Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DCT/lejDrWpSBCRGoaL-5DuLcsUp8Ek.roa
File: lejDrWpSBCRGoaL-5DuLcsUp8Ek.roa (raw, json)
Hash identifier: hxUEHbusr52cKSfLMG8Ua3Ca/KWOKNtTh8qII+5rUno=
Subject key identifier: 95:E8:C3:AD:6A:52:04:24:46:A1:A2:FE:E4:3B:8B:72:C5:29:F0:49
Certificate issuer: /CN=9B062D74C7F512F04AE60955C5456FC19755337F
Certificate serial: 0B2A
Authority key identifier: 9B:06:2D:74:C7:F5:12:F0:4A:E6:09:55:C5:45:6F:C1:97:55:33:7F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/mwYtdMf1EvBK5glVxUVvwZdVM38.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DCT/lejDrWpSBCRGoaL-5DuLcsUp8Ek.roa
Signing time: Fri 01 Sep 2023 08:34:44 +0000
ROA not before: Fri 01 Sep 2023 08:34:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 198949
IP address blocks: 114.29.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 10:32:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2858 (0xb2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B062D74C7F512F04AE60955C5456FC19755337F
Validity
Not Before: Sep 1 08:34:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=95E8C3AD6A52042446A1A2FEE43B8B72C529F049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dd:db:e7:a7:b6:d2:d6:27:2f:6c:ac:c5:3b:
cc:98:b7:9c:1b:bf:46:ef:8c:7a:dd:2b:14:7b:43:
7b:09:7b:85:e4:cb:fb:c3:65:a5:dc:8a:68:05:be:
6c:86:54:69:28:72:c5:1f:3d:80:4d:d5:38:53:c6:
51:5b:1a:c7:5d:e5:73:24:02:fa:e1:7c:db:3c:f2:
d8:3a:24:20:85:a5:53:67:7e:a0:cb:af:21:bf:81:
3c:f8:a0:ab:e3:f3:08:fd:fb:34:5b:b9:8c:ad:14:
fd:f4:53:cf:ee:37:33:22:fa:c7:5b:f3:8f:ae:08:
7f:8d:f5:05:15:9d:49:b2:b1:7e:e3:a2:4d:b3:6a:
29:e3:c3:d1:86:17:23:24:5c:40:33:3a:79:d4:0c:
fa:59:fc:9c:db:c0:b1:07:b6:1b:49:45:0c:15:dc:
2c:ed:f9:61:0e:48:87:ec:79:5e:89:dd:2b:35:64:
ce:62:f0:ee:fe:32:8c:76:3d:4f:7b:e3:f2:4c:7a:
08:41:61:04:6b:40:46:5b:ca:53:cc:7a:a6:2b:09:
1f:26:c7:0f:e7:1b:82:8b:76:cd:92:70:b6:95:d7:
4a:35:14:df:87:1c:66:65:6e:6f:e0:59:f0:f6:42:
87:db:8e:c4:db:0b:00:57:2b:4a:73:5f:fe:68:27:
e7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E8:C3:AD:6A:52:04:24:46:A1:A2:FE:E4:3B:8B:72:C5:29:F0:49
X509v3 Authority Key Identifier:
keyid:9B:06:2D:74:C7:F5:12:F0:4A:E6:09:55:C5:45:6F:C1:97:55:33:7F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCT/mwYtdMf1EvBK5glVxUVvwZdVM38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/mwYtdMf1EvBK5glVxUVvwZdVM38.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DCT/lejDrWpSBCRGoaL-5DuLcsUp8Ek.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
114.29.244.0/22
Signature Algorithm: sha256WithRSAEncryption
46:41:08:c8:9e:a7:0d:77:5b:82:d2:0e:26:6b:a8:26:28:43:
73:5e:e5:f5:78:6e:12:65:09:cf:ae:80:15:ef:3c:75:3d:c2:
02:b7:91:51:fa:da:b2:86:7a:71:c1:60:a9:42:41:ed:75:ce:
2d:ed:59:b4:96:58:30:3c:a8:5c:e3:f6:26:f4:d3:f6:83:69:
12:d8:94:fa:76:e1:d7:3e:5a:08:e6:64:46:17:d0:6b:f1:f7:
11:2f:d9:2e:49:8f:8f:04:f2:96:4a:4e:3f:eb:25:36:49:3c:
57:d5:0d:32:95:78:a0:ed:0e:b2:c2:3a:72:08:51:43:fd:14:
11:7b:16:af:c6:43:1b:dc:25:72:15:8c:2f:c1:bd:2b:61:84:
34:eb:1d:8c:85:70:98:37:ad:99:df:50:c8:de:54:86:1c:a4:
b5:3c:c1:bb:f6:02:fd:49:53:9c:1f:69:1e:b5:a0:86:71:dc:
70:3b:04:c2:ef:48:4d:48:c2:66:c1:2d:cf:2b:b8:a8:f5:92:
2d:1f:82:ae:b7:16:89:b1:f6:e8:0e:fb:55:d2:cd:a0:77:4a:
9e:b0:1a:93:96:92:0e:82:55:63:4a:05:05:81:04:65:29:dc:
f7:c6:cd:ed:69:5a:d9:e0:81:29:d0:d6:58:2c:5f:63:28:78:
eb:15:0d:de
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICCyowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUIw
NjJENzRDN0Y1MTJGMDRBRTYwOTU1QzU0NTZGQzE5NzU1MzM3RjAeFw0yMzA5MDEw
ODM0NDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk1RThDM0FENkE1MjA0
MjQ0NkExQTJGRUU0M0I4QjcyQzUyOUYwNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDe3dvnp7bS1icvbKzFO8yYt5wbv0bvjHrdKxR7Q3sJe4Xky/vD
ZaXcimgFvmyGVGkocsUfPYBN1ThTxlFbGsdd5XMkAvrhfNs88tg6JCCFpVNnfqDL
ryG/gTz4oKvj8wj9+zRbuYytFP30U8/uNzMi+sdb84+uCH+N9QUVnUmysX7jok2z
ainjw9GGFyMkXEAzOnnUDPpZ/JzbwLEHthtJRQwV3Czt+WEOSIfseV6J3Ss1ZM5i
8O7+Mox2PU974/JMeghBYQRrQEZbylPMeqYrCR8mxw/nG4KLds2ScLaV10o1FN+H
HGZlbm/gWfD2QofbjsTbCwBXK0pzX/5oJ+dTAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUlejDrWpSBCRGoaL+5DuLcsUp8EkwHwYDVR0jBBgwFoAUmwYtdMf1EvBK5glV
xUVvwZdVM38wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRENUL213
WXRkTWYxRXZCSzVnbFZ4VVZ2d1pkVk0zOC5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
bXdZdGRNZjFFdkJLNWdsVnhVVnZ3WmRWTTM4LmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvRENUL2xlakRyV3BTQkNSR29hTC01RHVMY3NV
cDhFay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJyHfQwDQYJ
KoZIhvcNAQELBQADggEBAEZBCMiepw13W4LSDiZrqCYoQ3Ne5fV4bhJlCc+ugBXv
PHU9wgK3kVH62rKGenHBYKlCQe11zi3tWbSWWDA8qFzj9ib00/aDaRLYlPp24dc+
WgjmZEYX0Gvx9xEv2S5Jj48E8pZKTj/rJTZJPFfVDTKVeKDtDrLCOnIIUUP9FBF7
Fq/GQxvcJXIVjC/BvSthhDTrHYyFcJg3rZnfUMjeVIYcpLU8wbv2Av1JU5wfaR61
oIZx3HA7BMLvSE1IwmbBLc8ruKj1ki0fgq63Fomx9ugO+1XSzaB3Sp6wGpOWkg6C
VWNKBQWBBGUp3PfGze1pWtnggSnQ1lgsX2MoeOsVDd4=
-----END CERTIFICATE-----
Generated at Thu Mar 14 14:48:44 2024 by rpki-client on console-ams.rpki-client.org