Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/V1N6oVjgvz3O9Ms7q7XqKRnkxeE.roa
File: V1N6oVjgvz3O9Ms7q7XqKRnkxeE.roa (raw, json)
Hash identifier: 58LHM8KvpE0veSmxWsDwDS7/ZYPL7RdoPD2liLqZejE=
Subject key identifier: 57:53:7A:A1:58:E0:BF:3D:CE:F4:CB:3B:AB:B5:EA:29:19:E4:C5:E1
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/V1N6oVjgvz3O9Ms7q7XqKRnkxeE.roa
Signing time: Thu 15 Sep 2022 02:39:49 +0000
ROA not before: Thu 15 Sep 2022 02:39:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 24154
IP address blocks: 203.79.200.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:39:49 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=57537AA158E0BF3DCEF4CB3BABB5EA2919E4C5E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0c:62:28:d6:bd:1e:cb:4a:fc:2e:a9:63:51:
17:5d:89:c6:2d:72:ea:ea:ec:55:e6:36:50:f4:6a:
d2:58:e5:79:9c:6e:b2:5a:a5:d6:2b:37:7e:f7:43:
a9:fa:02:88:17:a1:42:d1:66:1f:76:e7:f3:ee:13:
78:24:d0:0d:ed:e0:7f:03:73:1b:91:75:07:e2:79:
93:43:c6:e6:48:a6:4f:51:37:3c:bd:b0:60:6e:7a:
f6:02:c6:a2:8d:bb:b0:95:22:c3:cc:0a:6a:c0:bd:
06:af:1a:fd:cc:26:c0:e5:22:a8:6d:46:5b:b3:ab:
88:24:5b:4e:ba:71:bb:50:56:cd:0d:e4:d2:f9:53:
bd:7a:9f:08:7e:b2:9a:67:96:11:f1:2d:af:22:8e:
48:a7:aa:ce:60:6f:81:15:7f:bb:ee:e4:34:df:d1:
e2:f7:22:3f:dd:db:29:7f:0f:2d:5b:62:bb:42:8a:
c0:bd:f9:ac:8a:b7:1c:b1:e2:73:6b:1f:9d:d7:99:
b0:e7:c2:b5:8d:ff:e4:b0:cb:53:a5:26:be:4f:38:
a6:ff:1d:44:c3:e6:35:97:ac:b6:78:9e:8b:9b:5b:
d7:2b:f7:4f:ae:d9:6d:94:30:dc:e3:53:71:49:68:
b7:55:8e:b4:90:f5:5c:ed:1a:9e:1c:3f:9c:9e:6c:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:53:7A:A1:58:E0:BF:3D:CE:F4:CB:3B:AB:B5:EA:29:19:E4:C5:E1
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/V1N6oVjgvz3O9Ms7q7XqKRnkxeE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.79.200.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:b8:13:0d:9b:16:55:e7:fa:fe:ca:9f:47:9d:e3:4e:af:75:
6a:ad:e6:1b:a1:56:9d:c6:52:90:ff:95:29:3e:9f:e6:73:ad:
21:b5:d8:04:38:74:52:84:82:2b:85:83:b0:bb:b5:52:ad:35:
f2:24:cb:1a:fa:69:91:28:d0:94:cc:2c:ca:64:84:b9:34:0b:
10:36:2e:d1:a0:05:99:26:5c:e4:85:96:01:e2:05:39:fb:45:
b2:fc:65:8d:02:16:91:61:2d:46:b0:32:38:e7:be:a5:4d:b1:
f6:bc:44:0a:95:93:cb:68:de:ee:b5:d4:9f:88:57:cd:34:a4:
fc:68:ac:8e:26:75:7e:f8:02:23:16:81:80:de:24:a1:6e:ee:
a5:1d:a2:bb:19:35:18:d8:c7:d4:55:4e:40:36:e7:7f:d5:20:
0c:bf:8b:7c:54:7f:32:71:26:44:cc:09:c5:8b:31:95:48:04:
4c:33:72:b7:f9:e9:ec:b9:d5:d9:08:f9:fb:bf:8d:ec:22:c4:
b4:1e:48:1e:d1:01:39:8c:41:4a:e4:ab:4c:48:9d:49:79:65:
73:b2:8e:2f:5d:95:3d:4a:24:8a:84:23:96:df:9e:17:e8:5d:
5b:e1:c1:fa:a5:32:73:3c:b6:a4:d3:27:8a:5d:c8:8e:6e:be:
4e:d4:55:8a
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMjA5MTUw
MjM5NDlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDU3NTM3QUExNThFMEJG
M0RDRUY0Q0IzQkFCQjVFQTI5MTlFNEM1RTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/DGIo1r0ey0r8LqljURddicYtcurq7FXmNlD0atJY5XmcbrJa
pdYrN373Q6n6AogXoULRZh925/PuE3gk0A3t4H8DcxuRdQfieZNDxuZIpk9RNzy9
sGBuevYCxqKNu7CVIsPMCmrAvQavGv3MJsDlIqhtRluzq4gkW066cbtQVs0N5NL5
U716nwh+sppnlhHxLa8ijkinqs5gb4EVf7vu5DTf0eL3Ij/d2yl/Dy1bYrtCisC9
+ayKtxyx4nNrH53XmbDnwrWN/+Swy1OlJr5POKb/HUTD5jWXrLZ4noubW9cr90+u
2W2UMNzjU3FJaLdVjrSQ9VztGp4cP5yebN1pAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUV1N6oVjgvz3O9Ms7q7XqKRnkxeEwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvVjFONm9Wamd2ejNPOU1zN3E3WHFL
Um5reGVFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAstPyDAN
BgkqhkiG9w0BAQsFAAOCAQEAbbgTDZsWVef6/sqfR53jTq91aq3mG6FWncZSkP+V
KT6f5nOtIbXYBDh0UoSCK4WDsLu1Uq018iTLGvppkSjQlMwsymSEuTQLEDYu0aAF
mSZc5IWWAeIFOftFsvxljQIWkWEtRrAyOOe+pU2x9rxECpWTy2je7rXUn4hXzTSk
/GisjiZ1fvgCIxaBgN4koW7upR2iuxk1GNjH1FVOQDbnf9UgDL+LfFR/MnEmRMwJ
xYsxlUgETDNyt/np7LnV2Qj5+7+N7CLEtB5IHtEBOYxBSuSrTEidSXllc7KOL12V
PUokioQjlt+eF+hdW+HB+qUyczy2pNMnil3Ijm6+TtRVig==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:55 2023 by rpki-client on console-fra.rpki-client.org