Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/DYXNET/qxmSw-6dWxDS9rnoOL8A4GhUzb4.roa
File: qxmSw-6dWxDS9rnoOL8A4GhUzb4.roa (raw, json)
Hash identifier: Vzo9OpiC2+zinFr3ZS9rCLrjdO7TNRRHhaTU5ewuew0=
Subject key identifier: AB:19:92:C3:EE:9D:5B:10:D2:F6:B9:E8:38:BF:00:E0:68:54:CD:BE
Certificate issuer: /CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Certificate serial: 0AB7
Authority key identifier: 4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/qxmSw-6dWxDS9rnoOL8A4GhUzb4.roa
Signing time: Thu 15 Sep 2022 02:37:42 +0000
ROA not before: Thu 15 Sep 2022 02:37:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9244
IP address blocks: 61.56.80.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2743 (0xab7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB3A69964F7E96DB0B3581328F006DBCA1ABA97
Validity
Not Before: Sep 15 02:37:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AB1992C3EE9D5B10D2F6B9E838BF00E06854CDBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6c:51:54:aa:55:03:17:b0:9a:2b:f4:40:9e:
e5:7b:ce:85:9b:c2:04:5d:93:8f:3e:5f:0f:4b:09:
f6:d3:0e:f1:91:1a:6a:10:f7:18:51:c3:4e:9a:96:
71:de:53:88:d2:62:81:01:d8:94:a3:b9:ec:80:46:
90:22:9c:89:1c:11:91:b6:57:27:44:3d:4b:5d:90:
d3:10:15:67:ad:25:d4:c5:9f:92:75:3c:60:2d:94:
bb:36:a0:55:7f:a3:80:0e:50:2c:0c:05:bf:02:4b:
c7:c8:0c:3a:e0:94:90:e9:b9:13:77:2c:a2:39:12:
1a:10:70:17:7f:69:18:39:a4:90:ec:97:cd:6a:e8:
de:e0:b1:05:e7:6c:6b:cd:bb:d7:4f:db:80:d3:2f:
d2:a7:a8:9d:97:45:a5:3d:97:b6:94:cb:a7:15:25:
75:6c:41:f0:da:27:d0:f5:07:c5:24:c1:7b:52:70:
36:46:a2:e6:75:73:52:04:5b:cf:ff:c9:55:29:8a:
1b:79:58:5e:59:20:08:3d:a3:04:c2:40:65:29:cb:
69:50:ee:ea:27:69:bc:9d:15:2d:3d:bb:58:90:8b:
8a:16:7d:01:88:3d:f0:c1:22:ac:89:bc:3b:d8:38:
3d:59:91:9e:c4:98:c4:c1:b5:77:4c:c1:5d:bc:a1:
f9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:19:92:C3:EE:9D:5B:10:D2:F6:B9:E8:38:BF:00:E0:68:54:CD:BE
X509v3 Authority Key Identifier:
keyid:4F:B3:A6:99:64:F7:E9:6D:B0:B3:58:13:28:F0:06:DB:CA:1A:BA:97
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/T7OmmWT36W2ws1gTKPAG28oaupc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/T7OmmWT36W2ws1gTKPAG28oaupc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/DYXNET/qxmSw-6dWxDS9rnoOL8A4GhUzb4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.80.0/21
Signature Algorithm: sha256WithRSAEncryption
11:c8:54:fa:44:7d:ed:6b:ac:11:18:e1:fa:cf:ee:14:4d:78:
b4:5b:33:3f:21:45:7f:70:9d:8b:ad:4d:8a:34:40:02:aa:c2:
fe:ad:0a:72:53:a2:6d:1d:c5:93:8e:4c:61:da:a3:6e:0a:a6:
75:19:86:a4:f8:46:a9:13:30:69:57:b4:50:aa:7a:1f:00:4c:
0e:b7:14:f9:ac:ff:52:cc:93:0e:47:0c:5e:af:3e:c2:4a:4b:
31:f4:36:db:3d:d0:f2:86:e8:00:83:98:18:8c:42:53:df:13:
a1:ce:21:03:47:7a:47:45:65:53:d5:a8:18:22:d0:52:c7:f6:
26:f0:72:fd:d3:d5:63:54:cd:d3:ea:e2:3e:ce:78:02:2a:8f:
0a:fb:d9:89:23:69:95:91:9e:3d:a6:9a:ef:4c:f0:4b:69:3a:
e8:ce:9e:79:5a:89:30:8c:41:92:58:3c:75:43:d3:27:cf:73:
b7:44:b4:4e:bc:9e:0e:d5:aa:55:d9:e5:11:ee:ed:06:0e:45:
b5:3a:19:bd:f2:56:4b:7c:68:e7:d5:c2:c6:97:25:a8:4e:1b:
ee:40:a3:4b:23:8f:dd:f6:f3:a2:6e:d4:0b:0b:bb:ba:d0:a7:
ab:93:a0:7b:09:c3:e2:8e:fe:b9:82:ca:2b:9e:75:a1:4e:82:
ed:c5:f6:78
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICCrcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNEZC
M0E2OTk2NEY3RTk2REIwQjM1ODEzMjhGMDA2REJDQTFBQkE5NzAeFw0yMjA5MTUw
MjM3NDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEFCMTk5MkMzRUU5RDVC
MTBEMkY2QjlFODM4QkYwMEUwNjg1NENEQkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDabFFUqlUDF7CaK/RAnuV7zoWbwgRdk48+Xw9LCfbTDvGRGmoQ
9xhRw06alnHeU4jSYoEB2JSjueyARpAinIkcEZG2VydEPUtdkNMQFWetJdTFn5J1
PGAtlLs2oFV/o4AOUCwMBb8CS8fIDDrglJDpuRN3LKI5EhoQcBd/aRg5pJDsl81q
6N7gsQXnbGvNu9dP24DTL9KnqJ2XRaU9l7aUy6cVJXVsQfDaJ9D1B8UkwXtScDZG
ouZ1c1IEW8//yVUpiht5WF5ZIAg9owTCQGUpy2lQ7uonabydFS09u1iQi4oWfQGI
PfDBIqyJvDvYOD1ZkZ7EmMTBtXdMwV28ofm/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUqxmSw+6dWxDS9rnoOL8A4GhUzb4wHwYDVR0jBBgwFoAUT7OmmWT36W2ws1gT
KPAG28oaupcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVU
L1Q3T21tV1QzNlcyd3MxZ1RLUEFHMjhvYXVwYy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvVDdPbW1XVDM2VzJ3czFnVEtQQUcyOG9hdXBjLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvRFlYTkVUL3F4bVN3LTZkV3hEUzlybm9P
TDhBNEdoVXpiNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAM9
OFAwDQYJKoZIhvcNAQELBQADggEBABHIVPpEfe1rrBEY4frP7hRNeLRbMz8hRX9w
nYutTYo0QAKqwv6tCnJTom0dxZOOTGHao24KpnUZhqT4RqkTMGlXtFCqeh8ATA63
FPms/1LMkw5HDF6vPsJKSzH0Nts90PKG6ACDmBiMQlPfE6HOIQNHekdFZVPVqBgi
0FLH9ibwcv3T1WNUzdPq4j7OeAIqjwr72YkjaZWRnj2mmu9M8EtpOujOnnlaiTCM
QZJYPHVD0yfPc7dEtE68ng7VqlXZ5RHu7QYORbU6Gb3yVkt8aOfVwsaXJahOG+5A
o0sjj93286Ju1AsLu7rQp6uToHsJw+KO/rmCyiuedaFOgu3F9ng=
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:39 2023 by rpki-client on console-ams.rpki-client.org