Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/UNfdTohTWLWOdA6ebmfUAqF1L10.roa
File: UNfdTohTWLWOdA6ebmfUAqF1L10.roa (raw, json)
Hash identifier: XtMK0FjXq6vTIRw9WUEGX0opuO7P/CNW/Nk7nHasxiQ=
Subject key identifier: 50:D7:DD:4E:88:53:58:B5:8E:74:0E:9E:6E:67:D4:02:A1:75:2F:5D
Certificate issuer: /CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Certificate serial: 0DF1
Authority key identifier: 2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/UNfdTohTWLWOdA6ebmfUAqF1L10.roa
Signing time: Thu 29 Dec 2022 09:32:02 +0000
ROA not before: Thu 29 Dec 2022 09:32:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131607
IP address blocks: 150.117.56.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3569 (0xdf1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0F46D3FF6FED73093DD95B98950433910CFD76
Validity
Not Before: Dec 29 09:32:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=50D7DD4E885358B58E740E9E6E67D402A1752F5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:da:97:09:b3:a3:78:87:08:1c:55:ed:d2:32:
55:0b:93:bb:c7:eb:6c:30:a3:5a:61:da:90:83:31:
a8:3b:dc:d1:bd:dd:49:2f:78:80:6a:16:e4:4b:c2:
dc:7d:19:7f:26:fd:56:44:96:2c:e7:67:86:1b:d2:
2e:fa:e5:12:35:58:47:78:35:e5:8c:f6:e0:51:13:
6b:12:70:ae:78:e9:ee:d9:b4:da:38:e8:e7:49:6d:
20:a6:72:ac:01:87:93:9a:2b:19:c2:4a:80:4c:f6:
43:06:12:08:be:cf:9d:a0:a8:55:4d:c9:5d:f8:ba:
46:dc:8e:5a:fd:6b:de:5a:85:47:98:8d:17:69:b4:
3c:12:2f:18:80:3b:8c:93:c6:de:89:b6:be:4b:85:
12:5f:50:08:70:03:fd:0f:89:9a:a3:b0:04:f6:14:
43:87:e7:c3:23:c1:6d:36:ea:51:3f:76:6d:c5:08:
1f:87:c3:04:58:f8:4f:e0:f3:b9:57:74:3d:4e:35:
6b:93:cc:a2:01:1c:04:ac:6d:f2:bf:e1:4d:a3:8c:
32:44:28:4f:5b:8f:6e:f4:bc:1a:f4:57:b7:e3:f3:
51:d3:15:a5:46:77:7a:38:f8:8c:5f:73:ec:66:de:
9a:e5:51:0b:3f:3e:7f:26:74:08:e0:38:63:a9:db:
c5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D7:DD:4E:88:53:58:B5:8E:74:0E:9E:6E:67:D4:02:A1:75:2F:5D
X509v3 Authority Key Identifier:
keyid:2F:0F:46:D3:FF:6F:ED:73:09:3D:D9:5B:98:95:04:33:91:0C:FD:76
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/Lw9G0_9v7XMJPdlbmJUEM5EM_XY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHIEF-TW/UNfdTohTWLWOdA6ebmfUAqF1L10.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
150.117.56.0/21
Signature Algorithm: sha256WithRSAEncryption
64:f1:22:50:87:82:0c:eb:96:04:71:eb:95:94:18:32:c5:d4:
26:6b:2b:63:c1:b0:4a:a5:1f:dc:6e:3f:2c:9e:c3:2c:d4:7e:
b3:1b:4e:f3:25:ae:c6:98:1e:d7:b6:d0:57:7b:3a:fc:9a:ae:
54:46:df:81:36:68:b6:e5:6e:25:64:bf:da:c2:a5:27:3b:83:
a9:76:2b:c4:15:6b:dc:81:ad:fb:dc:37:93:16:60:58:42:d6:
eb:19:fb:81:5b:45:ec:9c:f9:e0:04:74:9d:a1:1b:32:e6:9b:
2d:35:e1:9d:2b:82:b9:5a:fd:4f:19:1a:fc:69:ab:a2:48:53:
48:d0:93:a2:68:bf:27:9a:60:bc:cd:f1:19:33:67:a7:dd:c4:
e8:1e:5d:b2:12:b9:52:f3:f9:2c:95:6a:e6:f2:0e:7e:2e:be:
64:5c:16:16:57:19:73:74:fd:9a:31:7e:c9:11:a7:ce:8d:e4:
26:43:c0:40:66:dc:be:9f:30:27:dc:96:ad:13:15:22:36:40:
41:f9:76:22:f7:43:57:9d:22:17:79:a4:9e:20:18:80:71:49:
25:cc:03:6b:90:28:d4:c7:70:94:74:1f:d7:15:0c:be:65:3f:
3b:8b:28:e5:74:ab:cc:e1:1d:4c:99:fe:49:7a:2a:e6:64:fb:
4c:6c:54:86
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICDfEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkYw
RjQ2RDNGRjZGRUQ3MzA5M0REOTVCOTg5NTA0MzM5MTBDRkQ3NjAeFw0yMjEyMjkw
OTMyMDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDUwRDdERDRFODg1MzU4
QjU4RTc0MEU5RTZFNjdENDAyQTE3NTJGNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCY2pcJs6N4hwgcVe3SMlULk7vH62wwo1ph2pCDMag73NG93Ukv
eIBqFuRLwtx9GX8m/VZEliznZ4Yb0i765RI1WEd4NeWM9uBRE2sScK546e7ZtNo4
6OdJbSCmcqwBh5OaKxnCSoBM9kMGEgi+z52gqFVNyV34ukbcjlr9a95ahUeYjRdp
tDwSLxiAO4yTxt6Jtr5LhRJfUAhwA/0PiZqjsAT2FEOH58MjwW026lE/dm3FCB+H
wwRY+E/g87lXdD1ONWuTzKIBHASsbfK/4U2jjDJEKE9bj270vBr0V7fj81HTFaVG
d3o4+Ixfc+xm3prlUQs/Pn8mdAjgOGOp28WpAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUUNfdTohTWLWOdA6ebmfUAqF1L10wHwYDVR0jBBgwFoAULw9G0/9v7XMJPdlb
mJUEM5EM/XYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0hJRUYt
VFcvTHc5RzBfOXY3WE1KUGRsYm1KVUVNNUVNX1hZLmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS9MdzlHMF85djdYTUpQZGxibUpVRU01RU1fWFkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DSElFRi1UVy9VTmZkVG9oVFdMV09k
QTZlYm1mVUFxRjFMMTAucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQDlnU4MA0GCSqGSIb3DQEBCwUAA4IBAQBk8SJQh4IM65YEceuVlBgyxdQmaytj
wbBKpR/cbj8snsMs1H6zG07zJa7GmB7XttBXezr8mq5URt+BNmi25W4lZL/awqUn
O4OpdivEFWvcga373DeTFmBYQtbrGfuBW0XsnPngBHSdoRsy5pstNeGdK4K5Wv1P
GRr8aauiSFNI0JOiaL8nmmC8zfEZM2en3cToHl2yErlS8/kslWrm8g5+Lr5kXBYW
VxlzdP2aMX7JEafOjeQmQ8BAZty+nzAn3JatExUiNkBB+XYi90NXnSIXeaSeIBiA
cUklzANrkCjUx3CUdB/XFQy+ZT87iyjldKvM4R1Mmf5JeirmZPtMbFSG
-----END CERTIFICATE-----
Generated at Fri Sep 1 08:54:37 2023 by rpki-client on console-ams.rpki-client.org