Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/6xA5bmz36F6oYiOet8m1_ShauVE.roa
File: 6xA5bmz36F6oYiOet8m1_ShauVE.roa (raw, json)
Hash identifier: uDGdiRpuZ2ZVYV9jTV/PlKSQAteydTtH2/VUkJlcjNQ=
Subject key identifier: EB:10:39:6E:6C:F7:E8:5E:A8:62:23:9E:B7:C9:B5:FD:28:5A:B9:51
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 112C
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/6xA5bmz36F6oYiOet8m1_ShauVE.roa
Signing time: Tue 01 Aug 2023 05:15:22 +0000
ROA not before: Tue 01 Aug 2023 05:15:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24154
IP address blocks: 60.244.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4396 (0x112c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Aug 1 05:15:22 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EB10396E6CF7E85EA862239EB7C9B5FD285AB951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:83:87:37:64:52:23:3e:4b:d5:7f:d0:e6:
b5:a0:63:e1:c7:3c:5f:3a:33:a7:bb:c6:00:54:4d:
59:77:46:ad:b6:b7:e8:25:61:62:0a:fd:f8:59:a2:
88:76:2b:34:eb:73:2c:2c:81:3a:f6:29:34:84:ed:
34:53:9f:db:a2:88:67:e7:70:b9:ea:43:dd:2b:44:
8e:26:22:a5:77:f2:c5:b1:05:e0:01:bd:ce:04:5c:
38:f1:0d:3f:a6:3b:4a:0f:0d:b7:44:1b:91:f7:6b:
41:0b:cd:f2:59:0f:f5:9b:12:61:04:f0:54:85:25:
89:1d:df:16:b5:d3:e6:6d:bc:40:56:fa:f4:ec:61:
d9:24:01:c6:95:5c:4a:af:f2:f9:72:ba:35:ca:be:
4a:aa:13:d7:00:28:6e:78:51:a4:c8:39:b9:38:8a:
1f:dc:58:3d:3a:1e:33:94:24:c9:c8:89:34:f2:e1:
64:47:c3:8e:30:01:8f:eb:d7:79:75:2a:6d:d2:b5:
d8:d2:a0:11:d2:75:37:75:71:72:29:61:9e:27:ac:
c7:68:61:b7:47:7f:a0:80:4b:1e:22:e3:a1:de:91:
e6:89:70:b5:8d:a4:56:3f:de:f3:11:38:79:03:c9:
20:8c:61:0e:a4:c4:9c:98:25:98:75:39:46:46:38:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:10:39:6E:6C:F7:E8:5E:A8:62:23:9E:B7:C9:B5:FD:28:5A:B9:51
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/6xA5bmz36F6oYiOet8m1_ShauVE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.244.2.0/24
Signature Algorithm: sha256WithRSAEncryption
41:b6:35:a9:4f:65:fd:5d:b5:e9:86:11:d7:87:57:d8:34:a7:
94:be:60:de:ee:c5:4d:af:9c:60:79:2b:f4:c7:24:8f:e1:f2:
a3:ec:73:ea:c2:c0:57:ac:0f:ab:8f:78:75:c9:18:28:d6:ad:
c3:e3:bd:23:17:14:fe:1a:a6:6e:0d:cd:4a:15:22:d5:ce:6f:
b1:67:4f:79:d0:48:e7:59:37:92:5e:09:4e:b7:8f:dc:27:23:
b0:1c:59:1e:d2:6e:c0:26:70:c2:16:db:aa:3b:a2:cf:64:02:
0a:2c:f2:63:2f:ae:59:06:46:d3:9a:79:9c:75:82:be:36:a1:
76:00:5f:f9:0f:ef:39:a9:76:f6:c4:79:c5:a2:19:c2:00:1d:
60:20:2f:55:24:4b:84:8f:c7:be:f8:20:4e:92:f5:cc:bf:ec:
5f:81:b0:91:7d:fa:4b:88:fb:55:5a:1b:67:32:84:73:1a:98:
4e:c3:ef:97:14:a4:3b:3a:a9:dc:6c:1f:f4:fd:cc:e9:d4:5b:
d6:45:9e:f7:fd:4f:1d:99:87:a3:5d:61:de:4f:23:49:40:de:
40:9e:8e:59:58:b3:28:47:71:26:76:93:07:71:6d:78:7f:4c:
d8:11:3c:48:b5:f9:ae:00:6a:98:4b:a6:a4:00:55:65:66:c6:
5a:66:bd:ed
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICESwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA4MDEw
NTE1MjJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEVCMTAzOTZFNkNGN0U4
NUVBODYyMjM5RUI3QzlCNUZEMjg1QUI5NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCX+4OHN2RSIz5L1X/Q5rWgY+HHPF86M6e7xgBUTVl3Rq22t+gl
YWIK/fhZooh2KzTrcywsgTr2KTSE7TRTn9uiiGfncLnqQ90rRI4mIqV38sWxBeAB
vc4EXDjxDT+mO0oPDbdEG5H3a0ELzfJZD/WbEmEE8FSFJYkd3xa10+ZtvEBW+vTs
YdkkAcaVXEqv8vlyujXKvkqqE9cAKG54UaTIObk4ih/cWD06HjOUJMnIiTTy4WRH
w44wAY/r13l1Km3StdjSoBHSdTd1cXIpYZ4nrMdoYbdHf6CASx4i46HekeaJcLWN
pFY/3vMROHkDySCMYQ6kxJyYJZh1OUZGOPGBAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU6xA5bmz36F6oYiOet8m1/ShauVEwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvNnhBNWJtejM2RjZvWWlPZXQ4bTFf
U2hhdVZFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADz0AjAN
BgkqhkiG9w0BAQsFAAOCAQEAQbY1qU9l/V216YYR14dX2DSnlL5g3u7FTa+cYHkr
9Mckj+Hyo+xz6sLAV6wPq494dckYKNatw+O9IxcU/hqmbg3NShUi1c5vsWdPedBI
51k3kl4JTreP3CcjsBxZHtJuwCZwwhbbqjuiz2QCCizyYy+uWQZG05p5nHWCvjah
dgBf+Q/vOal29sR5xaIZwgAdYCAvVSRLhI/HvvggTpL1zL/sX4GwkX36S4j7VVob
ZzKEcxqYTsPvlxSkOzqp3Gwf9P3M6dRb1kWe9/1PHZmHo11h3k8jSUDeQJ6OWViz
KEdxJnaTB3FteH9M2BE8SLX5rgBqmEumpABVZWbGWma97Q==
-----END CERTIFICATE-----
Generated at Fri Sep 1 08:37:44 2023 by rpki-client on console-fra.rpki-client.org