Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/YZMVNsRKAmzJTPzZgUaLYPAMgTo.roa
File: YZMVNsRKAmzJTPzZgUaLYPAMgTo.roa (raw, json)
Hash identifier: 2JwM42UNc+chCxmEew4PjSFIUm2Y8ufHsaXI+QbRZ6U=
Subject key identifier: 61:93:15:36:C4:4A:02:6C:C9:4C:FC:D9:81:46:8B:60:F0:0C:81:3A
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/YZMVNsRKAmzJTPzZgUaLYPAMgTo.roa
Signing time: Thu 15 Sep 2022 02:48:30 +0000
ROA not before: Thu 15 Sep 2022 02:48:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 3462
IP address blocks: 211.72.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=61931536C44A026CC94CFCD981468B60F00C813A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:19:07:eb:5b:71:97:93:a0:fe:97:03:5d:4e:
d1:08:7e:c7:c0:12:e0:52:19:64:87:cf:5d:d0:50:
89:c8:09:e2:25:59:f7:88:7d:89:73:61:96:0f:1e:
ec:3b:06:c1:75:16:b9:49:11:d6:c6:83:6d:88:75:
b8:46:2a:c3:b2:21:f3:a4:2b:0b:74:38:6b:6d:b6:
39:c5:3d:03:66:d9:8d:ad:80:8d:74:92:e5:4a:7d:
29:35:8d:9f:23:79:41:06:ac:8a:22:14:a0:b6:42:
a2:e3:b5:53:aa:a5:15:c8:de:9b:51:05:fe:9a:90:
64:ae:25:9e:a0:48:98:b7:e4:58:9d:dc:4e:18:45:
2e:59:76:37:9d:f5:53:69:ee:a5:d7:51:16:ed:85:
d0:7d:6b:d2:ef:ab:2a:04:cb:fc:01:f5:e0:f2:02:
91:f7:b4:6a:d1:3e:14:cc:71:a7:df:96:a7:f7:59:
d2:b6:be:a8:b5:c6:88:c6:59:8b:ab:de:12:0a:17:
62:f4:c2:a4:6b:3d:3a:33:a7:9e:fe:1c:1a:9e:c5:
7d:d8:3d:0b:4d:5b:11:4d:44:19:dc:df:aa:29:7c:
27:f6:84:84:03:c0:c7:a1:4a:58:d0:a5:df:2c:44:
ec:a0:a9:ff:80:bb:e6:82:12:91:2f:e7:21:2a:e3:
1b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:93:15:36:C4:4A:02:6C:C9:4C:FC:D9:81:46:8B:60:F0:0C:81:3A
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/YZMVNsRKAmzJTPzZgUaLYPAMgTo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.72.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:bc:de:b4:42:28:cf:29:13:05:e3:da:30:de:9a:9a:ac:ba:
63:e0:32:d0:45:12:9d:6d:78:fa:50:3e:47:a2:44:8c:ae:99:
0c:91:9e:0f:9f:30:cb:9c:64:2a:40:d3:11:5b:4b:64:1a:6b:
fa:47:23:38:57:4b:b7:91:a0:8b:ab:96:71:2f:5f:ed:1b:78:
b2:e5:ee:65:4d:4f:1a:da:e3:5d:31:89:3d:3d:70:66:dc:be:
7f:09:60:b8:d6:a6:f3:54:c6:c5:4b:59:42:87:a5:64:39:08:
0e:92:2a:bc:51:b1:24:84:29:44:d1:e9:b1:c0:60:b2:84:53:
3f:06:b5:9f:d8:57:97:07:2a:89:ac:56:6f:4a:a5:2c:5c:68:
16:64:b2:2e:69:80:0d:79:42:03:d7:81:c2:95:54:03:31:dc:
c2:92:1d:06:27:87:ab:2c:01:b1:a0:1f:b4:7a:44:b1:6d:6a:
59:00:5f:af:fc:26:cd:1c:80:57:2f:2c:70:71:3b:e6:4a:3f:
c0:00:34:ed:cb:76:ab:ae:d3:fb:0d:91:7d:08:cd:47:09:59:
08:14:7b:87:de:3d:12:83:c9:63:9f:5a:c2:b9:ac:d8:d7:a3:
86:ad:ca:11:5d:ba:42:88:44:04:90:e4:4b:79:f8:d0:74:68:
85:6e:b0:f2
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMjA5MTUw
MjQ4MzBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDYxOTMxNTM2QzQ0QTAy
NkNDOTRDRkNEOTgxNDY4QjYwRjAwQzgxM0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCeGQfrW3GXk6D+lwNdTtEIfsfAEuBSGWSHz13QUInICeIlWfeI
fYlzYZYPHuw7BsF1FrlJEdbGg22IdbhGKsOyIfOkKwt0OGtttjnFPQNm2Y2tgI10
kuVKfSk1jZ8jeUEGrIoiFKC2QqLjtVOqpRXI3ptRBf6akGSuJZ6gSJi35Fid3E4Y
RS5Zdjed9VNp7qXXURbthdB9a9LvqyoEy/wB9eDyApH3tGrRPhTMcafflqf3WdK2
vqi1xojGWYur3hIKF2L0wqRrPTozp57+HBqexX3YPQtNWxFNRBnc36opfCf2hIQD
wMehSljQpd8sROygqf+Au+aCEpEv5yEq4xuNAgMBAAGjggHrMIIB5zAdBgNVHQ4E
FgQUYZMVNsRKAmzJTPzZgUaLYPAMgTowHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9ZWk1WTnNSS0FtekpUUHpaZ1Vh
TFlQQU1nVG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA00gw
DQYJKoZIhvcNAQELBQADggEBAIG83rRCKM8pEwXj2jDempqsumPgMtBFEp1tePpQ
PkeiRIyumQyRng+fMMucZCpA0xFbS2Qaa/pHIzhXS7eRoIurlnEvX+0beLLl7mVN
Txra410xiT09cGbcvn8JYLjWpvNUxsVLWUKHpWQ5CA6SKrxRsSSEKUTR6bHAYLKE
Uz8GtZ/YV5cHKomsVm9KpSxcaBZksi5pgA15QgPXgcKVVAMx3MKSHQYnh6ssAbGg
H7R6RLFtalkAX6/8Js0cgFcvLHBxO+ZKP8AANO3Ldquu0/sNkX0IzUcJWQgUe4fe
PRKDyWOfWsK5rNjXo4atyhFdukKIRASQ5Et5+NB0aIVusPI=
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:40 2023 by rpki-client on console-ams.rpki-client.org