Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/o_TPfFltJ8WDYXwyziS8tXpFQY8.roa
File: o_TPfFltJ8WDYXwyziS8tXpFQY8.roa (raw, json)
Hash identifier: Movpt9Dl9fnyUc13Yu88gnMt2mBfEUDYPwqdjwJKWyY=
Subject key identifier: A3:F4:CF:7C:59:6D:27:C5:83:61:7C:32:CE:24:BC:B5:7A:45:41:8F
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 0F63
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/o_TPfFltJ8WDYXwyziS8tXpFQY8.roa
Signing time: Thu 15 Sep 2022 02:40:06 +0000
ROA not before: Thu 15 Sep 2022 02:40:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9311
IP address blocks: 210.63.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3939 (0xf63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: Sep 15 02:40:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A3F4CF7C596D27C583617C32CE24BCB57A45418F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8a:62:f6:16:75:08:d2:00:40:ee:70:84:6f:
fd:7c:af:61:fe:47:a8:6a:1f:de:41:05:2d:f2:00:
34:24:5e:de:cd:08:b4:32:80:4a:ae:ee:7f:c7:46:
b6:08:7e:96:80:2a:13:62:8e:58:f1:07:ae:81:a1:
80:00:c1:6d:bf:f4:8b:5d:d2:41:92:d5:76:2c:a1:
1c:bd:1b:f3:e6:c9:8f:06:ec:d9:97:c8:d9:2a:f1:
3d:7c:2f:4e:38:84:de:35:95:e7:81:93:0a:bb:6b:
10:c6:d3:70:c3:1b:dd:de:1f:1f:dd:6c:0e:15:d7:
cd:6a:61:7e:72:14:3e:74:8b:78:89:58:f7:5b:4e:
1c:18:7c:41:e9:b3:78:b2:23:27:c8:0d:bf:75:25:
9f:9c:98:ca:22:9d:10:79:a3:23:a7:9c:2c:b9:15:
24:01:88:07:ab:a4:4e:e7:af:08:bb:30:2d:e0:5d:
f3:65:0b:68:7b:20:06:5a:96:b8:90:55:37:d7:77:
32:9d:7b:26:5f:b7:07:a3:9d:86:95:20:ac:51:92:
b5:50:9d:8c:ed:ee:66:9c:a2:02:47:ea:ef:a4:c3:
54:75:59:d8:14:64:f5:22:4d:10:74:6f:c4:f9:00:
a0:cd:f2:c6:77:75:94:c4:74:49:fc:6a:01:09:21:
5e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F4:CF:7C:59:6D:27:C5:83:61:7C:32:CE:24:BC:B5:7A:45:41:8F
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/o_TPfFltJ8WDYXwyziS8tXpFQY8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.63.253.0/24
Signature Algorithm: sha256WithRSAEncryption
97:26:0e:df:49:04:c0:c9:5b:5a:23:35:e7:ae:8e:e8:f6:83:
cf:09:a8:db:47:7a:d1:48:c3:9b:a4:89:1e:c2:da:36:8a:78:
e8:1f:5e:2e:42:28:b1:ad:23:17:65:ac:31:3d:34:a3:fc:2a:
ac:6c:6e:70:1a:7f:3c:1d:9b:ad:49:16:cf:43:d1:11:c8:e0:
43:79:84:67:10:f0:79:72:41:aa:28:15:ec:4f:17:2d:9b:f1:
bc:c5:83:0e:b8:c9:28:ed:a3:87:27:f4:25:73:24:10:fa:1d:
02:22:cf:e4:9e:ed:76:3e:00:22:8b:8b:79:9e:3e:19:e0:ed:
fc:3a:b4:98:9b:fd:d8:27:29:bf:6a:48:dd:f1:30:35:d7:13:
4e:b6:32:cc:93:98:dd:4c:b3:8c:88:31:99:07:0c:56:16:8b:
08:cc:cc:57:42:bf:51:81:1f:f7:52:72:40:42:13:d5:6d:24:
35:88:90:a7:dd:99:71:ff:1b:90:52:e4:c1:56:64:21:f8:6f:
f7:eb:d3:24:cd:ac:fb:9b:3d:6d:aa:86:21:af:c7:27:da:c3:
e9:e3:d7:ca:6e:79:ae:7e:d2:3d:17:88:70:81:6a:11:d7:94:
d2:6e:ce:2b:44:98:30:2f:a2:aa:ca:22:6d:99:9f:71:23:8c:
cf:41:21:09
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD2MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMjA5MTUw
MjQwMDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEEzRjRDRjdDNTk2RDI3
QzU4MzYxN0MzMkNFMjRCQ0I1N0E0NTQxOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCRimL2FnUI0gBA7nCEb/18r2H+R6hqH95BBS3yADQkXt7NCLQy
gEqu7n/HRrYIfpaAKhNijljxB66BoYAAwW2/9Itd0kGS1XYsoRy9G/PmyY8G7NmX
yNkq8T18L044hN41leeBkwq7axDG03DDG93eHx/dbA4V181qYX5yFD50i3iJWPdb
ThwYfEHps3iyIyfIDb91JZ+cmMoinRB5oyOnnCy5FSQBiAerpE7nrwi7MC3gXfNl
C2h7IAZalriQVTfXdzKdeyZftwejnYaVIKxRkrVQnYzt7macogJH6u+kw1R1WdgU
ZPUiTRB0b8T5AKDN8sZ3dZTEdEn8agEJIV4RAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUo/TPfFltJ8WDYXwyziS8tXpFQY8wHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvb19UUGZGbHRKOFdEWVh3eXppUzh0
WHBGUVk4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANI//TAN
BgkqhkiG9w0BAQsFAAOCAQEAlyYO30kEwMlbWiM1566O6PaDzwmo20d60UjDm6SJ
HsLaNop46B9eLkIosa0jF2WsMT00o/wqrGxucBp/PB2brUkWz0PREcjgQ3mEZxDw
eXJBqigV7E8XLZvxvMWDDrjJKO2jhyf0JXMkEPodAiLP5J7tdj4AIouLeZ4+GeDt
/Dq0mJv92Ccpv2pI3fEwNdcTTrYyzJOY3UyzjIgxmQcMVhaLCMzMV0K/UYEf91Jy
QEIT1W0kNYiQp92Zcf8bkFLkwVZkIfhv9+vTJM2s+5s9baqGIa/HJ9rD6ePXym55
rn7SPReIcIFqEdeU0m7OK0SYMC+iqsoibZmfcSOMz0EhCQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:46 2023 by rpki-client on console-ams.rpki-client.org