk
4RzJa4gdaVympTAXd+JZWQ3DgbJnkYoWsJHp+m80aO/n5vHapDZ5L5OzGGihDnCY
Vp8CuVyVEc2tw/PC3csvtC0pGVJUG6ri5NaFAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUc6LMZ9n+YjcMwbFgYSeVPeuSP+AwHwYDVR0jBBgwFoAU8iFjLTENCFqTkHme
Wkn/8Y69/bQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvM0xJTksv
OGlGakxURU5DRnFUa0htZVdrbl84WTY5X2JRLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS84aUZqTFRFTkNGcVRrSG1lV2tuXzhZNjlfYlEuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS8zTElOSy9jNkxNWjluLVlqY013YkZnWVNl
VlBldVNQLUEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ3v8
MA0GCSqGSIb3DQEBCwUAA4IBAQBYrLXO+k/e0Upbl1baL4HZbQkBJkOul50BLcUD
uyCUfiBGNpgP96ytN4+5NdShedyhRFZ4oD4M5KUAx639O1IN7pjglfJ8JSUAbSat
MKW7Alc0wQvBQM8ye7vFRVhd44bFYUjKoasy0xA/Fwxig567GhgxlwE5hSH8W90h
pChB8K9aHUa93J020JI87YGB2lsd8HeCEcnpOg5ldG4IvJxor0SPkC+8VrivBIZG
6AgYq+H6aG9+6feJSo0Km67Q32dUV2SMbMhWIucm+WoKyFRxj0XLcVb6iZDHk5mi
OPN4pwkkq9EAWKUG5WC7PG6IlF7/E35ZHeS+jYvRDLRds81B
-----END CERTIFICATE-----
Generated at Fri Sep 1 08:11:08 2023 by rpki-client on console-fra.rpki-client.org