Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/pX70W_Ahy__ktrEIDoCzox3c4fc.roa
File: pX70W_Ahy__ktrEIDoCzox3c4fc.roa (raw, json)
Hash identifier: ZLprqku9/ykMBaEM8pmUFCI1d1TMT5X/Orr1zCmYBds=
Subject key identifier: A5:7E:F4:5B:F0:21:CB:FF:E4:B6:B1:08:0E:80:B3:A3:1D:DC:E1:F7
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0D76
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pX70W_Ahy__ktrEIDoCzox3c4fc.roa
Signing time: Thu 15 Sep 2022 02:48:43 +0000
ROA not before: Thu 15 Sep 2022 02:48:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 3462
IP address blocks: 220.128.71.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3446 (0xd76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 15 02:48:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A57EF45BF021CBFFE4B6B1080E80B3A31DDCE1F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d7:06:80:89:ff:1f:28:ef:5a:cd:18:d0:e7:
9d:1c:dc:46:6b:5e:76:df:81:46:29:e7:e3:63:89:
da:b8:de:8b:86:15:e6:4c:df:01:34:55:fe:5b:d5:
15:d3:10:d3:04:f7:d8:f1:e8:61:9a:49:d5:6c:75:
55:99:22:6f:15:07:54:c4:23:1a:42:87:e5:d7:77:
90:22:db:6d:ce:e7:95:ab:ca:b4:80:1c:e3:68:8b:
4f:b3:dd:ff:04:52:40:82:c0:32:87:16:f9:44:d0:
26:a7:8c:72:e8:6c:df:1b:08:65:97:76:8a:f2:4f:
2d:85:93:08:59:86:2f:8a:3f:d8:76:50:1d:d7:bb:
65:93:d1:f3:1b:59:cb:93:04:64:11:c2:77:29:ac:
c8:ae:44:20:a8:7d:32:80:63:a2:20:37:e0:d4:d8:
41:80:3a:5c:57:34:cf:e2:9b:97:2c:ca:f5:fb:9e:
ee:66:c4:d2:b5:17:44:13:53:91:a8:4e:27:15:bc:
be:f6:e1:3b:8c:ab:f3:6b:86:d4:e4:90:f5:80:d9:
bb:88:eb:c9:f0:d6:2b:5e:62:4d:e3:1d:50:12:26:
25:17:4b:0b:2e:e7:30:08:c8:c7:07:13:cf:84:c6:
51:8f:62:e2:c6:05:97:be:bc:e7:c1:47:cf:03:44:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7E:F4:5B:F0:21:CB:FF:E4:B6:B1:08:0E:80:B3:A3:1D:DC:E1:F7
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/pX70W_Ahy__ktrEIDoCzox3c4fc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.128.71.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d8:f9:df:10:34:d0:84:9f:0c:71:c2:a7:66:1d:cb:0a:92:
32:a9:bc:fc:52:9c:74:99:f1:f8:bb:75:af:42:61:01:a4:33:
b7:de:3a:d5:2d:36:6e:f9:32:cb:87:c1:8a:3a:e6:36:f4:ff:
25:3b:33:23:74:5d:1b:d5:17:cc:26:2c:c5:c9:20:d1:5e:43:
f2:4c:aa:aa:34:cf:b6:f4:c1:99:3d:86:9b:f0:f1:67:fe:f1:
ff:f0:e5:a2:19:64:b0:88:9e:cd:bc:0b:44:c4:33:13:90:c6:
ee:1b:9f:30:a8:c9:b1:0c:70:be:b8:65:97:ec:2f:5b:2d:d0:
2a:28:e3:6b:73:96:db:86:e1:c2:31:d2:2c:84:37:50:28:35:
38:48:3d:ae:82:10:49:31:95:da:16:c1:56:4d:b7:3a:f7:24:
ed:3e:cb:6b:51:a8:dc:c8:76:5d:f8:4e:61:fc:4f:0a:1c:b6:
89:27:0d:79:9b:96:e8:c2:9d:69:61:6f:f1:41:ae:cc:c5:ea:
10:27:f6:c6:b5:29:97:38:da:ae:74:29:c1:cc:52:0e:e4:52:
64:c9:7e:e7:78:0a:e6:cf:53:32:9b:0f:ff:27:7d:62:d4:9c:
1a:08:1b:3d:dc:d9:6b:46:3b:ca:6e:f7:ad:8c:c1:36:0d:84:
00:f4:0d:ff
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQzQ5
RTdCNkY5NTFCMTEyRjkxMDZBOTZGRTdGODc3NEVBRTgwMjUwOTAeFw0yMjA5MTUw
MjQ4NDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEE1N0VGNDVCRjAyMUNC
RkZFNEI2QjEwODBFODBCM0EzMUREQ0UxRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDf1waAif8fKO9azRjQ550c3EZrXnbfgUYp5+Njidq43ouGFeZM
3wE0Vf5b1RXTENME99jx6GGaSdVsdVWZIm8VB1TEIxpCh+XXd5Ai223O55WryrSA
HONoi0+z3f8EUkCCwDKHFvlE0CanjHLobN8bCGWXdoryTy2FkwhZhi+KP9h2UB3X
u2WT0fMbWcuTBGQRwncprMiuRCCofTKAY6IgN+DU2EGAOlxXNM/im5csyvX7nu5m
xNK1F0QTU5GoTicVvL724TuMq/NrhtTkkPWA2buI68nw1iteYk3jHVASJiUXSwsu
5zAIyMcHE8+ExlGPYuLGBZe+vOfBR88DRFgDAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUpX70W/Ahy//ktrEIDoCzox3c4fcwHwYDVR0jBBgwFoAUxJ57b5UbES+RBqlv
5/h3Tq6AJQkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSElORVQv
eEo1N2I1VWJFUy1SQnFsdjVfaDNUcTZBSlFrLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS94SjU3YjVVYkVTLVJCcWx2NV9oM1RxNkFKUWsuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9ISU5FVC9wWDcwV19BaHlfX2t0ckVJRG9D
em94M2M0ZmMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA3IBH
MA0GCSqGSIb3DQEBCwUAA4IBAQAj2PnfEDTQhJ8MccKnZh3LCpIyqbz8Upx0mfH4
u3WvQmEBpDO33jrVLTZu+TLLh8GKOuY29P8lOzMjdF0b1RfMJizFySDRXkPyTKqq
NM+29MGZPYab8PFn/vH/8OWiGWSwiJ7NvAtExDMTkMbuG58wqMmxDHC+uGWX7C9b
LdAqKONrc5bbhuHCMdIshDdQKDU4SD2ughBJMZXaFsFWTbc69yTtPstrUajcyHZd
+E5h/E8KHLaJJw15m5bowp1pYW/xQa7MxeoQJ/bGtSmXONqudCnBzFIO5FJkyX7n
eArmz1Mymw//J31i1JwaCBs93NlrRjvKbvetjME2DYQA9A3/
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:41 2023 by rpki-client on console-ams.rpki-client.org