Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/9tcaznWWV_f7Ky0T-K7ZZSpgKJs.roa
File: 9tcaznWWV_f7Ky0T-K7ZZSpgKJs.roa (raw, json)
Hash identifier: SgAisYlISAeqcDGRRTQ+RVH4lqncVGMriJMVRD2+AJs=
Subject key identifier: F6:D7:1A:CE:75:96:57:F7:FB:2B:2D:13:F8:AE:D9:65:2A:60:28:9B
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0E6B
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/9tcaznWWV_f7Ky0T-K7ZZSpgKJs.roa
Signing time: Tue 28 Mar 2023 11:49:07 +0000
ROA not before: Tue 28 Mar 2023 11:49:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 132737
IP address blocks: 150.116.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3691 (0xe6b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Mar 28 11:49:07 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F6D71ACE759657F7FB2B2D13F8AED9652A60289B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fb:b9:22:9c:02:3b:27:5d:e1:18:5d:d9:49:
9f:cd:b5:ee:9c:79:fa:e9:b8:ad:65:0c:9a:c3:c6:
a4:b0:8f:50:61:c3:d8:35:b8:ee:9b:3e:dd:ac:ad:
03:8c:72:89:6b:1e:ec:93:8b:e2:03:f4:67:a5:4c:
99:27:e0:34:c1:2b:99:8b:3e:db:a1:c6:c3:29:f4:
51:e6:e1:60:de:17:c3:45:c7:09:ff:0e:68:87:7c:
bd:97:33:ff:7c:bc:7c:7a:4b:8a:7c:c3:67:a8:d4:
60:37:05:56:e4:51:c6:4e:c4:d3:d3:38:ca:95:e8:
87:d3:ab:05:0b:e5:3d:c6:24:e6:23:b7:46:40:c8:
a3:7d:1a:ae:9f:40:f3:d2:fd:a3:5b:2c:ba:c3:3c:
62:01:7d:98:67:d4:5e:93:c2:d8:f8:e8:a1:e3:8d:
0c:fb:30:90:c0:36:32:09:ce:f9:ae:fc:f4:bf:4c:
e9:d7:4a:ae:ef:74:7f:91:cd:a6:d1:83:be:c9:5e:
f7:93:50:f7:d2:69:07:e1:bc:9b:93:c6:da:30:6b:
81:9b:3f:ca:3b:63:6d:f1:38:d4:82:4d:f0:af:3c:
67:cb:fc:e0:3f:36:b4:ca:34:f4:07:38:d8:ae:b5:
3a:c9:c3:43:e4:23:10:b0:c1:b1:df:1c:3f:95:cb:
02:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D7:1A:CE:75:96:57:F7:FB:2B:2D:13:F8:AE:D9:65:2A:60:28:9B
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/9tcaznWWV_f7Ky0T-K7ZZSpgKJs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.0.0/24
Signature Algorithm: sha256WithRSAEncryption
14:20:4d:b3:9f:56:1d:28:8b:a6:fb:79:fc:ee:f6:8e:76:45:
2a:15:23:a2:46:b4:5f:4e:df:4e:d1:87:3d:0e:1e:6c:35:4d:
a4:60:d5:f2:22:c5:32:67:b1:72:78:9c:b6:97:86:f5:3b:45:
bf:62:d9:e6:2d:e7:99:cc:e6:e2:ab:57:d6:41:ea:96:f3:d8:
d6:93:bd:87:00:23:9e:40:f0:d8:26:03:6a:37:12:5f:15:46:
55:d7:28:af:63:8f:cd:fb:75:dc:cd:0c:d1:80:7e:36:0e:b0:
e1:c4:5c:37:10:79:ee:59:fc:d1:0b:b1:70:4d:4e:b2:e9:99:
d1:65:d9:b6:b8:12:d5:f2:83:7a:92:3c:2a:aa:cc:ae:ab:e9:
64:c9:db:ce:28:85:6d:26:74:e5:ae:5d:2b:55:cb:a4:fb:1e:
a5:f9:12:98:08:6f:7f:a7:68:ba:1d:27:56:94:33:a5:4b:67:
c7:13:d7:d0:b0:49:9f:d6:46:3c:73:fc:c3:2d:4d:55:40:13:
38:1c:13:04:47:33:b8:57:6d:db:7e:fc:0a:0a:eb:ea:38:a3:
c3:e8:d9:f6:9a:7b:85:7e:ae:9a:95:f9:02:79:c0:b3:b3:24:
9e:ef:1e:5d:37:09:be:00:24:27:c1:a2:98:1e:f5:b1:95:74:
c5:9e:5f:e5
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDmswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMzAzMjgx
MTQ5MDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEY2RDcxQUNFNzU5NjU3
RjdGQjJCMkQxM0Y4QUVEOTY1MkE2MDI4OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDn+7kinAI7J13hGF3ZSZ/Nte6cefrpuK1lDJrDxqSwj1Bhw9g1
uO6bPt2srQOMcolrHuyTi+ID9GelTJkn4DTBK5mLPtuhxsMp9FHm4WDeF8NFxwn/
DmiHfL2XM/98vHx6S4p8w2eo1GA3BVbkUcZOxNPTOMqV6IfTqwUL5T3GJOYjt0ZA
yKN9Gq6fQPPS/aNbLLrDPGIBfZhn1F6Twtj46KHjjQz7MJDANjIJzvmu/PS/TOnX
Sq7vdH+RzabRg77JXveTUPfSaQfhvJuTxtowa4GbP8o7Y23xONSCTfCvPGfL/OA/
NrTKNPQHONiutTrJw0PkIxCwwbHfHD+VywLLAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQU9tcaznWWV/f7Ky0T+K7ZZSpgKJswHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy85dGNhem5XV1ZfZjdL
eTBULUs3WlpTcGdLSnMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQAlnQAMA0GCSqGSIb3DQEBCwUAA4IBAQAUIE2zn1YdKIum+3n87vaOdkUqFSOi
RrRfTt9O0Yc9Dh5sNU2kYNXyIsUyZ7FyeJy2l4b1O0W/YtnmLeeZzObiq1fWQeqW
89jWk72HACOeQPDYJgNqNxJfFUZV1yivY4/N+3XczQzRgH42DrDhxFw3EHnuWfzR
C7FwTU6y6ZnRZdm2uBLV8oN6kjwqqsyuq+lkydvOKIVtJnTlrl0rVcuk+x6l+RKY
CG9/p2i6HSdWlDOlS2fHE9fQsEmf1kY8c/zDLU1VQBM4HBMERzO4V23bfvwKCuvq
OKPD6Nn2mnuFfq6alfkCecCzsySe7x5dNwm+ACQnwaKYHvWxlXTFnl/l
-----END CERTIFICATE-----
Generated at Thu Jul 20 03:35:20 2023 by rpki-client on console-fra.rpki-client.org