Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/_IPX9sorL0pD0TBClE5fTZiOmOw.roa
File: _IPX9sorL0pD0TBClE5fTZiOmOw.roa (raw, json)
Hash identifier: iSVeKBjWsnFTqILeEf/S82+3y/2f/4I2X/IO/S3uvpY=
Subject key identifier: FC:83:D7:F6:CA:2B:2F:4A:43:D1:30:42:94:4E:5F:4D:98:8E:98:EC
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 10C2
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/_IPX9sorL0pD0TBClE5fTZiOmOw.roa
Signing time: Tue 16 May 2023 08:36:35 +0000
ROA not before: Tue 16 May 2023 08:36:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7482
IP address blocks: 210.201.192.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4290 (0x10c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:35 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FC83D7F6CA2B2F4A43D13042944E5F4D988E98EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:f1:2b:ff:b9:88:9e:92:0f:b4:0d:ee:ae:
c9:8a:8d:da:0a:b8:04:5b:d7:e7:01:bc:69:cc:76:
74:3d:f9:c5:02:cb:a7:6e:fd:0a:1b:5e:5f:2d:d3:
43:5c:6e:92:52:eb:50:d9:00:99:2a:83:36:a7:18:
23:d1:77:e0:9a:f4:f3:b0:54:ea:56:47:09:73:8d:
11:c2:3f:be:d7:0d:09:d2:52:52:a7:2b:1a:0e:6f:
79:9b:87:e3:cd:e9:ff:b1:55:d1:02:e9:90:5b:68:
03:95:58:29:a6:bd:4f:0f:ea:89:99:0e:a6:0d:27:
bc:32:92:db:f5:a4:bf:76:63:72:fb:d3:06:c0:12:
69:e2:47:79:a3:65:39:ad:bf:06:d6:0e:02:68:92:
d4:d7:ae:3d:a6:e1:52:97:b0:ea:fa:aa:b8:39:e3:
d4:db:e8:a7:4b:40:cc:bc:0f:b7:2e:d0:f2:b5:04:
ef:71:af:09:24:e2:fd:58:d7:f7:85:04:52:0a:cc:
8a:a0:75:e5:e3:40:17:8d:14:da:96:13:23:9b:c3:
ba:4c:95:58:a2:45:7c:4b:3d:90:32:92:d1:c0:47:
63:6d:b8:60:03:5e:e3:2f:87:6c:3d:a2:d4:c6:11:
59:0e:69:12:1d:0b:d8:c5:97:56:7c:1e:b2:71:5d:
4e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:83:D7:F6:CA:2B:2F:4A:43:D1:30:42:94:4E:5F:4D:98:8E:98:EC
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/_IPX9sorL0pD0TBClE5fTZiOmOw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.192.0/18
Signature Algorithm: sha256WithRSAEncryption
bf:3b:5f:9f:ad:10:74:5e:63:2e:d8:9e:8a:2b:f3:09:3b:53:
8f:d5:06:bb:92:5f:a2:d3:fd:5b:c6:6f:e7:9d:58:81:0b:8c:
9b:a6:9e:d3:fb:18:7c:cc:03:43:51:5f:f5:af:a7:47:c9:3b:
13:6b:7d:be:6c:89:21:d8:32:8d:2e:c9:11:db:0a:2c:e6:ee:
44:c8:70:18:02:94:be:1e:56:99:dc:c6:83:84:8a:64:c1:b2:
d9:52:b4:09:57:75:8c:2a:ff:81:45:eb:d9:68:fc:6e:8e:9a:
fe:a4:a0:9b:95:25:d5:e8:40:3c:3d:84:c3:a5:38:ce:11:ff:
da:2f:6d:20:a8:66:80:de:23:a6:8a:fc:c0:e0:75:88:e9:97:
5b:4e:ea:54:2a:f8:32:70:8d:07:fd:65:09:f3:bf:2e:e3:68:
aa:ac:52:6d:ff:83:e8:d4:89:9b:3e:4b:74:73:fd:36:b0:90:
51:5f:d9:68:9a:83:54:d3:cf:c9:43:1c:e0:db:90:d6:5c:5f:
59:ed:96:36:5a:04:51:d1:65:9e:6d:f9:32:74:3c:48:9b:43:
58:29:bb:ef:86:f8:65:41:ae:1e:da:98:63:84:e5:a3:2e:da:
0c:b4:e8:a7:96:f5:ab:7d:12:93:91:6c:15:8e:01:5b:b5:26:
46:2d:52:ce
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEMIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA1MTYw
ODM2MzVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEZDODNEN0Y2Q0EyQjJG
NEE0M0QxMzA0Mjk0NEU1RjREOTg4RTk4RUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC00PEr/7mInpIPtA3ursmKjdoKuARb1+cBvGnMdnQ9+cUCy6du
/QobXl8t00NcbpJS61DZAJkqgzanGCPRd+Ca9POwVOpWRwlzjRHCP77XDQnSUlKn
KxoOb3mbh+PN6f+xVdEC6ZBbaAOVWCmmvU8P6omZDqYNJ7wyktv1pL92Y3L70wbA
EmniR3mjZTmtvwbWDgJoktTXrj2m4VKXsOr6qrg549Tb6KdLQMy8D7cu0PK1BO9x
rwkk4v1Y1/eFBFIKzIqgdeXjQBeNFNqWEyObw7pMlViiRXxLPZAyktHAR2NtuGAD
XuMvh2w9otTGEVkOaRIdC9jFl1Z8HrJxXU7NAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU/IPX9sorL0pD0TBClE5fTZiOmOwwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvX0lQWDlzb3JMMHBEMFRCQ2xFNWZU
WmlPbU93LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBtLJwDAN
BgkqhkiG9w0BAQsFAAOCAQEAvztfn60QdF5jLtieiivzCTtTj9UGu5JfotP9W8Zv
551YgQuMm6ae0/sYfMwDQ1Ff9a+nR8k7E2t9vmyJIdgyjS7JEdsKLObuRMhwGAKU
vh5WmdzGg4SKZMGy2VK0CVd1jCr/gUXr2Wj8bo6a/qSgm5Ul1ehAPD2Ew6U4zhH/
2i9tIKhmgN4jpor8wOB1iOmXW07qVCr4MnCNB/1lCfO/LuNoqqxSbf+D6NSJmz5L
dHP9NrCQUV/ZaJqDVNPPyUMc4NuQ1lxfWe2WNloEUdFlnm35MnQ8SJtDWCm774b4
ZUGuHtqYY4Tloy7aDLTop5b1q30Sk5FsFY4BW7UmRi1Szg==
-----END CERTIFICATE-----
Generated at Fri Sep 1 08:25:18 2023 by rpki-client on console-ams.rpki-client.org