Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/W4EDYY5jDaSUhOE2h_6bXnuQLsA.roa
File: W4EDYY5jDaSUhOE2h_6bXnuQLsA.roa (raw, json)
Hash identifier: N4Kki8r5WpCeIYapwpnlffLyPb2N59JlbHK3yIsysfg=
Subject key identifier: 5B:81:03:61:8E:63:0D:A4:94:84:E1:36:87:FE:9B:5E:7B:90:2E:C0
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0AB7
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/W4EDYY5jDaSUhOE2h_6bXnuQLsA.roa
Signing time: Thu 15 Sep 2022 02:37:45 +0000
ROA not before: Thu 15 Sep 2022 02:37:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9244
IP address blocks: 113.21.160.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2743 (0xab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 15 02:37:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5B8103618E630DA49484E13687FE9B5E7B902EC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1d:c6:74:8c:68:2f:12:4d:e5:d1:a2:1f:f6:
06:c8:04:82:91:59:a7:cd:8c:d2:62:f7:45:bb:24:
6b:08:c2:6e:a9:67:21:fe:94:2d:d4:0b:d6:b6:1f:
28:11:c5:58:b6:37:2c:87:57:dc:3c:c8:94:95:a9:
7b:91:35:bf:9e:03:aa:76:5c:30:0b:35:3d:b4:79:
24:ea:dc:41:c9:bc:75:83:67:7b:fe:36:a6:ce:17:
9c:89:53:16:87:53:5b:13:e3:5a:ec:ea:4c:a8:ed:
12:73:af:ac:92:33:60:2c:8d:c1:ed:d1:c5:27:5d:
43:4f:c0:01:d0:7f:b0:48:b6:66:aa:c0:81:9f:f2:
20:f4:b3:a3:60:f8:4f:66:16:6a:c0:7a:84:4e:ed:
98:e3:5e:36:cd:31:1c:9a:35:6a:d4:98:1e:b6:74:
4d:d7:33:fd:00:d4:21:a1:3c:6d:9b:95:eb:db:e6:
1f:a3:db:45:56:62:0a:fd:ce:e8:b8:da:b7:a6:d7:
33:a2:9b:d0:9b:20:9f:a5:49:9d:d4:f1:f8:94:b0:
12:8f:59:91:56:40:30:4a:01:ac:e0:74:5f:2d:1a:
1a:67:fe:b7:21:e7:dc:e8:71:ed:d8:d2:32:44:ca:
70:a0:c2:bb:6c:67:cb:5f:1d:b7:54:b5:17:c7:9c:
9b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:81:03:61:8E:63:0D:A4:94:84:E1:36:87:FE:9B:5E:7B:90:2E:C0
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/W4EDYY5jDaSUhOE2h_6bXnuQLsA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.21.160.0/20
Signature Algorithm: sha256WithRSAEncryption
46:95:3c:eb:f6:02:8b:ad:6c:61:3d:27:81:28:dd:fc:9c:b7:
ad:0a:1a:eb:2f:07:91:5a:24:96:be:49:24:4b:d4:1f:6a:f8:
12:42:17:77:e7:d4:47:18:d2:88:32:c4:d2:35:1e:c5:05:3d:
f5:9e:9e:c0:28:60:12:fa:44:3e:4a:f8:e4:6b:e9:bb:14:ff:
d2:27:17:50:b6:05:ed:e0:f5:1c:64:ce:dc:bb:b5:a1:24:37:
1e:37:db:87:42:f3:cc:24:f4:33:c0:6f:78:23:34:d5:8b:29:
66:5c:74:d0:09:d7:f3:9a:a7:b6:9c:d1:1e:12:9d:62:e2:1d:
d1:f4:4d:46:26:6f:21:94:f9:1e:02:5f:93:d4:35:6f:f9:67:
fe:ab:8b:c9:01:6d:0f:06:1c:a2:c0:e3:47:5f:a8:08:f8:3c:
71:3e:f0:9a:80:58:bb:f3:71:92:5a:01:85:f3:00:00:64:6d:
17:14:82:40:72:0b:34:01:19:aa:60:36:44:ba:77:25:3c:f5:
2e:78:3b:bb:e1:98:a8:1b:69:92:03:47:7c:8e:e7:46:eb:a1:
70:7f:c3:1a:73:78:57:ec:0a:bb:76:8c:aa:db:b1:13:b1:da:
e9:da:54:9a:e9:f8:22:f3:26:64:2a:79:01:85:77:ad:17:32:
16:8d:14:c6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCrcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC
M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yMjA5MTUw
MjM3NDVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDVCODEwMzYxOEU2MzBE
QTQ5NDg0RTEzNjg3RkU5QjVFN0I5MDJFQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoHcZ0jGgvEk3l0aIf9gbIBIKRWafNjNJi90W7JGsIwm6pZyH+
lC3UC9a2HygRxVi2NyyHV9w8yJSVqXuRNb+eA6p2XDALNT20eSTq3EHJvHWDZ3v+
NqbOF5yJUxaHU1sT41rs6kyo7RJzr6ySM2AsjcHt0cUnXUNPwAHQf7BItmaqwIGf
8iD0s6Ng+E9mFmrAeoRO7ZjjXjbNMRyaNWrUmB62dE3XM/0A1CGhPG2blevb5h+j
20VWYgr9zui42rem1zOim9CbIJ+lSZ3U8fiUsBKPWZFWQDBKAazgdF8tGhpn/rch
59zoce3Y0jJEynCgwrtsZ8tfHbdUtRfHnJv3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUW4EDYY5jDaSUhOE2h/6bXnuQLsAwHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT
KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU
L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL1c0RURZWTVqRGFTVWhPRTJo
XzZiWG51UUxzQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARx
FaAwDQYJKoZIhvcNAQELBQADggEBAEaVPOv2AoutbGE9J4Eo3fyct60KGusvB5Fa
JJa+SSRL1B9q+BJCF3fn1EcY0ogyxNI1HsUFPfWensAoYBL6RD5K+ORr6bsU/9In
F1C2Be3g9Rxkzty7taEkNx4324dC88wk9DPAb3gjNNWLKWZcdNAJ1/Oap7ac0R4S
nWLiHdH0TUYmbyGU+R4CX5PUNW/5Z/6ri8kBbQ8GHKLA40dfqAj4PHE+8JqAWLvz
cZJaAYXzAABkbRcUgkByCzQBGapgNkS6dyU89S54O7vhmKgbaZIDR3yO50broXB/
wxpzeFfsCrt2jKrbsROx2unaVJrp+CLzJmQqeQGFd60XMhaNFMY=
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:39 2023 by rpki-client on console-ams.rpki-client.org