Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/QglQUk7R4O_FGBH7kDbKFEPvLpM.roa
File: QglQUk7R4O_FGBH7kDbKFEPvLpM.roa (raw, json)
Hash identifier: sWBNwaNdZwxWKO4wwG1g8KmGE+uPlf653iPHSuYCy0U=
Subject key identifier: 42:09:50:52:4E:D1:E0:EF:C5:18:11:FB:90:36:CA:14:43:EF:2E:93
Certificate issuer: /CN=6016EF41F321C9AA6C1E13D115B5B60A3029C8E5
Certificate serial: F9
Authority key identifier: 60:16:EF:41:F3:21:C9:AA:6C:1E:13:D1:15:B5:B6:0A:30:29:C8:E5
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YBbvQfMhyapsHhPRFbW2CjApyOU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/QglQUk7R4O_FGBH7kDbKFEPvLpM.roa
Signing time: Mon 26 Aug 2024 05:10:29 +0000
ROA not before: Mon 26 Aug 2024 05:10:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 200213
IP address blocks: 103.69.80.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Sep 2024 18:08:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6016EF41F321C9AA6C1E13D115B5B60A3029C8E5
Validity
Not Before: Aug 26 05:10:29 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=420950524ED1E0EFC51811FB9036CA1443EF2E93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:39:15:ca:58:de:6b:25:24:e5:8a:d0:16:9a:
8b:dd:19:8e:87:f1:d8:b6:08:fc:d9:2c:b0:33:fd:
d2:d0:bd:fe:c4:36:f1:a6:cb:9a:be:b5:e5:31:6e:
77:2c:0c:38:3a:f5:fa:78:7e:29:e8:54:b6:5f:c2:
f6:eb:59:22:d5:65:54:ef:49:67:19:99:c2:d2:31:
b5:b9:80:42:bb:1e:2f:b3:b8:7e:d5:c7:5f:12:d7:
fc:9b:93:43:47:ef:72:c2:90:3a:64:66:6d:2b:6a:
55:b6:dc:b9:4f:9f:ab:7a:a0:ba:79:73:7c:89:e9:
2e:3f:31:3e:7d:35:df:02:a8:44:6e:df:28:0d:cc:
02:0a:c0:ff:ca:01:e0:e8:a9:8b:c4:a0:8e:33:8f:
b1:2b:70:fc:32:f9:32:bd:5f:cc:10:e2:b1:6a:17:
11:dd:13:44:6b:5b:84:8f:b4:0e:fe:db:7e:a7:87:
fb:08:cf:87:5f:33:e4:4f:6d:d6:79:e3:fc:bc:64:
2f:cf:24:76:9b:e1:e6:7e:b4:e9:dd:41:41:40:4b:
7f:40:35:9f:ae:c3:f9:2a:5f:33:43:aa:71:c1:ee:
d4:e3:a1:17:f3:df:90:0f:07:de:a0:4b:b8:67:0f:
0c:2d:3d:2b:39:04:8d:36:82:3d:bf:67:3a:b4:1f:
1d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:09:50:52:4E:D1:E0:EF:C5:18:11:FB:90:36:CA:14:43:EF:2E:93
X509v3 Authority Key Identifier:
keyid:60:16:EF:41:F3:21:C9:AA:6C:1E:13:D1:15:B5:B6:0A:30:29:C8:E5
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/YBbvQfMhyapsHhPRFbW2CjApyOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YBbvQfMhyapsHhPRFbW2CjApyOU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHANGSHEN/QglQUk7R4O_FGBH7kDbKFEPvLpM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.80.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:bc:2d:8d:20:96:67:0b:fb:d1:79:29:0a:68:b6:fa:71:1d:
a8:4c:de:6e:39:5c:9b:b7:8a:a7:f6:6f:74:79:e3:b6:a5:fe:
3d:08:4e:09:56:de:d1:72:12:2e:7d:91:1d:96:38:ad:f0:a0:
9c:4a:cc:02:3b:ef:8b:1e:87:b9:0d:26:0a:ce:1b:2c:37:f5:
e2:3b:6b:18:ed:07:98:88:c0:18:1c:52:e5:db:38:e8:5c:fc:
ad:ce:49:2b:1c:3f:32:f6:34:6a:5b:65:63:76:eb:a5:ca:7f:
c8:c5:1f:d8:6a:97:16:97:64:15:97:25:8e:75:ee:d3:c4:82:
01:d2:2c:9b:a9:e8:db:c3:31:53:b4:98:58:17:ba:17:5a:34:
41:79:f4:6f:98:dc:46:64:93:e7:32:50:50:8a:d0:78:0e:b6:
af:24:4a:8b:95:b6:50:1e:5d:c9:36:95:28:ad:77:84:f0:51:
c8:b5:5a:fb:8d:b2:94:0e:92:b1:8a:ad:75:07:d5:91:57:95:
ee:a1:23:7e:08:bf:b3:eb:12:2f:54:34:3f:25:1d:6b:60:e7:
d2:e6:87:c2:c4:c6:57:79:dd:58:8e:2f:c9:6c:62:bc:d4:a5:
ca:96:9f:14:44:3a:1f:f4:cd:09:51:45:9d:d0:bb:6e:3a:ef:
cc:fe:78:ae
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjAx
NkVGNDFGMzIxQzlBQTZDMUUxM0QxMTVCNUI2MEEzMDI5QzhFNTAeFw0yNDA4MjYw
NTEwMjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDQyMDk1MDUyNEVEMUUw
RUZDNTE4MTFGQjkwMzZDQTE0NDNFRjJFOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVORXKWN5rJSTlitAWmovdGY6H8di2CPzZLLAz/dLQvf7ENvGm
y5q+teUxbncsDDg69fp4finoVLZfwvbrWSLVZVTvSWcZmcLSMbW5gEK7Hi+zuH7V
x18S1/ybk0NH73LCkDpkZm0ralW23LlPn6t6oLp5c3yJ6S4/MT59Nd8CqERu3ygN
zAIKwP/KAeDoqYvEoI4zj7ErcPwy+TK9X8wQ4rFqFxHdE0RrW4SPtA7+236nh/sI
z4dfM+RPbdZ54/y8ZC/PJHab4eZ+tOndQUFAS39ANZ+uw/kqXzNDqnHB7tTjoRfz
35APB96gS7hnDwwtPSs5BI02gj2/Zzq0Hx3zAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUQglQUk7R4O/FGBH7kDbKFEPvLpMwHwYDVR0jBBgwFoAUYBbvQfMhyapsHhPR
FbW2CjApyOUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hBTkdT
SEVOL1lCYnZRZk1oeWFwc0hoUFJGYlcyQ2pBcHlPVS5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvWUJidlFmTWh5YXBzSGhQUkZiVzJDakFweU9VLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hBTkdTSEVOL1FnbFFVazdSNE9f
RkdCSDdrRGJLRkVQdkxwTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFnRVAwDQYJKoZIhvcNAQELBQADggEBAH68LY0glmcL+9F5KQpotvpxHahM
3m45XJu3iqf2b3R547al/j0ITglW3tFyEi59kR2WOK3woJxKzAI774seh7kNJgrO
Gyw39eI7axjtB5iIwBgcUuXbOOhc/K3OSSscPzL2NGpbZWN266XKf8jFH9hqlxaX
ZBWXJY517tPEggHSLJup6NvDMVO0mFgXuhdaNEF59G+Y3EZkk+cyUFCK0HgOtq8k
SouVtlAeXck2lSitd4TwUci1WvuNspQOkrGKrXUH1ZFXle6hI34Iv7PrEi9UND8l
HWtg59Lmh8LExld53ViOL8lsYrzUpcqWnxREOh/0zQlRRZ3Qu24678z+eK4=
-----END CERTIFICATE-----
Generated at Sun Sep 22 21:24:35 2024 by rpki-client on console-ams.rpki-client.org