Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/GZiOWqiYjhynamcXzBqWv5GwrIs.roa
File: GZiOWqiYjhynamcXzBqWv5GwrIs.roa (raw, json)
Hash identifier: mFsm4IdBxrQERiHDTAf2FLLFsQaAHnMW/Jaq74RBJZY=
Subject key identifier: 19:98:8E:5A:A8:98:8E:1C:A7:6A:67:17:CC:1A:96:BF:91:B0:AC:8B
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 10CC
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/GZiOWqiYjhynamcXzBqWv5GwrIs.roa
Signing time: Tue 16 May 2023 08:36:38 +0000
ROA not before: Tue 16 May 2023 08:36:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 210.58.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4300 (0x10cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:38 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=19988E5AA8988E1CA76A6717CC1A96BF91B0AC8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e8:4b:08:79:18:ef:9b:5d:55:89:a1:95:c4:
dc:5c:2b:84:49:6b:12:e3:fa:18:4e:0d:ef:bb:2a:
1b:8c:ed:ad:04:c0:85:32:52:8c:68:c4:83:2e:85:
01:97:32:ce:c5:0b:1b:f3:4f:f3:31:78:6f:fe:f1:
24:3a:49:f2:70:e2:17:e8:a1:7d:13:7b:6c:64:ca:
c1:53:da:96:ad:36:16:cc:7d:e7:28:1d:fe:97:56:
fd:71:94:48:0a:f4:31:6d:71:6a:b6:7c:f9:f5:53:
79:e7:52:ed:ff:5c:dd:a5:d8:ec:b0:e1:c1:c2:13:
19:b4:c8:67:7e:0d:f9:d4:94:52:a3:36:9a:ea:f3:
e8:99:c7:cd:6d:ed:2e:2c:a4:07:0b:4b:63:4e:94:
db:c9:1a:89:74:a1:8a:53:02:2f:6d:6b:ac:48:3f:
9f:fb:36:97:a8:a8:ee:ec:71:87:70:c7:81:73:5d:
69:52:5b:cf:69:eb:7c:9e:f1:ae:12:3e:08:19:1c:
aa:f9:d5:b6:db:f1:dd:de:50:fd:f2:8a:8b:6e:52:
eb:3b:5b:e6:2f:8c:c0:33:0d:74:cb:8d:e9:cf:b9:
fb:91:21:55:b5:83:41:2d:96:69:c8:f1:d2:41:87:
fb:41:01:0b:55:f0:68:55:d6:e1:51:b7:94:d5:f1:
16:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:98:8E:5A:A8:98:8E:1C:A7:6A:67:17:CC:1A:96:BF:91:B0:AC:8B
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/GZiOWqiYjhynamcXzBqWv5GwrIs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.58.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:cb:58:03:ca:a5:cc:5e:47:da:6f:55:d9:5d:a0:c9:c1:39:
a5:4e:96:73:f2:83:fb:26:34:51:fa:76:ec:a5:04:5a:d8:19:
8b:69:64:e0:f5:2a:fd:31:c4:89:0d:da:5a:2b:11:86:43:48:
a9:29:db:a7:a3:a1:9a:19:e4:9d:70:ad:c7:78:1e:b4:fc:d1:
69:5e:5a:65:7f:26:76:86:e6:22:9a:eb:9d:55:f8:e1:05:10:
d9:64:78:49:e4:80:1a:7d:78:89:61:89:30:7d:3d:f1:3d:34:
1d:4d:27:00:c3:fa:ca:64:76:cb:80:ad:b9:2e:d1:0c:0b:0d:
e0:04:11:e6:be:1a:41:54:25:6e:6b:96:8c:3a:88:85:06:d1:
9e:76:64:c5:5d:1f:04:23:71:fc:ce:c3:4b:73:b1:a8:ac:d1:
a1:85:7a:0a:62:05:36:68:ee:d6:14:cc:20:b8:29:5d:10:bf:
0a:a1:67:04:e0:a3:29:71:c1:08:88:e6:5e:93:df:6c:87:b7:
fa:b2:ba:bd:40:93:9b:53:c8:93:ce:36:73:57:f5:7d:3f:9f:
6f:77:e1:ba:6a:11:b1:dc:55:1c:f3:79:c3:f5:19:6a:15:a2:
ae:68:05:67:e1:0e:39:12:1c:b4:0b:70:ec:51:e9:8e:c5:82:
01:4a:15:69
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICEMwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA1MTYw
ODM2MzhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDE5OTg4RTVBQTg5ODhF
MUNBNzZBNjcxN0NDMUE5NkJGOTFCMEFDOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDO6EsIeRjvm11ViaGVxNxcK4RJaxLj+hhODe+7KhuM7a0EwIUy
UoxoxIMuhQGXMs7FCxvzT/MxeG/+8SQ6SfJw4hfooX0Te2xkysFT2patNhbMfeco
Hf6XVv1xlEgK9DFtcWq2fPn1U3nnUu3/XN2l2Oyw4cHCExm0yGd+DfnUlFKjNprq
8+iZx81t7S4spAcLS2NOlNvJGol0oYpTAi9ta6xIP5/7NpeoqO7scYdwx4FzXWlS
W89p63ye8a4SPggZHKr51bbb8d3eUP3yiotuUus7W+YvjMAzDXTLjenPufuRIVW1
g0EtlmnI8dJBh/tBAQtV8GhV1uFRt5TV8RYZAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUGZiOWqiYjhynamcXzBqWv5GwrIswHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvR1ppT1dxaVlqaHluYW1jWHpCcVd2
NUd3cklzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANI6MA0G
CSqGSIb3DQEBCwUAA4IBAQCTy1gDyqXMXkfab1XZXaDJwTmlTpZz8oP7JjRR+nbs
pQRa2BmLaWTg9Sr9McSJDdpaKxGGQ0ipKduno6GaGeSdcK3HeB60/NFpXlplfyZ2
huYimuudVfjhBRDZZHhJ5IAafXiJYYkwfT3xPTQdTScAw/rKZHbLgK25LtEMCw3g
BBHmvhpBVCVua5aMOoiFBtGedmTFXR8EI3H8zsNLc7GorNGhhXoKYgU2aO7WFMwg
uCldEL8KoWcE4KMpccEIiOZek99sh7f6srq9QJObU8iTzjZzV/V9P59vd+G6ahGx
3FUc83nD9RlqFaKuaAVn4Q45Ehy0C3DsUemOxYIBShVp
-----END CERTIFICATE-----
Generated at Fri Sep 1 08:37:44 2023 by rpki-client on console-fra.rpki-client.org