Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CGNET/EcuX67_ZeqvV0mIpJYm5If9kJCA.roa
File: EcuX67_ZeqvV0mIpJYm5If9kJCA.roa (raw, json)
Hash identifier: DozKX7CsoeXP4LdeM3V7jhEEmbPUjOyJ/1mFfCOXFtM=
Subject key identifier: 11:CB:97:EB:BF:D9:7A:AB:D5:D2:62:29:25:89:B9:21:FF:64:24:20
Certificate issuer: /CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Certificate serial: 0AEB
Authority key identifier: 5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/EcuX67_ZeqvV0mIpJYm5If9kJCA.roa
Signing time: Thu 15 Sep 2022 02:49:31 +0000
ROA not before: Thu 15 Sep 2022 02:49:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 103.224.200.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2795 (0xaeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D1E3F3C8BA89DC1310410345F50C10076181261
Validity
Not Before: Sep 15 02:49:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=11CB97EBBFD97AABD5D262292589B921FF642420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:13:d7:24:97:1c:d5:58:84:31:9b:bb:ba:
79:74:9a:51:87:9e:0b:4c:00:a9:6f:3e:9c:ab:31:
7d:9f:9a:eb:cf:41:32:32:58:c6:09:81:6c:7c:e7:
91:6f:a7:9e:11:71:64:e8:13:01:5a:45:20:4d:88:
4a:2c:eb:72:8d:33:1b:3b:ef:95:95:80:ee:8b:87:
cf:54:78:ef:ec:c2:d7:48:c3:cb:ef:a4:db:c8:db:
4b:c9:5c:a9:cd:f7:82:c2:cd:fb:ce:c2:4a:c5:fb:
ab:5c:1f:40:e9:30:4f:ec:60:65:1a:d2:b9:c3:07:
e5:6c:1e:3a:2a:04:37:23:43:3b:6d:5b:d9:c1:38:
8f:1e:ae:53:c1:12:ea:6f:2f:bf:71:4a:eb:a0:19:
3f:d4:a0:f8:f1:4d:39:e6:ba:fc:f9:e5:2d:a9:b6:
08:ab:32:59:83:82:a9:ad:b8:27:2a:84:44:c0:b3:
ef:ce:ba:14:25:84:78:cc:f7:dc:42:b0:5a:dd:da:
61:46:7e:52:53:f6:99:26:37:ac:ab:7f:4d:07:9f:
8e:70:b1:c2:13:23:af:08:28:21:92:b1:f9:b9:51:
8e:ff:3b:80:3f:73:2f:74:25:2d:76:b5:f2:76:a4:
1b:d1:dc:c6:e9:df:1d:86:bb:e3:c2:53:0e:39:d6:
48:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CB:97:EB:BF:D9:7A:AB:D5:D2:62:29:25:89:B9:21:FF:64:24:20
X509v3 Authority Key Identifier:
keyid:5D:1E:3F:3C:8B:A8:9D:C1:31:04:10:34:5F:50:C1:00:76:18:12:61
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/XR4_PIuoncExBBA0X1DBAHYYEmE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/XR4_PIuoncExBBA0X1DBAHYYEmE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CGNET/EcuX67_ZeqvV0mIpJYm5If9kJCA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.200.0/22
Signature Algorithm: sha256WithRSAEncryption
64:c7:99:34:16:e8:d2:36:96:55:7b:59:6d:9c:08:85:10:41:
1b:24:c9:a7:3d:bf:f5:93:77:b0:d1:fa:f9:95:46:56:61:3b:
aa:00:30:d2:1e:03:f0:19:ab:2e:79:ad:2f:5e:21:e8:12:fa:
95:23:68:82:77:fc:ec:91:a1:e0:29:f2:da:56:fe:8d:e5:2c:
e9:e0:8c:9d:be:f7:78:27:dd:08:73:d9:de:bd:59:72:1e:7d:
d8:1f:dc:7c:bf:48:1f:ef:e6:4d:db:e7:87:40:ea:9a:1e:d9:
99:61:52:d2:9a:53:8c:c5:51:40:cc:07:24:0e:fb:64:43:1e:
c5:49:d5:c1:b9:21:e4:a7:72:35:f8:51:71:38:64:b4:2d:8e:
67:a0:7e:ea:83:30:a4:d5:ea:92:48:c8:61:f8:a0:28:95:75:
ec:a2:76:99:1c:b5:0d:5b:bf:75:b6:de:e1:33:74:6c:b7:97:
ab:c6:43:63:5f:59:32:bd:d4:b3:02:6c:65:d0:65:3d:0f:26:
8d:fd:a0:0a:41:17:b2:64:ae:34:6b:08:d5:29:51:3d:14:dd:
01:e9:73:eb:ad:80:6b:ae:50:5d:94:0c:7f:da:89:08:48:d0:
f2:9c:86:24:4f:7c:3b:3d:0a:9d:3b:db:68:81:23:83:40:2b:
67:36:cf:b3
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCuswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNUQx
RTNGM0M4QkE4OURDMTMxMDQxMDM0NUY1MEMxMDA3NjE4MTI2MTAeFw0yMjA5MTUw
MjQ5MzFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDExQ0I5N0VCQkZEOTdB
QUJENUQyNjIyOTI1ODlCOTIxRkY2NDI0MjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5zhPXJJcc1ViEMZu7unl0mlGHngtMAKlvPpyrMX2fmuvPQTIy
WMYJgWx855Fvp54RcWToEwFaRSBNiEos63KNMxs775WVgO6Lh89UeO/swtdIw8vv
pNvI20vJXKnN94LCzfvOwkrF+6tcH0DpME/sYGUa0rnDB+VsHjoqBDcjQzttW9nB
OI8erlPBEupvL79xSuugGT/UoPjxTTnmuvz55S2ptgirMlmDgqmtuCcqhETAs+/O
uhQlhHjM99xCsFrd2mFGflJT9pkmN6yrf00Hn45wscITI68IKCGSsfm5UY7/O4A/
cy90JS12tfJ2pBvR3Mbp3x2Gu+PCUw451kjHAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUEcuX67/ZeqvV0mIpJYm5If9kJCAwHwYDVR0jBBgwFoAUXR4/PIuoncExBBA0
X1DBAHYYEmEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0dORVQv
WFI0X1BJdW9uY0V4QkJBMFgxREJBSFlZRW1FLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9YUjRfUEl1b25jRXhCQkEwWDFEQkFIWVlFbUUuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DR05FVC9FY3VYNjdfWmVxdlYwbUlwSllt
NUlmOWtKQ0Eucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ+DI
MA0GCSqGSIb3DQEBCwUAA4IBAQBkx5k0FujSNpZVe1ltnAiFEEEbJMmnPb/1k3ew
0fr5lUZWYTuqADDSHgPwGasuea0vXiHoEvqVI2iCd/zskaHgKfLaVv6N5Szp4Iyd
vvd4J90Ic9nevVlyHn3YH9x8v0gf7+ZN2+eHQOqaHtmZYVLSmlOMxVFAzAckDvtk
Qx7FSdXBuSHkp3I1+FFxOGS0LY5noH7qgzCk1eqSSMhh+KAolXXsonaZHLUNW791
tt7hM3Rst5erxkNjX1kyvdSzAmxl0GU9DyaN/aAKQReyZK40awjVKVE9FN0B6XPr
rYBrrlBdlAx/2okISNDynIYkT3w7PQqdO9togSODQCtnNs+z
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:47 2023 by rpki-client on console-ams.rpki-client.org