Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/uI1CfTvkybXMKYVGn2stuo3NiFI.roa
File: uI1CfTvkybXMKYVGn2stuo3NiFI.roa (raw, json)
Hash identifier: Fxzc47gJtd2UD3NOy58xXq4VEBPjkJtz63tkCvYW1OE=
Subject key identifier: B8:8D:42:7D:3B:E4:C9:B5:CC:29:85:46:9F:6B:2D:BA:8D:CD:88:52
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 10DD
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/uI1CfTvkybXMKYVGn2stuo3NiFI.roa
Signing time: Tue 16 May 2023 08:36:45 +0000
ROA not before: Tue 16 May 2023 08:36:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 124.218.112.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4317 (0x10dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:45 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B88D427D3BE4C9B5CC2985469F6B2DBA8DCD8852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2e:25:ef:b8:cc:e5:8c:b4:d5:e5:3d:4c:4c:
d7:af:a3:9c:bb:07:fd:b8:ac:c0:2e:6e:c9:d0:0f:
62:e5:5d:39:57:bb:b8:cd:96:dc:f1:29:cc:67:24:
34:62:36:08:1b:04:9d:d4:68:32:36:fb:37:60:64:
e5:6e:6d:f1:96:0f:d3:05:13:2d:90:27:04:47:1e:
0b:6e:d0:0d:84:f5:c7:52:34:29:ff:e0:c7:a3:1f:
71:a7:dc:f0:f4:69:8d:2c:f7:f1:7c:c4:59:e6:c5:
6a:ba:0c:ba:b2:05:d5:2c:7e:28:fa:95:c9:b4:40:
a3:fa:d3:5d:0c:fc:98:44:3f:58:33:87:7e:06:77:
e8:f2:6e:c0:61:a8:62:03:20:75:ff:1d:b8:ec:b0:
96:dc:ef:53:15:9d:c8:c7:59:6b:24:22:00:a1:f8:
28:67:b6:9d:9a:59:a9:1a:69:e0:42:a3:da:04:16:
13:1c:67:7b:f6:52:df:cd:4e:75:b7:8c:44:bb:7e:
48:0a:20:80:b6:f9:0b:77:9d:50:ae:a9:95:a6:e7:
b0:a3:40:ee:12:65:b0:4d:5a:37:35:3b:b6:07:53:
57:f5:01:d2:b1:d5:be:40:01:19:a3:95:ff:34:25:
9b:0a:b3:e6:20:0b:fa:ce:43:32:94:fd:a0:98:8f:
45:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8D:42:7D:3B:E4:C9:B5:CC:29:85:46:9F:6B:2D:BA:8D:CD:88:52
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/uI1CfTvkybXMKYVGn2stuo3NiFI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
124.218.112.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:c2:e4:f8:40:68:6f:61:b9:d3:4e:26:90:02:45:da:1e:f8:
a0:41:95:69:86:cb:4f:81:68:4d:c7:a9:39:7b:db:7e:b1:fe:
5f:7e:c7:70:d6:c9:dd:63:19:43:90:69:bf:5a:8a:84:17:07:
21:f6:96:44:25:c0:02:dc:a3:ca:11:37:ab:18:6b:54:bc:c6:
bd:a2:35:b6:f9:b4:1a:1a:24:ba:9e:fa:00:af:9f:c1:fb:1e:
80:cb:b4:f8:d6:8d:8b:72:79:c5:ae:5b:d3:b6:b9:1e:5b:fc:
d7:c9:46:49:5b:a5:91:c0:6c:49:b4:b2:aa:a9:72:e4:5b:52:
bd:43:a1:ee:1a:19:1f:26:78:b5:44:4a:cb:19:a6:da:b2:08:
c9:0e:90:76:9c:6a:29:e6:58:25:fe:6f:db:7f:b5:e7:0f:81:
5b:5f:e5:fa:bc:c8:e6:c3:3e:55:cf:d1:18:37:64:c6:9b:b6:
32:8f:03:76:f8:60:90:2a:70:c3:fb:5c:2d:db:e3:cf:e5:7f:
cd:db:71:76:5d:5f:78:09:42:33:3b:d0:39:5a:ef:22:60:c3:
8b:5d:fe:d8:98:e7:e9:00:c9:80:7c:72:5d:b6:6e:93:be:45:
00:12:fb:67:c0:80:1e:28:d7:92:da:ec:9e:b1:fa:66:dc:c9:
80:6b:98:d8
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEN0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA1MTYw
ODM2NDVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEI4OEQ0MjdEM0JFNEM5
QjVDQzI5ODU0NjlGNkIyREJBOERDRDg4NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmLiXvuMzljLTV5T1MTNevo5y7B/24rMAubsnQD2LlXTlXu7jN
ltzxKcxnJDRiNggbBJ3UaDI2+zdgZOVubfGWD9MFEy2QJwRHHgtu0A2E9cdSNCn/
4MejH3Gn3PD0aY0s9/F8xFnmxWq6DLqyBdUsfij6lcm0QKP6010M/JhEP1gzh34G
d+jybsBhqGIDIHX/HbjssJbc71MVncjHWWskIgCh+Chntp2aWakaaeBCo9oEFhMc
Z3v2Ut/NTnW3jES7fkgKIIC2+Qt3nVCuqZWm57CjQO4SZbBNWjc1O7YHU1f1AdKx
1b5AARmjlf80JZsKs+YgC/rOQzKU/aCYj0U1AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUuI1CfTvkybXMKYVGn2stuo3NiFIwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvdUkxQ2ZUdmt5YlhNS1lWR24yc3R1
bzNOaUZJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3zacDAN
BgkqhkiG9w0BAQsFAAOCAQEAOsLk+EBob2G5004mkAJF2h74oEGVaYbLT4FoTcep
OXvbfrH+X37HcNbJ3WMZQ5Bpv1qKhBcHIfaWRCXAAtyjyhE3qxhrVLzGvaI1tvm0
Ghokup76AK+fwfsegMu0+NaNi3J5xa5b07a5Hlv818lGSVulkcBsSbSyqqly5FtS
vUOh7hoZHyZ4tURKyxmm2rIIyQ6QdpxqKeZYJf5v23+15w+BW1/l+rzI5sM+Vc/R
GDdkxpu2Mo8DdvhgkCpww/tcLdvjz+V/zdtxdl1feAlCMzvQOVrvImDDi13+2Jjn
6QDJgHxyXbZuk75FABL7Z8CAHijXktrsnrH6ZtzJgGuY2A==
-----END CERTIFICATE-----
Generated at Fri Sep 1 08:25:19 2023 by rpki-client on console-ams.rpki-client.org