Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/fGcpz0VK5zaolC4HwJpIOthzSmI.roa
File: fGcpz0VK5zaolC4HwJpIOthzSmI.roa (raw, json)
Hash identifier: 6VvJJcJUyVKkaAZVig96mh2BcPPcvkuk2rYRrYVr2ts=
Subject key identifier: 7C:67:29:CF:45:4A:E7:36:A8:94:2E:07:C0:9A:48:3A:D8:73:4A:62
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1095
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/fGcpz0VK5zaolC4HwJpIOthzSmI.roa
Signing time: Tue 16 May 2023 08:36:22 +0000
ROA not before: Tue 16 May 2023 08:36:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131591
IP address blocks: 103.231.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4245 (0x1095)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:22 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7C6729CF454AE736A8942E07C09A483AD8734A62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:28:85:1b:25:40:12:6a:0c:68:18:63:4c:76:
dc:51:91:ab:cf:bc:96:15:f8:aa:6d:35:8f:c6:4c:
78:df:b3:b1:42:09:f7:88:5e:f0:c9:c1:20:29:57:
96:f1:9d:67:1a:d6:94:73:2f:9d:c7:bd:a8:7e:b0:
85:f0:6d:57:95:e4:51:66:a3:5c:a4:89:da:5f:bb:
3f:9b:9e:69:de:f5:f8:4e:aa:3f:f4:5a:10:ba:a5:
fb:30:20:30:dd:fc:12:4f:66:ce:30:e7:d6:a8:3e:
e5:f0:60:9b:09:14:26:05:d4:58:42:4b:21:32:3d:
c0:7e:3b:5b:ff:29:e7:7e:db:91:d3:db:51:1f:16:
9a:49:14:d3:94:90:11:99:51:26:bf:f7:d3:7b:6f:
4e:55:8b:66:87:a9:c6:53:94:1c:1b:44:d1:4f:5d:
62:91:8f:ab:7e:cc:a1:be:cb:61:2b:04:66:c4:d5:
5a:d0:13:33:1f:c8:6b:36:c6:89:ee:f7:cd:80:cb:
c2:e3:15:c9:98:e7:7d:a6:28:ce:bf:34:4b:b6:01:
6f:5f:02:98:28:49:91:2d:b7:5e:ea:2d:a5:c6:07:
ce:47:ab:27:a3:bc:a5:b3:6a:1e:85:0d:5e:a8:c2:
2c:ab:70:2b:6a:d6:51:cd:75:97:4c:7c:ae:52:07:
49:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:67:29:CF:45:4A:E7:36:A8:94:2E:07:C0:9A:48:3A:D8:73:4A:62
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/fGcpz0VK5zaolC4HwJpIOthzSmI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.231.50.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ad:c9:79:c7:40:4a:b0:0b:ca:d7:0e:9e:70:e6:82:b9:24:
10:8e:8e:53:08:56:7d:38:72:be:5a:8f:4e:5b:30:1d:74:d4:
29:dc:ba:ee:6b:6f:ee:c4:dd:3d:15:f1:3b:d3:e7:9b:3d:52:
e2:bf:36:fa:ff:35:fe:03:81:02:b3:b3:02:b8:e1:0e:89:ea:
0b:fe:1b:69:cd:a1:df:6f:ec:fe:87:75:f8:e6:8d:27:95:54:
ee:4c:3f:2f:c0:bc:c0:e9:0f:df:e0:f7:75:ff:ac:e6:bb:36:
4f:c4:af:42:6a:f8:27:61:05:25:ae:19:50:b9:e0:eb:d0:fc:
d1:d2:9a:1c:28:3d:29:23:25:59:d7:ba:d7:2f:94:a0:19:e4:
47:af:48:9c:cc:cf:16:e5:1e:66:8c:95:c3:13:2f:85:f7:79:
b5:94:23:d5:57:23:b7:5e:12:3a:8d:9c:ce:f2:50:71:04:83:
b0:19:77:14:2e:5d:a6:2d:91:54:7c:fe:8f:e6:43:db:83:ab:
13:ec:7e:f7:c6:5e:8f:8a:93:5c:4f:b3:1b:c3:79:4a:8b:5d:
6f:1e:b1:46:51:c4:4a:67:1b:10:b8:5e:72:da:85:77:d0:f3:
6d:d8:c2:c2:c2:95:6e:b3:ca:98:40:aa:0d:03:ed:4d:b7:86:
d6:6b:cf:05
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEJUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA1MTYw
ODM2MjJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDdDNjcyOUNGNDU0QUU3
MzZBODk0MkUwN0MwOUE0ODNBRDg3MzRBNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDjKIUbJUASagxoGGNMdtxRkavPvJYV+KptNY/GTHjfs7FCCfeI
XvDJwSApV5bxnWca1pRzL53Hvah+sIXwbVeV5FFmo1ykidpfuz+bnmne9fhOqj/0
WhC6pfswIDDd/BJPZs4w59aoPuXwYJsJFCYF1FhCSyEyPcB+O1v/Ked+25HT21Ef
FppJFNOUkBGZUSa/99N7b05Vi2aHqcZTlBwbRNFPXWKRj6t+zKG+y2ErBGbE1VrQ
EzMfyGs2xonu982Ay8LjFcmY532mKM6/NEu2AW9fApgoSZEtt17qLaXGB85Hqyej
vKWzah6FDV6owiyrcCtq1lHNdZdMfK5SB0mhAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUfGcpz0VK5zaolC4HwJpIOthzSmIwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvZkdjcHowVks1emFvbEM0SHdKcElP
dGh6U21JLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfnMjAN
BgkqhkiG9w0BAQsFAAOCAQEAHa3JecdASrALytcOnnDmgrkkEI6OUwhWfThyvlqP
TlswHXTUKdy67mtv7sTdPRXxO9Pnmz1S4r82+v81/gOBArOzArjhDonqC/4bac2h
32/s/od1+OaNJ5VU7kw/L8C8wOkP3+D3df+s5rs2T8SvQmr4J2EFJa4ZULng69D8
0dKaHCg9KSMlWde61y+UoBnkR69InMzPFuUeZoyVwxMvhfd5tZQj1Vcjt14SOo2c
zvJQcQSDsBl3FC5dpi2RVHz+j+ZD24OrE+x+98Zej4qTXE+zG8N5Sotdbx6xRlHE
SmcbELhectqFd9DzbdjCwsKVbrPKmECqDQPtTbeG1mvPBQ==
-----END CERTIFICATE-----
Generated at Fri Sep 1 08:25:18 2023 by rpki-client on console-ams.rpki-client.org