Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/GOEASY/rdJWLRdw_SyVVNZR2QZPwGvSFcY.roa
File: rdJWLRdw_SyVVNZR2QZPwGvSFcY.roa (raw, json)
Hash identifier: UHp0W6MZTnFI6eAFOV+7QnZeKiC+D43oCawutG0SH3s=
Subject key identifier: AD:D2:56:2D:17:70:FD:2C:95:54:D6:51:D9:06:4F:C0:6B:D2:15:C6
Certificate issuer: /CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762
Certificate serial: 0125
Authority key identifier: 66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/rdJWLRdw_SyVVNZR2QZPwGvSFcY.roa
Signing time: Thu 15 Sep 2022 02:41:29 +0000
ROA not before: Thu 15 Sep 2022 02:41:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 7483
IP address blocks: 103.170.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 293 (0x125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66B69E5B178B8C9444C4D64A6963B0BC9FA35762
Validity
Not Before: Sep 15 02:41:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=ADD2562D1770FD2C9554D651D9064FC06BD215C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:7e:07:54:f6:f3:dd:c3:15:b6:e9:97:26:
f8:15:9f:7d:41:97:f5:c6:34:81:0b:a9:1d:d1:80:
06:7e:6c:98:69:4e:35:6b:3d:27:c8:30:8c:12:37:
3d:48:8f:4c:47:65:1e:97:99:3f:01:28:bb:31:20:
13:df:aa:63:27:69:e1:1a:98:cd:48:36:14:4f:27:
6f:c8:cc:04:33:7d:c2:9b:60:9f:31:2d:51:18:14:
b4:43:36:bd:6f:cf:f3:e4:20:38:f0:72:39:96:24:
e9:d7:50:9a:48:9a:6b:09:e6:9a:3d:fe:78:3d:f9:
fa:42:82:0c:47:d0:d2:77:5a:89:82:47:f7:16:88:
2f:6a:71:1a:9e:47:d4:3a:8f:6a:69:f0:99:db:14:
55:93:26:03:ca:08:94:e8:83:79:c7:ce:79:d1:3e:
6a:4a:f1:9e:a5:3c:3c:52:05:f4:b6:6d:2f:13:c2:
e5:0e:1b:c9:8e:20:c1:9c:18:c0:62:f9:f8:d4:60:
a1:e0:e9:37:7f:f9:6f:45:b0:d0:d7:39:43:d2:86:
1e:89:ed:a2:8c:43:50:a4:01:52:ab:2f:0b:ad:6a:
4f:ee:a4:77:de:0c:4b:5f:20:93:5c:ac:ae:8a:d9:
c3:db:d4:99:2b:e8:81:d9:dc:e7:6e:5f:4d:3a:90:
c3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D2:56:2D:17:70:FD:2C:95:54:D6:51:D9:06:4F:C0:6B:D2:15:C6
X509v3 Authority Key Identifier:
keyid:66:B6:9E:5B:17:8B:8C:94:44:C4:D6:4A:69:63:B0:BC:9F:A3:57:62
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/ZraeWxeLjJRExNZKaWOwvJ-jV2I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ZraeWxeLjJRExNZKaWOwvJ-jV2I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GOEASY/rdJWLRdw_SyVVNZR2QZPwGvSFcY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.15.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f0:5c:ef:2c:16:a7:2d:da:26:7b:e4:3b:26:4a:02:39:f9:
0b:a8:0d:7f:3f:bf:41:01:e9:37:7e:52:b1:4b:88:a0:18:8c:
7c:1c:3d:c5:d4:c6:e7:69:12:67:02:2d:4f:16:bc:ab:33:3a:
f4:e2:fb:2e:10:3b:88:a1:9a:ff:07:bb:1c:44:8a:0f:87:e4:
c8:5f:b8:74:d7:54:c2:d8:c9:e0:a4:49:c2:00:61:19:7c:b6:
b7:66:31:a3:2c:99:f5:9a:bf:5a:9c:5a:d1:b8:86:d4:ce:74:
06:c5:41:d8:6f:b9:84:62:43:09:54:c9:b7:1c:71:c8:e7:bf:
a1:47:f6:48:84:96:db:b0:f8:75:c7:c0:f5:71:4a:42:3e:f9:
c1:88:37:e7:58:76:27:75:4c:39:66:79:ad:0a:bc:59:23:82:
29:42:ff:40:75:88:a2:92:e2:a1:e8:c1:e4:49:cf:07:07:41:
26:04:33:54:ad:a1:5e:09:91:7a:fc:77:2c:57:6e:04:7a:09:
10:ed:2c:5f:9a:0d:66:b0:41:50:99:ba:a7:d0:6e:a1:8d:38:
1d:22:9f:91:2d:73:e4:11:26:cd:ec:9d:10:9b:c1:d6:aa:4d:
9b:f5:f1:db:60:17:f7:d7:54:4b:ba:b8:32:96:6e:5b:35:c2:
f1:f4:42:e2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICASUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjZC
NjlFNUIxNzhCOEM5NDQ0QzRENjRBNjk2M0IwQkM5RkEzNTc2MjAeFw0yMjA5MTUw
MjQxMjlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEFERDI1NjJEMTc3MEZE
MkM5NTU0RDY1MUQ5MDY0RkMwNkJEMjE1QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClvn4HVPbz3cMVtumXJvgVn31Bl/XGNIELqR3RgAZ+bJhpTjVr
PSfIMIwSNz1Ij0xHZR6XmT8BKLsxIBPfqmMnaeEamM1INhRPJ2/IzAQzfcKbYJ8x
LVEYFLRDNr1vz/PkIDjwcjmWJOnXUJpImmsJ5po9/ng9+fpCggxH0NJ3WomCR/cW
iC9qcRqeR9Q6j2pp8JnbFFWTJgPKCJTog3nHznnRPmpK8Z6lPDxSBfS2bS8TwuUO
G8mOIMGcGMBi+fjUYKHg6Td/+W9FsNDXOUPShh6J7aKMQ1CkAVKrLwutak/upHfe
DEtfIJNcrK6K2cPb1Jkr6IHZ3OduX006kMMjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUrdJWLRdw/SyVVNZR2QZPwGvSFcYwHwYDVR0jBBgwFoAUZraeWxeLjJRExNZK
aWOwvJ+jV2IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvR09FQVNZ
L1pyYWVXeGVMakpSRXhOWkthV093dkotalYySS5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvWnJhZVd4ZUxqSlJFeE5aS2FXT3d2Si1qVjJJLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvR09FQVNZL3JkSldMUmR3X1N5VlZOWlIy
UVpQd0d2U0ZjWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn
qg8wDQYJKoZIhvcNAQELBQADggEBAEDwXO8sFqct2iZ75DsmSgI5+QuoDX8/v0EB
6Td+UrFLiKAYjHwcPcXUxudpEmcCLU8WvKszOvTi+y4QO4ihmv8HuxxEig+H5Mhf
uHTXVMLYyeCkScIAYRl8trdmMaMsmfWav1qcWtG4htTOdAbFQdhvuYRiQwlUybcc
ccjnv6FH9kiEltuw+HXHwPVxSkI++cGIN+dYdid1TDlmea0KvFkjgilC/0B1iKKS
4qHoweRJzwcHQSYEM1StoV4JkXr8dyxXbgR6CRDtLF+aDWawQVCZuqfQbqGNOB0i
n5Etc+QRJs3snRCbwdaqTZv18dtgF/fXVEu6uDKWbls1wvH0QuI=
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:40 2023 by rpki-client on console-ams.rpki-client.org