Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/RFilpIUX3wRcxw6ITn3q34FYEAM.roa
File: RFilpIUX3wRcxw6ITn3q34FYEAM.roa (raw, json)
Hash identifier: VxqGR/qP+OFnFMrwcVgmNS+MTKb/X9dmIFQhz4ImCHQ=
Subject key identifier: 44:58:A5:A4:85:17:DF:04:5C:C7:0E:88:4E:7D:EA:DF:81:58:10:03
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/RFilpIUX3wRcxw6ITn3q34FYEAM.roa
Signing time: Thu 15 Sep 2022 02:40:01 +0000
ROA not before: Thu 15 Sep 2022 02:40:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131142
IP address blocks: 2404:0:7000::/36 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4458A5A48517DF045CC70E884E7DEADF81581003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:06:50:3b:53:24:89:bb:64:38:1e:83:89:47:
38:e7:5e:49:af:3a:b2:b2:59:62:a4:2e:71:45:81:
4b:3c:bf:67:fa:61:75:ab:f7:62:f4:8f:49:bf:cb:
b1:89:75:93:0c:46:04:ec:cb:49:d2:70:53:85:46:
cc:94:71:aa:5e:85:21:a8:51:2c:c1:03:a3:c9:75:
d7:f5:fc:f4:6c:13:72:5b:c7:16:ae:1b:f4:45:9a:
07:68:f1:70:ce:67:35:2b:9c:65:b1:94:97:db:7c:
35:94:ef:08:ce:67:a9:1d:98:4e:a7:dc:e0:e9:b4:
eb:fb:0d:f9:97:fe:0a:42:a9:1c:d1:15:f1:2b:c9:
5b:66:36:8e:a2:f8:9c:66:29:8f:3f:2d:89:f0:95:
8c:22:d7:c0:e5:9b:98:ff:28:a2:bd:e1:b5:c3:1b:
4a:02:0b:10:0e:29:59:ef:4b:a8:45:a6:45:5e:a3:
5c:23:45:ef:a0:ec:b8:5e:45:a2:1b:ff:09:de:a1:
92:bd:74:57:85:8a:c9:ab:82:9e:94:a0:46:87:60:
fd:ad:4e:5f:77:70:c4:2d:8e:01:0d:fc:6b:73:f2:
bc:4e:60:5b:9e:3c:00:73:3a:b8:b5:4c:74:bf:de:
c7:9a:77:af:9f:56:35:3d:bc:3f:2a:a3:77:c1:a1:
a4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:58:A5:A4:85:17:DF:04:5C:C7:0E:88:4E:7D:EA:DF:81:58:10:03
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/RFilpIUX3wRcxw6ITn3q34FYEAM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:0:7000::/36
Signature Algorithm: sha256WithRSAEncryption
91:32:39:3c:6f:e7:f1:da:9b:e7:ce:8a:8f:e8:8f:e7:d2:b2:
68:c6:66:15:7c:93:e8:11:db:99:c1:c2:0c:ac:d7:62:d8:6a:
8a:42:5e:1b:a5:c5:8c:aa:89:de:ee:74:72:9c:d3:91:f1:e8:
c5:2d:61:40:00:f2:ef:51:8b:b7:a3:13:70:10:ff:53:18:3b:
10:fc:05:d7:06:54:18:f2:c1:83:1e:5f:1b:b0:a9:fb:d3:cf:
f6:a0:ff:e4:5a:f2:94:cc:2c:38:31:9a:a5:7f:25:cc:91:17:
0c:2b:0f:f4:a7:a8:6f:83:63:c4:93:b3:bf:cc:dc:65:2c:22:
4b:21:0f:76:76:f9:88:24:50:c1:69:1d:a1:1d:66:a5:42:b8:
e6:2e:6f:42:d9:3e:61:94:dc:f9:8f:79:d8:f9:d8:c5:57:91:
1d:fd:fd:8c:e6:53:be:f1:94:b0:52:ff:77:3b:cd:42:59:1f:
e0:35:db:7a:ce:e9:50:69:80:75:2c:4a:10:34:b7:3d:2e:19:
f6:ca:68:d8:e8:2a:ec:db:49:21:e7:b8:8b:cc:8e:55:f3:96:
1f:e2:42:f9:bd:be:d8:52:c8:fb:91:6c:c3:1b:f0:85:fb:62:
82:0c:9e:9e:c8:2d:3f:79:0d:bd:ba:4d:f4:d8:c5:f6:fa:c5:
fd:f7:f2:9e
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICD2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMjA5MTUw
MjQwMDFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDQ0NThBNUE0ODUxN0RG
MDQ1Q0M3MEU4ODRFN0RFQURGODE1ODEwMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNBlA7UySJu2Q4HoOJRzjnXkmvOrKyWWKkLnFFgUs8v2f6YXWr
92L0j0m/y7GJdZMMRgTsy0nScFOFRsyUcapehSGoUSzBA6PJddf1/PRsE3Jbxxau
G/RFmgdo8XDOZzUrnGWxlJfbfDWU7wjOZ6kdmE6n3ODptOv7DfmX/gpCqRzRFfEr
yVtmNo6i+JxmKY8/LYnwlYwi18Dlm5j/KKK94bXDG0oCCxAOKVnvS6hFpkVeo1wj
Re+g7LheRaIb/wneoZK9dFeFismrgp6UoEaHYP2tTl93cMQtjgEN/Gtz8rxOYFue
PABzOri1THS/3sead6+fVjU9vD8qo3fBoaQvAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQURFilpIUX3wRcxw6ITn3q34FYEAMwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvUkZpbHBJVVgzd1JjeHc2SVRuM3Ez
NEZZRUFNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBCQEAABw
MA0GCSqGSIb3DQEBCwUAA4IBAQCRMjk8b+fx2pvnzoqP6I/n0rJoxmYVfJPoEduZ
wcIMrNdi2GqKQl4bpcWMqone7nRynNOR8ejFLWFAAPLvUYu3oxNwEP9TGDsQ/AXX
BlQY8sGDHl8bsKn708/2oP/kWvKUzCw4MZqlfyXMkRcMKw/0p6hvg2PEk7O/zNxl
LCJLIQ92dvmIJFDBaR2hHWalQrjmLm9C2T5hlNz5j3nY+djFV5Ed/f2M5lO+8ZSw
Uv93O81CWR/gNdt6zulQaYB1LEoQNLc9Lhn2ymjY6Crs20kh57iLzI5V85Yf4kL5
vb7YUsj7kWzDG/CF+2KCDJ6eyC0/eQ29uk302MX2+sX99/Ke
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:44 2023 by rpki-client on console-ams.rpki-client.org