Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/JQ9gXM0hn94pAPlM1NDAK6yVQYk.roa
File: JQ9gXM0hn94pAPlM1NDAK6yVQYk.roa (raw, json)
Hash identifier: VN8cobGEaAaP16I7mXaTScS7jxBfOz5eFQLug8D8MEA=
Subject key identifier: 25:0F:60:5C:CD:21:9F:DE:29:00:F9:4C:D4:D0:C0:2B:AC:95:41:89
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JQ9gXM0hn94pAPlM1NDAK6yVQYk.roa
Signing time: Thu 15 Sep 2022 02:47:59 +0000
ROA not before: Thu 15 Sep 2022 02:47:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 198949
IP address blocks: 210.242.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:47:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=250F605CCD219FDE2900F94CD4D0C02BAC954189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dc:d4:8b:53:68:e8:88:61:2b:c8:ec:e1:b4:
a6:87:20:0f:78:bb:17:3c:e3:6d:7c:1b:70:4a:e3:
3d:ab:d3:1a:73:66:93:ba:44:c8:42:22:18:d4:01:
90:18:6f:37:f7:34:c3:35:e7:59:93:d2:6a:7b:f6:
53:86:f1:f6:85:2f:c2:d5:a8:a5:f8:b6:a0:a7:30:
c6:c0:5e:b7:53:4a:46:87:5f:29:b2:90:e2:af:74:
96:bc:a8:6c:1b:18:61:9e:9f:bf:98:c3:95:f2:24:
d1:de:78:ce:04:9e:de:12:53:b2:58:44:3b:15:a1:
7a:56:4d:86:3a:73:59:91:14:40:cb:26:54:97:26:
0a:ad:71:b4:54:b7:19:45:2a:45:67:c4:0f:97:11:
18:03:3e:05:5b:1f:7d:0d:ef:79:ba:db:a2:c2:04:
98:a4:58:1e:b2:34:d1:5d:72:f6:8a:6d:d6:8c:41:
2e:07:01:6f:d0:59:87:ad:54:97:a0:29:b4:24:f2:
68:b7:8e:9e:60:8d:85:36:43:59:6b:3b:ae:10:f3:
0a:11:55:73:eb:90:98:b1:07:65:dc:c0:7f:cc:54:
7e:2f:60:63:aa:15:62:d6:fb:52:e6:6c:72:0b:9c:
04:dc:79:80:a5:9f:92:d1:c3:6e:c2:d0:9b:59:39:
26:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0F:60:5C:CD:21:9F:DE:29:00:F9:4C:D4:D0:C0:2B:AC:95:41:89
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/JQ9gXM0hn94pAPlM1NDAK6yVQYk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.242.118.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:c5:dc:bb:86:c5:20:54:e8:11:6a:c7:f0:da:66:00:99:61:
20:59:2f:4b:e8:a8:32:8e:05:7b:72:35:94:81:1b:10:24:ae:
a2:bd:10:d8:16:17:7e:f1:1f:ad:03:b7:f7:ed:ed:33:8f:2b:
3d:64:d9:3f:47:89:1f:5f:9c:7e:c2:79:a1:1a:f3:a1:37:43:
f5:bd:ea:c0:f0:a9:04:e0:6e:27:e3:ee:c5:d8:25:fd:53:06:
1f:46:4f:77:35:fa:1f:09:b5:cd:1e:4a:33:5a:66:5a:03:52:
be:0b:c4:50:9c:1a:2a:23:a3:ba:d0:0c:3f:07:7c:15:14:79:
57:c4:b5:13:50:75:5f:b8:97:dc:23:96:a6:09:f6:39:0c:fe:
9b:e3:04:ee:fd:72:d5:12:21:92:62:b9:f7:51:c9:9d:b5:63:
45:8e:f8:60:28:1a:8a:9d:89:cc:a1:14:89:01:7b:32:ee:e6:
99:ac:d2:03:95:e2:b6:88:62:cd:af:5c:c2:a4:c8:c8:73:33:
03:1e:7a:f8:be:90:8a:a1:f0:9a:a6:72:18:5c:0e:b3:bc:23:
48:ee:bf:58:19:4d:15:b1:1b:ff:d7:b1:c1:db:d1:d2:17:2b:
90:21:c1:46:ff:7d:a1:42:c1:06:a1:90:e1:e7:4f:4d:e7:c4:
19:da:7c:f4
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMjA5MTUw
MjQ3NTlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDI1MEY2MDVDQ0QyMTlG
REUyOTAwRjk0Q0Q0RDBDMDJCQUM5NTQxODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCn3NSLU2joiGEryOzhtKaHIA94uxc84218G3BK4z2r0xpzZpO6
RMhCIhjUAZAYbzf3NMM151mT0mp79lOG8faFL8LVqKX4tqCnMMbAXrdTSkaHXymy
kOKvdJa8qGwbGGGen7+Yw5XyJNHeeM4Ent4SU7JYRDsVoXpWTYY6c1mRFEDLJlSX
JgqtcbRUtxlFKkVnxA+XERgDPgVbH30N73m626LCBJikWB6yNNFdcvaKbdaMQS4H
AW/QWYetVJegKbQk8mi3jp5gjYU2Q1lrO64Q8woRVXPrkJixB2XcwH/MVH4vYGOq
FWLW+1LmbHILnATceYCln5LRw27C0JtZOSbHAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUJQ9gXM0hn94pAPlM1NDAK6yVQYkwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9KUTlnWE0waG45NHBBUGxNMU5E
QUs2eVZRWWsucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0vJ2
MA0GCSqGSIb3DQEBCwUAA4IBAQDOxdy7hsUgVOgRasfw2mYAmWEgWS9L6KgyjgV7
cjWUgRsQJK6ivRDYFhd+8R+tA7f37e0zjys9ZNk/R4kfX5x+wnmhGvOhN0P1verA
8KkE4G4n4+7F2CX9UwYfRk93NfofCbXNHkozWmZaA1K+C8RQnBoqI6O60Aw/B3wV
FHlXxLUTUHVfuJfcI5amCfY5DP6b4wTu/XLVEiGSYrn3UcmdtWNFjvhgKBqKnYnM
oRSJAXsy7uaZrNIDleK2iGLNr1zCpMjIczMDHnr4vpCKofCapnIYXA6zvCNI7r9Y
GU0VsRv/17HB29HSFyuQIcFG/32hQsEGoZDh509N58QZ2nz0
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:14 2023 by rpki-client on console-fra.rpki-client.org