Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ITQzY_m-j8GKwcNozzKJHQlRptE.roa
File: ITQzY_m-j8GKwcNozzKJHQlRptE.roa (raw, json)
Hash identifier: Yiw4kNaKlr3Li7Alk2TPNd9KAjW8FSjEMVzREnJHhD4=
Subject key identifier: 21:34:33:63:F9:BE:8F:C1:8A:C1:C3:68:CF:32:89:1D:09:51:A6:D1
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DC7
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ITQzY_m-j8GKwcNozzKJHQlRptE.roa
Signing time: Thu 29 Dec 2022 09:31:51 +0000
ROA not before: Thu 29 Dec 2022 09:31:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 118.150.224.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3527 (0xdc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:31:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=21343363F9BE8FC18AC1C368CF32891D0951A6D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:cc:56:e3:2b:2c:30:3c:02:ce:63:84:dc:93:
75:bb:5e:85:92:99:5f:05:60:76:ed:8b:07:0b:9a:
39:a4:a0:ce:82:43:6b:18:88:16:db:9a:db:5b:24:
dd:0c:ad:a5:c1:14:44:ac:60:70:95:73:41:43:3f:
8a:dd:91:f7:ea:e6:9c:ee:9b:c0:40:cc:04:d2:96:
ef:92:de:d9:12:30:0e:42:c0:b4:07:a5:a1:5b:0d:
6e:1e:8d:5e:f6:99:f2:bd:3f:48:99:65:57:3f:85:
48:e4:90:64:db:5b:20:5c:0a:4e:a7:71:df:e6:89:
17:58:01:c5:96:bd:a3:1d:06:c5:81:3d:41:85:c9:
7b:b0:2d:a9:26:1c:e6:cb:96:4d:53:79:3d:60:1a:
19:e9:0d:f3:64:58:13:fd:ba:47:64:4e:cc:a5:b1:
54:d6:51:e9:33:e2:c8:b2:16:b7:a6:33:0b:af:42:
fc:4b:bf:c4:d9:6d:f9:03:0e:6b:c8:05:b1:9d:74:
5f:a2:08:9d:f5:fb:79:b0:67:ef:ec:c0:0f:c6:3e:
0a:12:d0:4e:21:02:96:fd:e8:52:e2:43:d9:93:7b:
df:47:8b:12:a7:9c:2f:82:d9:82:f3:80:75:59:84:
67:7c:70:a6:b4:e7:0e:df:51:b5:10:82:df:da:e7:
b9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:34:33:63:F9:BE:8F:C1:8A:C1:C3:68:CF:32:89:1D:09:51:A6:D1
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/ITQzY_m-j8GKwcNozzKJHQlRptE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.150.224.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:d9:27:8c:c9:df:8b:fb:fa:97:ab:9a:be:89:75:34:62:b0:
f1:79:21:ab:9b:96:ed:db:09:80:b7:89:74:b3:66:51:20:58:
51:f1:79:2c:6d:f9:fe:b9:a7:72:e7:68:e3:85:e2:d0:fe:72:
2b:73:9f:cd:62:ac:97:f5:5e:34:5f:0b:81:15:70:eb:5e:fe:
fb:bb:23:4d:c4:9a:4b:f9:de:e5:90:fb:b4:20:db:2e:e7:94:
1b:08:66:2a:ff:6a:60:fa:8f:20:07:28:02:cf:21:fe:e1:13:
4b:4c:4c:ef:ac:0e:ec:56:0e:d9:b3:8b:6b:92:b1:cb:03:eb:
05:dd:ea:bc:02:a6:ec:ab:4b:d5:d7:64:c6:47:cb:67:82:4f:
0a:9f:8c:88:6b:62:a5:f1:8c:5e:b0:94:80:0c:a6:95:2c:33:
c5:c5:1d:d8:e7:77:90:75:c8:16:2b:57:e7:65:5d:96:84:bd:
ce:5f:f1:55:d1:fd:c3:ab:98:e8:8a:aa:72:22:de:31:46:33:
e8:cd:7d:eb:3f:87:4a:c5:8f:e1:e7:ee:22:b8:19:3b:d0:4b:
38:50:94:b4:c8:4b:69:b4:d6:b1:c3:c2:32:fb:6a:2a:51:a2:
21:e9:14:8e:5b:a4:3c:ab:da:db:5f:af:f9:e1:68:00:f2:c8:
79:4e:6e:2b
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDccwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMjEyMjkw
OTMxNTFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDIxMzQzMzYzRjlCRThG
QzE4QUMxQzM2OENGMzI4OTFEMDk1MUE2RDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD3zFbjKywwPALOY4Tck3W7XoWSmV8FYHbtiwcLmjmkoM6CQ2sY
iBbbmttbJN0MraXBFESsYHCVc0FDP4rdkffq5pzum8BAzATSlu+S3tkSMA5CwLQH
paFbDW4ejV72mfK9P0iZZVc/hUjkkGTbWyBcCk6ncd/miRdYAcWWvaMdBsWBPUGF
yXuwLakmHObLlk1TeT1gGhnpDfNkWBP9ukdkTsylsVTWUekz4siyFremMwuvQvxL
v8TZbfkDDmvIBbGddF+iCJ31+3mwZ+/swA/GPgoS0E4hApb96FLiQ9mTe99HixKn
nC+C2YLzgHVZhGd8cKa05w7fUbUQgt/a57nvAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUITQzY/m+j8GKwcNozzKJHQlRptEwHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9JVFF6WV9tLWo4R0t3
Y05venpLSkhRbFJwdEUucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQDdpbgMA0GCSqGSIb3DQEBCwUAA4IBAQCy2SeMyd+L+/qXq5q+iXU0YrDxeSGr
m5bt2wmAt4l0s2ZRIFhR8Xksbfn+uady52jjheLQ/nIrc5/NYqyX9V40XwuBFXDr
Xv77uyNNxJpL+d7lkPu0INsu55QbCGYq/2pg+o8gBygCzyH+4RNLTEzvrA7sVg7Z
s4trkrHLA+sF3eq8Aqbsq0vV12TGR8tngk8Kn4yIa2Kl8YxesJSADKaVLDPFxR3Y
53eQdcgWK1fnZV2WhL3OX/FV0f3Dq5joiqpyIt4xRjPozX3rP4dKxY/h5+4iuBk7
0Es4UJS0yEtptNaxw8Iy+2oqUaIh6RSOW6Q8q9rbX6/54WgA8sh5Tm4r
-----END CERTIFICATE-----
Generated at Fri Sep 1 08:54:37 2023 by rpki-client on console-ams.rpki-client.org