Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/8QCN-sLxUD0ilqayoGo66NS5rBI.roa
File: 8QCN-sLxUD0ilqayoGo66NS5rBI.roa (raw, json)
Hash identifier: Ch8AfWTamaYVHg2cGEilYVhb5Z7WNpISM7ZI4gGtqOE=
Subject key identifier: F1:00:8D:FA:C2:F1:50:3D:22:96:A6:B2:A0:6A:3A:E8:D4:B9:AC:12
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DF4
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/8QCN-sLxUD0ilqayoGo66NS5rBI.roa
Signing time: Thu 29 Dec 2022 09:32:04 +0000
ROA not before: Thu 29 Dec 2022 09:32:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 63199
IP address blocks: 150.116.2.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3572 (0xdf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F1008DFAC2F1503D2296A6B2A06A3AE8D4B9AC12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:c1:09:a9:33:a9:04:de:01:89:39:cc:6a:
30:3c:31:99:16:d1:40:5a:21:b2:df:d4:16:bb:c8:
df:64:05:05:3d:7c:14:15:a3:58:e9:1e:37:5f:ee:
23:11:c4:c8:2b:d7:0b:bf:f2:51:4f:77:fe:37:44:
64:ac:aa:c7:15:7c:47:0d:32:0d:b2:85:81:54:42:
1d:54:5c:ae:98:6b:80:61:80:2f:cb:6e:5e:39:aa:
b5:1f:e6:38:a7:60:9b:2b:e9:98:12:45:a9:f5:99:
5f:19:3d:1f:b8:97:ca:39:cd:fd:21:c0:82:f5:fc:
8f:8b:ef:59:97:16:67:c9:5d:be:e2:3f:4d:07:40:
a7:85:36:2c:e7:0c:f1:c4:4d:a8:82:02:74:3a:c1:
88:62:b6:06:fc:57:2f:7e:bc:be:13:11:69:58:09:
37:5c:5c:96:3b:c1:52:e6:ff:bb:e2:46:ff:f1:65:
59:c7:b1:c1:36:6c:52:7c:ef:8b:92:df:08:5a:bd:
c8:4f:71:44:93:09:d8:34:51:16:39:27:80:37:6c:
57:01:43:4f:74:25:b3:ae:5a:90:2e:bb:ca:88:42:
b5:1e:0a:a3:19:07:5f:d1:7b:e3:98:14:c4:ea:a0:
f5:cd:36:a4:1a:85:51:35:c0:1f:1f:5d:43:cc:bc:
3f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:00:8D:FA:C2:F1:50:3D:22:96:A6:B2:A0:6A:3A:E8:D4:B9:AC:12
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/8QCN-sLxUD0ilqayoGo66NS5rBI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.2.0/23
Signature Algorithm: sha256WithRSAEncryption
07:d3:73:c2:f2:01:54:04:69:da:7d:74:4e:af:03:f0:80:f8:
e9:5e:a3:33:c1:4f:2e:18:e4:3b:8a:21:b4:f1:bb:21:7c:52:
55:d8:7a:f1:ce:c1:2c:d8:16:45:cb:1e:fe:38:a5:db:80:66:
d4:00:0a:d4:df:d1:b7:5c:fb:0c:b7:d1:ad:f8:c0:58:ea:2f:
0b:80:be:1e:df:6f:98:8c:db:01:55:0e:db:65:c8:51:fc:33:
80:5c:0c:83:bb:60:1d:5f:71:1c:75:25:61:3d:15:94:fe:79:
1e:e8:d1:6a:77:6f:e4:2a:2a:53:fe:be:90:98:2b:99:57:4b:
37:6a:5c:be:b2:b2:95:4c:12:11:e1:05:8b:78:79:ad:36:03:
b8:09:7c:bb:9e:6e:fd:70:f1:85:bd:da:47:c0:57:79:85:c0:
3c:6a:71:dd:63:05:fb:ff:1a:f3:b6:29:0d:c7:12:4a:7d:22:
ab:0a:c3:1d:77:d2:0f:0a:06:af:d0:ce:ac:e9:61:45:9b:37:
93:87:8b:30:13:0e:fd:0f:96:ab:3d:a1:3d:ea:d0:cf:dc:1e:
2e:ae:7b:20:5a:dd:00:ee:d6:a6:0b:99:45:8d:d5:fe:a8:de:
3d:41:2e:9d:22:10:3d:6b:aa:b3:3f:1a:ea:59:24:eb:96:c4:
5e:1c:88:df
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDfQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMjEyMjkw
OTMyMDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEYxMDA4REZBQzJGMTUw
M0QyMjk2QTZCMkEwNkEzQUU4RDRCOUFDMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwzsEJqTOpBN4BiTnMajA8MZkW0UBaIbLf1Ba7yN9kBQU9fBQV
o1jpHjdf7iMRxMgr1wu/8lFPd/43RGSsqscVfEcNMg2yhYFUQh1UXK6Ya4BhgC/L
bl45qrUf5jinYJsr6ZgSRan1mV8ZPR+4l8o5zf0hwIL1/I+L71mXFmfJXb7iP00H
QKeFNiznDPHETaiCAnQ6wYhitgb8Vy9+vL4TEWlYCTdcXJY7wVLm/7viRv/xZVnH
scE2bFJ874uS3whavchPcUSTCdg0URY5J4A3bFcBQ090JbOuWpAuu8qIQrUeCqMZ
B1/Re+OYFMTqoPXNNqQahVE1wB8fXUPMvD9hAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU8QCN+sLxUD0ilqayoGo66NS5rBIwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy84UUNOLXNMeFVEMGls
cWF5b0dvNjZOUzVyQkkucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBlnQCMA0GCSqGSIb3DQEBCwUAA4IBAQAH03PC8gFUBGnafXROrwPwgPjpXqMz
wU8uGOQ7iiG08bshfFJV2HrxzsEs2BZFyx7+OKXbgGbUAArU39G3XPsMt9Gt+MBY
6i8LgL4e32+YjNsBVQ7bZchR/DOAXAyDu2AdX3EcdSVhPRWU/nke6NFqd2/kKipT
/r6QmCuZV0s3aly+srKVTBIR4QWLeHmtNgO4CXy7nm79cPGFvdpHwFd5hcA8anHd
YwX7/xrztikNxxJKfSKrCsMdd9IPCgav0M6s6WFFmzeTh4swEw79D5arPaE96tDP
3B4urnsgWt0A7tamC5lFjdX+qN49QS6dIhA9a6qzPxrqWSTrlsReHIjf
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:03:14 2023 by rpki-client on console-fra.rpki-client.org