Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/HYmAQYj2O30QRW_wqGhEBOsKvZY.roa
File: HYmAQYj2O30QRW_wqGhEBOsKvZY.roa (raw, json)
Hash identifier: nOfADPb2r26KJxXnU/hSPoJtrmB6YOGTxKssUYyH6SU=
Subject key identifier: 1D:89:80:41:88:F6:3B:7D:10:45:6F:F0:A8:68:44:04:EB:0A:BD:96
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F75
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/HYmAQYj2O30QRW_wqGhEBOsKvZY.roa
Signing time: Fri 07 Oct 2022 06:08:27 +0000
ROA not before: Fri 07 Oct 2022 06:08:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9922
IP address blocks: 124.218.160.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3957 (0xf75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Oct 7 06:08:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1D89804188F63B7D10456FF0A8684404EB0ABD96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ee:b9:39:18:9a:0a:c3:06:24:40:41:f3:b2:
57:a2:f1:aa:dc:6e:db:d7:1c:14:ef:75:ef:e9:35:
b2:18:3c:a1:c0:7b:f6:84:6a:c6:2f:a2:34:03:4c:
83:a0:c0:47:ea:f0:3c:b4:32:64:c3:48:91:d9:80:
f7:7e:94:4a:5a:87:54:10:23:92:04:d4:f9:df:cd:
6c:7c:fa:44:ce:73:d8:c3:bd:9f:cd:2f:06:de:78:
95:c2:c5:8f:19:ab:ec:46:25:9d:d0:ec:60:de:2b:
f3:87:10:a1:0d:16:50:7b:1b:d4:1d:61:60:6f:ce:
dc:47:09:d0:e5:3f:a9:b4:cb:7a:53:a1:e4:e2:a3:
5b:51:2e:50:66:ca:76:c6:23:ed:ef:f7:c0:14:41:
ed:1d:f8:49:d6:e9:05:cd:da:60:a6:02:2f:91:84:
75:05:1f:8c:2a:83:ff:e1:fc:18:f0:8d:e7:5d:d0:
80:d9:38:09:0c:91:e0:a6:6e:c1:ae:9e:f0:8d:5f:
67:07:69:80:40:d8:78:d4:13:75:d2:d1:5c:a2:4c:
a8:b9:48:d3:07:bf:9e:8e:fa:81:f3:23:46:ee:df:
e3:be:21:ee:17:ad:66:5c:ab:50:5a:7d:e3:d5:fc:
f8:d3:2e:4c:c2:ff:e5:18:a5:26:f3:f9:8a:73:43:
d8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:89:80:41:88:F6:3B:7D:10:45:6F:F0:A8:68:44:04:EB:0A:BD:96
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/HYmAQYj2O30QRW_wqGhEBOsKvZY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.160.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:e0:ac:ea:93:1f:82:7e:75:74:4b:81:b2:92:39:fb:1a:ec:
f1:80:19:8c:87:f3:90:0e:ab:15:01:83:19:59:81:78:71:1d:
c7:48:f5:ee:0b:37:12:90:69:15:05:61:5b:35:14:93:eb:ea:
8f:9a:76:8f:cf:a5:01:df:4e:d9:0c:97:40:f5:79:1c:8c:c9:
b9:1e:4b:77:15:fa:0d:e6:d7:61:7e:b2:bc:6c:49:00:67:d2:
e0:24:1e:71:f6:03:09:90:8a:ac:09:55:5a:de:e6:0c:33:ff:
63:54:d3:ed:a7:6f:3e:9f:e4:44:58:f5:33:cd:c8:ef:d4:e0:
7f:a0:23:38:1e:59:c1:e3:8b:4b:68:8d:26:f7:7d:14:97:ef:
0c:82:c0:55:45:d5:b8:2a:df:f3:72:bf:d5:49:17:5e:8f:23:
4e:46:05:62:c0:47:e0:e4:58:69:2b:26:71:60:20:52:9a:1f:
8e:c6:04:34:7d:0b:93:3f:03:75:74:06:3a:05:50:28:44:61:
10:33:33:e3:92:4e:55:3a:42:43:dc:01:38:7e:8e:62:f3:dc:
ca:74:5d:c4:42:84:d0:49:3a:99:29:db:0d:da:c0:6a:fb:57:
a7:6c:a3:c9:e5:19:f0:a1:01:fc:ff:c0:77:78:bd:62:ef:ea:
1c:15:ac:21
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD3UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMjEwMDcw
NjA4MjdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDFEODk4MDQxODhGNjNC
N0QxMDQ1NkZGMEE4Njg0NDA0RUIwQUJEOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDV7rk5GJoKwwYkQEHzslei8arcbtvXHBTvde/pNbIYPKHAe/aE
asYvojQDTIOgwEfq8Dy0MmTDSJHZgPd+lEpah1QQI5IE1PnfzWx8+kTOc9jDvZ/N
LwbeeJXCxY8Zq+xGJZ3Q7GDeK/OHEKENFlB7G9QdYWBvztxHCdDlP6m0y3pToeTi
o1tRLlBmynbGI+3v98AUQe0d+EnW6QXN2mCmAi+RhHUFH4wqg//h/Bjwjedd0IDZ
OAkMkeCmbsGunvCNX2cHaYBA2HjUE3XS0VyiTKi5SNMHv56O+oHzI0bu3+O+Ie4X
rWZcq1BafePV/PjTLkzC/+UYpSbz+YpzQ9ivAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUHYmAQYj2O30QRW/wqGhEBOsKvZYwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvSFltQVFZajJPMzBRUldfd3FHaEVC
T3NLdlpZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnzaoDAN
BgkqhkiG9w0BAQsFAAOCAQEAfOCs6pMfgn51dEuBspI5+xrs8YAZjIfzkA6rFQGD
GVmBeHEdx0j17gs3EpBpFQVhWzUUk+vqj5p2j8+lAd9O2QyXQPV5HIzJuR5LdxX6
DebXYX6yvGxJAGfS4CQecfYDCZCKrAlVWt7mDDP/Y1TT7advPp/kRFj1M83I79Tg
f6AjOB5ZweOLS2iNJvd9FJfvDILAVUXVuCrf83K/1UkXXo8jTkYFYsBH4ORYaSsm
cWAgUpofjsYENH0Lkz8DdXQGOgVQKERhEDMz45JOVTpCQ9wBOH6OYvPcynRdxEKE
0Ek6mSnbDdrAavtXp2yjyeUZ8KEB/P/Ad3i9Yu/qHBWsIQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:44 2023 by rpki-client on console-ams.rpki-client.org