Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/COLIN/9_16aGUatiYZ4weHOiFX3h6bOJs.roa
File: 9_16aGUatiYZ4weHOiFX3h6bOJs.roa (raw, json)
Hash identifier: Uodx+tim93e7l9swHc0Zlep+NHe+rgO18aTVRDJPHOA=
Subject key identifier: F7:FD:7A:68:65:1A:B6:26:19:E3:07:87:3A:21:57:DE:1E:9B:38:9B
Certificate issuer: /CN=9700C068EFA9A6B2E6879310C9AEA030DC8B2AD1
Certificate serial: 09
Authority key identifier: 97:00:C0:68:EF:A9:A6:B2:E6:87:93:10:C9:AE:A0:30:DC:8B:2A:D1
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/lwDAaO-pprLmh5MQya6gMNyLKtE.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/COLIN/9_16aGUatiYZ4weHOiFX3h6bOJs.roa
Signing time: Tue 29 Aug 2023 15:59:16 +0000
ROA not before: Tue 29 Aug 2023 15:59:16 +0000
ROA not after: Thu 22 Aug 2024 08:53:09 +0000
asID: 131642
IP address blocks: 2401:2a60::/32 maxlen: 64
Validation: Failed, certificate revoked on Tue 09 Apr 2024 11:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9700C068EFA9A6B2E6879310C9AEA030DC8B2AD1
Validity
Not Before: Aug 29 15:59:16 2023 GMT
Not After : Aug 22 08:53:09 2024 GMT
Subject: CN=F7FD7A68651AB62619E307873A2157DE1E9B389B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:cc:83:5c:0a:c1:ad:30:d2:b1:2c:35:15:e8:
b2:82:97:70:1b:ae:28:53:b2:b8:28:54:97:ee:e9:
54:c7:77:48:b6:59:fc:e1:67:0b:4d:55:77:06:73:
dd:62:49:c4:15:17:e1:fe:94:6a:37:c0:62:28:0e:
63:d6:9e:41:e2:95:98:00:8d:f0:1b:4c:81:af:35:
86:47:48:09:3e:a8:67:3c:09:83:04:02:c8:18:3a:
05:65:23:22:b6:59:e8:35:88:5d:d7:af:a1:1a:81:
6f:99:92:91:36:a9:37:f9:87:38:94:07:23:c8:79:
1d:a6:96:84:9a:92:f5:21:de:9b:64:f3:e0:a5:e3:
d0:7d:83:91:74:c3:2d:3e:00:be:22:c0:a2:0e:8a:
00:57:2f:7e:1b:fa:1b:2e:68:46:5b:ed:a1:e1:c1:
75:d8:9a:be:6b:17:46:b4:8a:7a:70:f7:38:9e:e6:
aa:ae:22:31:e0:53:35:79:71:b4:4a:55:ae:58:cf:
ad:64:7f:27:cb:2b:bf:62:0d:a5:ef:da:d8:19:e6:
ca:6e:15:a9:4d:c5:ba:ba:25:85:92:f3:c1:e4:34:
39:56:2f:a6:d3:3d:ac:27:b6:19:7a:34:8a:62:4e:
28:8a:ae:40:e6:41:87:59:5f:1c:96:1a:54:22:f2:
8f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FD:7A:68:65:1A:B6:26:19:E3:07:87:3A:21:57:DE:1E:9B:38:9B
X509v3 Authority Key Identifier:
keyid:97:00:C0:68:EF:A9:A6:B2:E6:87:93:10:C9:AE:A0:30:DC:8B:2A:D1
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COLIN/lwDAaO-pprLmh5MQya6gMNyLKtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/lwDAaO-pprLmh5MQya6gMNyLKtE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/COLIN/9_16aGUatiYZ4weHOiFX3h6bOJs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:2a60::/32
Signature Algorithm: sha256WithRSAEncryption
7b:2a:60:c1:f8:ac:49:3b:ff:ce:32:23:32:90:ac:b2:8e:06:
ed:af:2a:d8:89:96:84:7c:d2:b2:99:ef:ea:f8:b5:58:c2:9a:
7a:bb:07:87:15:bd:67:66:90:b6:c6:f5:33:4a:53:9e:08:23:
4f:e1:56:ba:c6:21:e1:85:65:2c:63:b0:3c:d5:46:26:52:cf:
24:44:09:c6:55:c0:94:aa:0e:c7:e7:01:a0:b9:2f:17:6d:1c:
19:39:a6:1f:f2:c1:6e:c7:f5:98:74:75:31:0f:0b:6b:06:58:
7f:bd:c3:85:1c:b8:17:ba:4d:f4:2c:76:08:7c:c2:88:d3:83:
0d:18:28:86:b2:f9:89:6e:71:90:64:0c:db:ad:11:74:ba:74:
3f:32:b7:40:2a:a6:a8:46:0a:ff:6c:70:a1:3f:d1:ae:23:14:
d6:b4:c1:8f:b9:7a:ae:fe:b7:82:1a:17:24:79:69:6e:03:90:
5c:f5:4f:ed:8e:ba:90:45:dc:b9:4e:06:9f:04:dd:92:b7:76:
f7:19:c7:8e:d7:e3:9c:ee:32:eb:23:80:55:24:5c:d0:dd:91:
fe:71:98:52:bd:3f:01:03:51:4f:d2:72:89:7c:19:58:fe:3c:
b1:1a:ef:c7:f6:db:94:0a:81:a3:89:3c:8b:66:a3:59:c6:d9:
9e:3f:6b:0a
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NzAw
QzA2OEVGQTlBNkIyRTY4NzkzMTBDOUFFQTAzMERDOEIyQUQxMB4XDTIzMDgyOTE1
NTkxNloXDTI0MDgyMjA4NTMwOVowMzExMC8GA1UEAxMoRjdGRDdBNjg2NTFBQjYy
NjE5RTMwNzg3M0EyMTU3REUxRTlCMzg5QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPTMg1wKwa0w0rEsNRXosoKXcBuuKFOyuChUl+7pVMd3SLZZ/OFn
C01VdwZz3WJJxBUX4f6UajfAYigOY9aeQeKVmACN8BtMga81hkdICT6oZzwJgwQC
yBg6BWUjIrZZ6DWIXdevoRqBb5mSkTapN/mHOJQHI8h5HaaWhJqS9SHem2Tz4KXj
0H2DkXTDLT4AviLAog6KAFcvfhv6Gy5oRlvtoeHBddiavmsXRrSKenD3OJ7mqq4i
MeBTNXlxtEpVrljPrWR/J8srv2INpe/a2Bnmym4VqU3FurolhZLzweQ0OVYvptM9
rCe2GXo0imJOKIquQOZBh1lfHJYaVCLyj6sCAwEAAaOCAe0wggHpMB0GA1UdDgQW
BBT3/XpoZRq2JhnjB4c6IVfeHps4mzAfBgNVHSMEGDAWgBSXAMBo76mmsuaHkxDJ
rqAw3Isq0TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO
oEyGSnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9DT0xJTi9s
d0RBYU8tcHByTG1oNU1ReWE2Z01OeUxLdEUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2x3REFhTy1wcHJMbWg1TVF5YTZnTU55TEt0RS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0NPTElOLzlfMTZhR1VhdGlZWjR3ZUhPaUZY
M2g2Yk9Kcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9y
cmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkASpg
MA0GCSqGSIb3DQEBCwUAA4IBAQB7KmDB+KxJO//OMiMykKyyjgbtryrYiZaEfNKy
me/q+LVYwpp6uweHFb1nZpC2xvUzSlOeCCNP4Va6xiHhhWUsY7A81UYmUs8kRAnG
VcCUqg7H5wGguS8XbRwZOaYf8sFux/WYdHUxDwtrBlh/vcOFHLgXuk30LHYIfMKI
04MNGCiGsvmJbnGQZAzbrRF0unQ/MrdAKqaoRgr/bHChP9GuIxTWtMGPuXqu/reC
GhckeWluA5Bc9U/tjrqQRdy5TgafBN2St3b3GceO1+Oc7jLrI4BVJFzQ3ZH+cZhS
vT8BA1FP0nKJfBlY/jyxGu/H9tuUCoGjiTyLZqNZxtmeP2sK
-----END CERTIFICATE-----
Generated at Tue Apr 9 15:26:15 2024 by rpki-client on console-ams.rpki-client.org