Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/qRyejQLiDCY7ziO2PdsWpW5WkXE.roa
File: qRyejQLiDCY7ziO2PdsWpW5WkXE.roa (raw, json)
Hash identifier: V9waWbHS8GHJ92WjriHzw/0YNhw1Xtpr9KfcaZ6tKqg=
Subject key identifier: A9:1C:9E:8D:02:E2:0C:26:3B:CE:23:B6:3D:DB:16:A5:6E:56:91:71
Certificate issuer: /CN=57A994BD60555145CB6452DC6A980FC851136BDA
Certificate serial: 0336
Authority key identifier: 57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/qRyejQLiDCY7ziO2PdsWpW5WkXE.roa
Signing time: Thu 15 Sep 2022 02:34:46 +0000
ROA not before: Thu 15 Sep 2022 02:34:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 60614
IP address blocks: 103.156.184.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 822 (0x336)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57A994BD60555145CB6452DC6A980FC851136BDA
Validity
Not Before: Sep 15 02:34:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A91C9E8D02E20C263BCE23B63DDB16A56E569171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7e:6d:b8:73:89:0a:25:1b:57:1a:87:b9:75:
18:79:26:01:36:2c:e3:5c:65:4a:85:aa:fe:fd:f6:
a3:6a:65:a4:d9:eb:df:e1:63:b7:b0:e3:1d:9c:af:
2b:73:9b:53:cf:86:8b:46:f6:68:6f:aa:16:85:27:
c5:e7:12:0c:10:7e:7f:ff:dd:bd:33:93:82:69:f8:
2d:92:50:d6:a8:a7:37:3a:73:03:85:35:8e:ff:16:
cd:51:20:f2:11:9b:ff:27:35:f0:6d:2a:bd:de:72:
f2:ad:7d:1a:ba:98:46:bd:a3:fe:06:9a:58:b7:74:
68:1d:bb:35:66:c7:1b:16:45:c3:7c:63:e3:5c:1b:
d0:e4:3e:62:89:67:48:e9:d7:d2:59:d3:0e:15:4d:
0d:71:c1:b3:a6:27:96:11:25:b2:31:50:b6:6d:2e:
5d:ae:87:46:f7:c3:43:ef:88:00:72:9f:34:f0:35:
eb:1b:40:ae:ca:7c:cc:0b:00:65:67:4f:d2:93:89:
91:8d:24:39:2c:c7:13:82:2a:3b:7f:57:2a:2a:30:
56:71:9d:3a:0b:e2:95:c0:fd:dd:34:ab:99:99:e5:
85:30:16:f1:4b:1e:bc:b0:8e:4c:61:ec:5f:42:2c:
e1:a2:4e:f5:24:4d:da:11:38:2a:f5:30:f1:fe:25:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1C:9E:8D:02:E2:0C:26:3B:CE:23:B6:3D:DB:16:A5:6E:56:91:71
X509v3 Authority Key Identifier:
keyid:57:A9:94:BD:60:55:51:45:CB:64:52:DC:6A:98:0F:C8:51:13:6B:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/V6mUvWBVUUXLZFLcapgPyFETa9o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/V6mUvWBVUUXLZFLcapgPyFETa9o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ALLPASS/qRyejQLiDCY7ziO2PdsWpW5WkXE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.184.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:db:03:3c:25:7d:b7:36:1b:2b:fa:08:86:cd:fd:e5:11:70:
54:8d:04:99:01:8f:a2:83:aa:8a:28:4e:7e:ed:fc:94:d5:74:
6b:f0:2b:11:95:c9:78:e3:71:f4:0d:db:91:01:09:69:76:cf:
e9:cc:3c:61:44:65:26:8d:c9:4e:db:63:57:db:22:31:7e:62:
3a:79:8b:e9:40:69:ba:5b:d6:39:68:59:7c:35:0b:d3:b0:7d:
4b:07:6c:ef:35:43:26:3c:88:cf:a4:64:c8:ff:46:b5:d9:55:
0a:1a:dc:66:80:78:12:f5:1a:fd:05:b0:9b:65:c2:e2:b9:c7:
89:99:e1:18:b1:cb:1a:75:46:76:44:82:ca:c1:5d:18:ab:9d:
8c:0c:bb:34:76:52:ca:46:4e:0a:3d:c1:15:16:40:7e:f7:56:
ed:40:96:4d:2e:03:62:a4:32:92:68:1b:45:c6:46:91:75:2d:
49:5b:50:da:9d:27:7d:6e:20:af:c4:6b:be:7c:ff:7f:8f:51:
5c:c5:6c:a6:58:d1:3d:5c:06:56:ae:78:b1:8c:10:01:56:2b:
9f:72:e9:35:61:03:47:32:d6:d9:89:69:48:16:eb:2a:1d:23:
9b:34:dc:47:cd:19:c9:94:15:ff:61:42:1b:2b:0f:89:c1:85:
95:62:9a:ac
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICAzYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTdB
OTk0QkQ2MDU1NTE0NUNCNjQ1MkRDNkE5ODBGQzg1MTEzNkJEQTAeFw0yMjA5MTUw
MjM0NDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEE5MUM5RThEMDJFMjBD
MjYzQkNFMjNCNjNEREIxNkE1NkU1NjkxNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUfm24c4kKJRtXGoe5dRh5JgE2LONcZUqFqv799qNqZaTZ69/h
Y7ew4x2crytzm1PPhotG9mhvqhaFJ8XnEgwQfn//3b0zk4Jp+C2SUNaopzc6cwOF
NY7/Fs1RIPIRm/8nNfBtKr3ecvKtfRq6mEa9o/4Gmli3dGgduzVmxxsWRcN8Y+Nc
G9DkPmKJZ0jp19JZ0w4VTQ1xwbOmJ5YRJbIxULZtLl2uh0b3w0PviABynzTwNesb
QK7KfMwLAGVnT9KTiZGNJDksxxOCKjt/VyoqMFZxnToL4pXA/d00q5mZ5YUwFvFL
Hrywjkxh7F9CLOGiTvUkTdoROCr1MPH+JdMxAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUqRyejQLiDCY7ziO2PdsWpW5WkXEwHwYDVR0jBBgwFoAUV6mUvWBVUUXLZFLc
apgPyFETa9owGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQUxMUEFT
Uy9WNm1VdldCVlVVWExaRkxjYXBnUHlGRVRhOW8uY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1Y2bVV2V0JWVVVYTFpGTGNhcGdQeUZFVGE5by5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0FMTFBBU1MvcVJ5ZWpRTGlEQ1k3emlP
MlBkc1dwVzVXa1hFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AWecuDANBgkqhkiG9w0BAQsFAAOCAQEAvdsDPCV9tzYbK/oIhs395RFwVI0EmQGP
ooOqiihOfu38lNV0a/ArEZXJeONx9A3bkQEJaXbP6cw8YURlJo3JTttjV9siMX5i
OnmL6UBpulvWOWhZfDUL07B9Swds7zVDJjyIz6RkyP9GtdlVChrcZoB4EvUa/QWw
m2XC4rnHiZnhGLHLGnVGdkSCysFdGKudjAy7NHZSykZOCj3BFRZAfvdW7UCWTS4D
YqQykmgbRcZGkXUtSVtQ2p0nfW4gr8Rrvnz/f49RXMVspljRPVwGVq54sYwQAVYr
n3LpNWEDRzLW2YlpSBbrKh0jmzTcR80ZyZQV/2FCGysPicGFlWKarA==
-----END CERTIFICATE-----
Generated at Fri Sep 1 08:25:17 2023 by rpki-client on console-ams.rpki-client.org