Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/axT9sIh2k5EvbAI2qU3tElNhUo8.roa
File: axT9sIh2k5EvbAI2qU3tElNhUo8.roa (raw, json)
Hash identifier: qhDq2xcIRn1UJeC9J+6KfL9E0O552h6h08Ng0bPFzjE=
Subject key identifier: 6B:14:FD:B0:88:76:93:91:2F:6C:02:36:A9:4D:ED:12:53:61:52:8F
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/axT9sIh2k5EvbAI2qU3tElNhUo8.roa
Signing time: Thu 15 Sep 2022 02:48:04 +0000
ROA not before: Thu 15 Sep 2022 02:48:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 36040
IP address blocks: 2001:b032:c0ff:1::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6B14FDB0887693912F6C0236A94DED125361528F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:05:c3:5a:69:37:c1:c5:a5:81:6c:0d:55:
81:1f:26:d3:f9:76:c6:b2:14:c8:53:33:bc:18:10:
c7:43:b7:63:91:1f:cd:03:9b:b6:ff:c5:e5:a0:64:
53:d5:6f:90:86:20:f0:e5:6b:63:27:f6:9f:80:ce:
d5:dd:c9:93:30:6c:90:8a:e6:da:ca:f8:a3:89:0b:
30:d3:ab:3c:46:00:cc:18:f3:87:e1:e1:c8:d6:fd:
04:40:dc:37:35:4e:a0:6f:38:5f:1a:97:09:5e:59:
85:9e:ea:94:09:eb:73:f1:d7:3f:d9:bd:90:3c:3f:
64:b7:ba:d3:a5:e3:6d:31:4c:c7:55:b6:11:e7:0d:
4d:27:ae:54:66:98:07:42:25:50:e2:41:e1:3f:2c:
68:bc:84:07:2a:e1:e3:ab:34:12:ea:39:f5:fa:26:
34:c5:96:83:b3:46:1f:27:0c:f9:53:8a:8c:0d:1f:
8c:79:06:8b:56:c6:25:ae:62:ad:ec:e6:e0:02:d8:
6e:b8:d6:33:98:35:41:25:7a:cb:af:2f:70:9e:90:
50:bc:4a:4b:13:21:90:7a:e5:d9:fe:46:03:ef:16:
27:81:9d:cd:0d:0e:12:6e:bf:c0:41:cf:90:f4:ac:
17:60:02:68:e0:5b:eb:41:96:a0:a3:f3:cb:35:25:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:14:FD:B0:88:76:93:91:2F:6C:02:36:A9:4D:ED:12:53:61:52:8F
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/axT9sIh2k5EvbAI2qU3tElNhUo8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:b032:c0ff:1::/64
Signature Algorithm: sha256WithRSAEncryption
c0:d6:24:a9:e5:3a:63:4e:96:ac:7d:2f:97:73:2d:b7:c8:4c:
20:94:ac:9f:de:db:38:c1:99:43:e7:77:80:34:5b:ee:52:13:
30:49:74:a7:23:6c:85:6d:12:2b:f4:84:af:d3:d6:28:f9:1c:
8b:7b:b4:4c:08:7d:05:5d:f4:ae:69:08:89:f4:3a:06:c4:79:
51:3b:59:aa:90:8c:6a:1b:92:d4:ff:58:95:a4:ae:44:47:52:
4a:bd:cd:3d:da:dd:13:c3:78:1b:9f:49:07:6e:d9:72:cd:03:
d8:33:bd:c4:8c:34:57:b8:c5:f4:bf:b6:89:4d:22:a7:b3:d6:
74:a8:0b:e1:c0:17:fc:0e:2c:94:d8:23:25:18:1b:e2:5a:b1:
88:20:0d:11:79:4a:e8:dd:cb:fa:9a:81:32:34:96:1b:e9:cf:
5d:db:23:2e:f1:8a:c1:13:ea:53:7f:d0:9f:12:43:ab:1e:67:
b4:00:96:95:e0:d1:db:6e:da:ef:5a:c4:4f:cd:4e:e1:46:1d:
4b:c5:b9:1d:24:51:94:6a:b3:8b:b3:ae:1f:9a:36:f4:19:d8:
61:a7:7e:3a:41:69:d4:82:18:9d:68:6f:04:91:70:bb:7f:32:
20:dc:75:4a:6f:9b:67:85:98:02:d6:bf:d3:3b:fe:e1:f6:f2:
ac:b9:86:23
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMjA5MTUw
MjQ4MDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDZCMTRGREIwODg3Njkz
OTEyRjZDMDIzNkE5NERFRDEyNTM2MTUyOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxcQXDWmk3wcWlgWwNVYEfJtP5dsayFMhTM7wYEMdDt2ORH80D
m7b/xeWgZFPVb5CGIPDla2Mn9p+AztXdyZMwbJCK5trK+KOJCzDTqzxGAMwY84fh
4cjW/QRA3Dc1TqBvOF8alwleWYWe6pQJ63Px1z/ZvZA8P2S3utOl420xTMdVthHn
DU0nrlRmmAdCJVDiQeE/LGi8hAcq4eOrNBLqOfX6JjTFloOzRh8nDPlTiowNH4x5
BotWxiWuYq3s5uAC2G641jOYNUElesuvL3CekFC8SksTIZB65dn+RgPvFieBnc0N
DhJuv8BBz5D0rBdgAmjgW+tBlqCj88s1JcGBAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUaxT9sIh2k5EvbAI2qU3tElNhUo8wHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9heFQ5c0loMms1RXZiQUkycVUz
dEVsTmhVbzgucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAGw
MsD/AAEwDQYJKoZIhvcNAQELBQADggEBAMDWJKnlOmNOlqx9L5dzLbfITCCUrJ/e
2zjBmUPnd4A0W+5SEzBJdKcjbIVtEiv0hK/T1ij5HIt7tEwIfQVd9K5pCIn0OgbE
eVE7WaqQjGobktT/WJWkrkRHUkq9zT3a3RPDeBufSQdu2XLNA9gzvcSMNFe4xfS/
tolNIqez1nSoC+HAF/wOLJTYIyUYG+JasYggDRF5Sujdy/qagTI0lhvpz13bIy7x
isET6lN/0J8SQ6seZ7QAlpXg0dtu2u9axE/NTuFGHUvFuR0kUZRqs4uzrh+aNvQZ
2GGnfjpBadSCGJ1obwSRcLt/MiDcdUpvm2eFmALWv9M7/uH28qy5hiM=
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:15 2023 by rpki-client on console-fra.rpki-client.org