Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/IzI45_VgleU0LvpgL_z9aP9Qo18.roa
File: IzI45_VgleU0LvpgL_z9aP9Qo18.roa (raw, json)
Hash identifier: zvkxDKSifJFfblvbh1IGYzhvj/4C003ceQNbrc0BxkA=
Subject key identifier: 23:32:38:E7:F5:60:95:E5:34:2E:FA:60:2F:FC:FD:68:FF:50:A3:5F
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DDE
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/IzI45_VgleU0LvpgL_z9aP9Qo18.roa
Signing time: Thu 29 Dec 2022 09:31:57 +0000
ROA not before: Thu 29 Dec 2022 09:31:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 17408
IP address blocks: 150.116.8.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3550 (0xdde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:31:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=233238E7F56095E5342EFA602FFCFD68FF50A35F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:db:38:fa:9a:cd:e5:d6:4c:58:13:e4:d1:f6:
3f:dd:2a:56:fe:87:d8:84:cc:39:f6:86:9c:a4:d2:
b4:f0:80:25:16:84:52:77:5a:b1:52:3b:62:8b:ee:
3d:fe:d9:4d:73:8f:65:ae:18:4c:54:ea:89:11:8e:
bc:b8:c0:54:ab:ee:31:b1:05:ed:f1:02:6f:76:8c:
64:4d:66:51:e6:d6:8d:17:c4:fb:e3:e9:1b:32:62:
51:fb:d7:6a:1e:db:80:94:2a:84:38:1b:a9:bc:b4:
2a:b4:c7:0d:cd:0b:66:67:75:03:3e:2b:3f:98:95:
c2:19:2f:81:2e:73:37:2c:1d:a5:64:39:3f:96:70:
cf:47:e7:17:38:6a:a0:44:d4:e1:01:eb:e5:d0:0c:
22:7b:db:d7:c2:4c:90:54:d0:38:c6:d4:28:d8:a6:
20:6b:86:10:93:92:93:ca:61:d4:d4:ef:ba:5d:ac:
24:db:20:01:d9:9a:6b:7d:d5:9e:e8:aa:1e:c5:b0:
1d:3b:3f:ac:e0:08:13:e9:a6:80:e7:bf:57:e7:cc:
b3:83:dd:b3:5c:ff:00:c8:4a:05:1a:eb:df:80:2c:
79:29:58:b6:ff:2c:1d:f8:1b:52:3e:e3:86:f5:13:
4a:01:e4:60:83:86:b3:95:0f:d2:9e:2c:15:03:47:
5d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:32:38:E7:F5:60:95:E5:34:2E:FA:60:2F:FC:FD:68:FF:50:A3:5F
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/IzI45_VgleU0LvpgL_z9aP9Qo18.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.116.8.0/23
Signature Algorithm: sha256WithRSAEncryption
10:5a:d5:1b:f9:6b:d1:de:2d:f1:c9:dd:b3:c1:f0:9c:c4:b6:
7b:31:29:d9:6c:d3:90:c7:15:e6:bc:4a:1d:dc:8f:fd:d1:24:
87:61:91:be:83:c8:67:fd:2f:72:6d:29:07:a3:c2:0f:e4:0e:
7d:9e:8e:dc:c9:df:33:45:39:6d:50:47:d3:4d:f4:6b:db:43:
a0:c8:e7:20:2e:a3:fb:2b:f7:3d:ca:bc:04:54:17:2b:b3:1c:
84:fc:eb:68:6b:b6:98:68:2c:f0:72:97:b8:0d:e9:52:96:a7:
08:55:2b:80:f7:c6:ae:6b:8c:63:af:41:b3:15:fa:2b:55:ae:
02:17:ca:3a:3d:7f:70:4a:73:ff:d1:6f:e5:7c:fc:7d:a0:1d:
19:7b:ec:02:8a:1a:0b:f9:14:6a:04:f3:55:08:ce:dc:98:ec:
c5:7e:fe:e7:57:4e:3e:07:54:87:bf:58:5a:fd:06:a5:78:05:
52:68:43:13:98:5d:17:d9:60:13:25:ad:dc:69:00:12:a6:e0:
45:24:4f:0a:40:6f:8c:5f:ac:6f:7b:b4:dd:3c:15:45:a9:20:
6e:91:3a:bf:b1:b9:06:c1:7b:ce:66:92:71:8f:27:fc:5a:0d:
c5:5d:18:20:61:ec:5b:7e:b0:b0:11:c2:85:dc:f0:8c:d8:92:
75:23:00:09
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDd4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMjEyMjkw
OTMxNTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDIzMzIzOEU3RjU2MDk1
RTUzNDJFRkE2MDJGRkNGRDY4RkY1MEEzNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCl2zj6ms3l1kxYE+TR9j/dKlb+h9iEzDn2hpyk0rTwgCUWhFJ3
WrFSO2KL7j3+2U1zj2WuGExU6okRjry4wFSr7jGxBe3xAm92jGRNZlHm1o0XxPvj
6RsyYlH712oe24CUKoQ4G6m8tCq0xw3NC2ZndQM+Kz+YlcIZL4EuczcsHaVkOT+W
cM9H5xc4aqBE1OEB6+XQDCJ729fCTJBU0DjG1CjYpiBrhhCTkpPKYdTU77pdrCTb
IAHZmmt91Z7oqh7FsB07P6zgCBPppoDnv1fnzLOD3bNc/wDISgUa69+ALHkpWLb/
LB34G1I+44b1E0oB5GCDhrOVD9KeLBUDR11/AgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUIzI45/VgleU0LvpgL/z9aP9Qo18wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9Jekk0NV9WZ2xlVTBM
dnBnTF96OWFQOVFvMTgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBlnQIMA0GCSqGSIb3DQEBCwUAA4IBAQAQWtUb+WvR3i3xyd2zwfCcxLZ7MSnZ
bNOQxxXmvEod3I/90SSHYZG+g8hn/S9ybSkHo8IP5A59no7cyd8zRTltUEfTTfRr
20OgyOcgLqP7K/c9yrwEVBcrsxyE/Otoa7aYaCzwcpe4DelSlqcIVSuA98aua4xj
r0GzFforVa4CF8o6PX9wSnP/0W/lfPx9oB0Ze+wCihoL+RRqBPNVCM7cmOzFfv7n
V04+B1SHv1ha/QaleAVSaEMTmF0X2WATJa3caQASpuBFJE8KQG+MX6xve7TdPBVF
qSBukTq/sbkGwXvOZpJxjyf8Wg3FXRggYexbfrCwEcKF3PCM2JJ1IwAJ
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:03:14 2023 by rpki-client on console-fra.rpki-client.org