Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/APOL/wvz94xJ8LsKCzfyjdR2_ydQclMc.roa
File: wvz94xJ8LsKCzfyjdR2_ydQclMc.roa (raw, json)
Hash identifier: qRdRoC9qYnOhjid/LP9TrjMBcNxNid8Q6GaDHZCemHE=
Subject key identifier: C2:FC:FD:E3:12:7C:2E:C2:82:CD:FC:A3:75:1D:BF:C9:D4:1C:94:C7
Certificate issuer: /CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Certificate serial: 1093
Authority key identifier: FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wvz94xJ8LsKCzfyjdR2_ydQclMc.roa
Signing time: Tue 16 May 2023 08:36:21 +0000
ROA not before: Tue 16 May 2023 08:36:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17709
IP address blocks: 210.201.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4243 (0x1093)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB064230F3E39BEFBB73A7D4DDB26FE2D446EE25
Validity
Not Before: May 16 08:36:21 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C2FCFDE3127C2EC282CDFCA3751DBFC9D41C94C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:ab:27:2a:b2:a2:13:39:2b:79:1c:05:f1:
91:e8:91:88:18:59:11:a3:ec:63:ed:55:54:c9:4f:
82:66:50:f6:ab:7e:4f:81:80:82:fb:ed:1f:da:aa:
f1:67:e7:46:42:18:26:b7:db:45:41:e1:d8:dd:1c:
22:8b:56:13:da:7b:a5:63:b0:cd:53:8e:ef:e6:1a:
08:2b:2b:56:8b:fb:59:3c:38:8d:76:c7:3f:78:ea:
9b:79:33:1b:61:ac:af:a6:c7:c1:88:2d:62:8b:a7:
7e:26:f0:e7:3f:b2:d7:0a:f6:5d:3f:38:57:62:90:
c9:37:15:a2:97:f8:26:41:0f:11:6f:53:f6:75:71:
0b:49:ab:99:57:e7:6f:0a:0a:9b:a2:ee:5f:de:51:
b7:c8:a2:1b:3f:f9:22:ef:c3:a8:0e:84:ba:9b:53:
cd:aa:7e:0b:98:f6:f2:23:ab:3f:95:fb:90:e1:60:
7f:24:63:d0:c5:3d:1f:59:f6:cf:42:d8:0a:19:a8:
7f:ff:58:e5:48:f5:32:4d:0c:15:8e:0c:e6:ed:7f:
42:59:d2:fc:99:57:eb:dd:15:67:7e:1e:bc:b6:26:
3b:70:6f:26:18:f9:48:12:20:06:5a:ce:1c:4f:68:
06:52:cd:d8:3f:db:f2:49:85:86:27:77:89:0d:b3:
1a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FC:FD:E3:12:7C:2E:C2:82:CD:FC:A3:75:1D:BF:C9:D4:1C:94:C7
X509v3 Authority Key Identifier:
keyid:FB:06:42:30:F3:E3:9B:EF:BB:73:A7:D4:DD:B2:6F:E2:D4:46:EE:25
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/-wZCMPPjm--7c6fU3bJv4tRG7iU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/-wZCMPPjm--7c6fU3bJv4tRG7iU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/APOL/wvz94xJ8LsKCzfyjdR2_ydQclMc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.201.78.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:c0:c1:ee:86:00:db:63:e5:e3:d3:13:4e:09:e1:9e:b9:2c:
d1:77:66:46:f6:27:e6:f1:4a:cb:53:23:74:35:81:1b:c3:3b:
a4:60:66:73:05:49:84:e4:b2:3c:29:80:1e:d6:dc:13:fa:91:
61:f3:99:6e:58:19:7f:8f:6c:fd:1b:fc:65:2a:03:35:b3:e1:
6b:b9:21:61:11:be:e0:95:7d:f8:35:7d:53:f0:32:34:21:b2:
91:fe:d0:b1:46:bf:f9:f3:16:8e:b9:e0:0f:ac:31:a1:d4:8a:
73:05:e8:77:91:cb:88:86:df:31:a2:46:c0:9f:e0:14:f0:3c:
ba:50:e8:f1:98:cc:63:95:ca:30:bf:80:d6:17:06:45:9a:d5:
cc:ad:52:95:e4:38:cb:43:01:85:53:22:0e:51:9d:51:6f:4f:
21:61:96:88:3b:6b:4f:14:65:c9:74:00:e4:df:0d:66:a6:4d:
e5:8f:f6:e4:40:5f:71:76:bd:d9:5c:a3:6a:02:92:bb:4d:eb:
f0:6f:4c:4e:a0:94:27:c0:8e:a3:df:b4:a5:56:d7:55:87:c9:
74:76:4a:bc:c2:62:99:4c:ff:d5:a8:3c:9a:6c:59:3b:a0:67:
2a:20:5d:4f:24:af:9b:c5:1b:30:81:d9:b0:89:52:75:55:b5:
5d:63:7e:3b
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEJMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NjQyMzBGM0UzOUJFRkJCNzNBN0Q0RERCMjZGRTJENDQ2RUUyNTAeFw0yMzA1MTYw
ODM2MjFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEMyRkNGREUzMTI3QzJF
QzI4MkNERkNBMzc1MURCRkM5RDQxQzk0QzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCttqsnKrKiEzkreRwF8ZHokYgYWRGj7GPtVVTJT4JmUParfk+B
gIL77R/aqvFn50ZCGCa320VB4djdHCKLVhPae6VjsM1Tju/mGggrK1aL+1k8OI12
xz946pt5MxthrK+mx8GILWKLp34m8Oc/stcK9l0/OFdikMk3FaKX+CZBDxFvU/Z1
cQtJq5lX528KCpui7l/eUbfIohs/+SLvw6gOhLqbU82qfguY9vIjqz+V+5DhYH8k
Y9DFPR9Z9s9C2AoZqH//WOVI9TJNDBWODObtf0JZ0vyZV+vdFWd+Hry2JjtwbyYY
+UgSIAZazhxPaAZSzdg/2/JJhYYnd4kNsxpLAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUwvz94xJ8LsKCzfyjdR2/ydQclMcwHwYDVR0jBBgwFoAU+wZCMPPjm++7c6fU
3bJv4tRG7iUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQVBPTC8t
d1pDTVBQam0tLTdjNmZVM2JKdjR0Ukc3aVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
Ly13WkNNUFBqbS0tN2M2ZlUzYkp2NHRSRzdpVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0FQT0wvd3Z6OTR4SjhMc0tDemZ5amRSMl95
ZFFjbE1jLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANLJTjAN
BgkqhkiG9w0BAQsFAAOCAQEALsDB7oYA22Pl49MTTgnhnrks0XdmRvYn5vFKy1Mj
dDWBG8M7pGBmcwVJhOSyPCmAHtbcE/qRYfOZblgZf49s/Rv8ZSoDNbPha7khYRG+
4JV9+DV9U/AyNCGykf7QsUa/+fMWjrngD6wxodSKcwXod5HLiIbfMaJGwJ/gFPA8
ulDo8ZjMY5XKML+A1hcGRZrVzK1SleQ4y0MBhVMiDlGdUW9PIWGWiDtrTxRlyXQA
5N8NZqZN5Y/25EBfcXa92VyjagKSu03r8G9MTqCUJ8COo9+0pVbXVYfJdHZKvMJi
mUz/1ag8mmxZO6BnKiBdTySvm8UbMIHZsIlSdVW1XWN+Ow==
-----END CERTIFICATE-----
Generated at Fri Sep 1 08:37:46 2023 by rpki-client on console-fra.rpki-client.org