Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HONGDA/-xC-8iF9ZHilO0dWNe7wdMin6Fo.roa
File: -xC-8iF9ZHilO0dWNe7wdMin6Fo.roa (raw, json)
Hash identifier: xyaMW21re/gxtnMbpihu8Iu5L5tawgNK4Ko0Grjk8iM=
Subject key identifier: FB:10:BE:F2:21:7D:64:78:A5:3B:47:56:35:EE:F0:74:C8:A7:E8:5A
Certificate issuer: /CN=257DB7B9919975697366B7014F8CFE28EF364E73
Certificate serial: 0469
Authority key identifier: 25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/-xC-8iF9ZHilO0dWNe7wdMin6Fo.roa
Signing time: Thu 15 Sep 2022 02:34:56 +0000
ROA not before: Thu 15 Sep 2022 02:34:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 20473
IP address blocks: 103.153.176.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1129 (0x469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=257DB7B9919975697366B7014F8CFE28EF364E73
Validity
Not Before: Sep 15 02:34:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FB10BEF2217D6478A53B475635EEF074C8A7E85A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fb:5d:7a:2b:78:70:42:a2:a8:ec:66:e6:73:
a1:dc:90:35:cc:52:bb:a6:39:07:51:ec:48:73:78:
c3:d5:a4:15:d1:44:ef:2b:09:05:fc:bb:2b:ef:8d:
ed:0f:33:2a:54:e8:16:68:ba:9f:20:2e:56:d5:43:
f5:5b:95:a7:43:60:e6:bf:07:fb:d1:2a:34:05:8d:
6a:e6:f1:f0:e1:fe:6a:b3:a9:7d:c0:91:e2:25:3f:
78:2b:64:7e:35:cc:2b:f1:17:33:80:11:ba:a2:97:
0b:ee:d9:38:b8:dc:30:49:58:39:9f:ac:86:a6:0e:
25:fa:5a:b8:c1:6c:f1:97:60:f1:da:34:48:b7:ef:
39:f0:13:5b:97:b7:85:a1:9b:63:aa:68:f8:16:03:
28:10:ea:f8:df:0e:48:c1:ad:a4:f6:81:34:77:9c:
ae:89:5e:26:fd:9d:dd:c6:6d:7d:88:01:b3:30:8b:
60:5a:d0:fd:26:0a:71:b2:b9:2c:c9:26:e8:fc:05:
04:d8:ba:73:15:81:1a:67:7a:48:17:4e:99:59:39:
ed:04:da:45:7c:99:f9:83:68:d1:2b:91:c2:0a:d6:
85:21:b1:e7:ed:37:5f:e5:ea:d6:14:db:32:14:0e:
d8:fa:88:69:21:bb:84:e0:4a:dc:32:d4:8a:ce:d8:
bf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:10:BE:F2:21:7D:64:78:A5:3B:47:56:35:EE:F0:74:C8:A7:E8:5A
X509v3 Authority Key Identifier:
keyid:25:7D:B7:B9:91:99:75:69:73:66:B7:01:4F:8C:FE:28:EF:36:4E:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/JX23uZGZdWlzZrcBT4z-KO82TnM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/JX23uZGZdWlzZrcBT4z-KO82TnM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HONGDA/-xC-8iF9ZHilO0dWNe7wdMin6Fo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.153.176.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:44:f0:9c:1b:a6:87:17:64:98:23:9f:92:0b:a2:4f:cc:a6:
f4:41:f4:7d:f5:fc:5d:c5:71:e2:e1:e0:a0:6a:2f:f4:76:1e:
e1:d8:50:40:a5:e7:31:82:f7:e6:87:20:8c:0b:ce:ca:78:ca:
1d:a9:34:32:1a:18:a0:53:df:9b:49:3e:f4:7b:03:9d:b8:46:
7b:c0:bf:f9:28:1b:c8:b1:b8:08:62:e6:2b:54:a1:e9:aa:66:
69:74:67:77:20:9f:ab:59:75:96:bd:8c:a6:17:10:dd:21:b2:
da:9f:e5:9d:2b:97:1d:59:85:13:92:f1:80:99:cf:e1:8d:a1:
06:8a:a5:b1:ac:0f:c4:09:b1:e6:4e:74:af:50:47:20:6d:4b:
b5:c8:f4:92:3e:26:f9:fb:5f:3a:77:0b:8b:8d:00:fe:e6:62:
a9:79:2f:af:c1:41:41:54:04:d0:03:91:b9:12:f9:33:84:fd:
e4:37:5f:13:52:7e:0e:50:e1:b0:70:9b:c7:f1:40:8c:97:71:
dc:be:60:78:d6:2b:ff:84:7b:b3:03:d1:b2:96:a0:3d:96:34:
eb:86:c7:20:98:bd:c4:46:d5:62:0e:bd:56:d2:c9:b7:5b:f1:
e7:1c:9e:03:0b:62:cb:e1:28:0f:bb:1a:f3:20:73:83:c6:ce:
c4:42:8d:74
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICBGkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjU3
REI3Qjk5MTk5NzU2OTczNjZCNzAxNEY4Q0ZFMjhFRjM2NEU3MzAeFw0yMjA5MTUw
MjM0NTZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEZCMTBCRUYyMjE3RDY0
NzhBNTNCNDc1NjM1RUVGMDc0QzhBN0U4NUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDq+116K3hwQqKo7Gbmc6HckDXMUrumOQdR7EhzeMPVpBXRRO8r
CQX8uyvvje0PMypU6BZoup8gLlbVQ/VbladDYOa/B/vRKjQFjWrm8fDh/mqzqX3A
keIlP3grZH41zCvxFzOAEbqilwvu2Ti43DBJWDmfrIamDiX6WrjBbPGXYPHaNEi3
7znwE1uXt4Whm2OqaPgWAygQ6vjfDkjBraT2gTR3nK6JXib9nd3GbX2IAbMwi2Ba
0P0mCnGyuSzJJuj8BQTYunMVgRpnekgXTplZOe0E2kV8mfmDaNErkcIK1oUhseft
N1/l6tYU2zIUDtj6iGkhu4TgStwy1IrO2L8pAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+xC+8iF9ZHilO0dWNe7wdMin6FowHwYDVR0jBBgwFoAUJX23uZGZdWlzZrcB
T4z+KO82TnMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RB
L0pYMjN1WkdaZFdselpyY0JUNHotS084MlRuTS5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvSlgyM3VaR1pkV2x6WnJjQlQ0ei1LTzgyVG5NLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvSE9OR0RBLy14Qy04aUY5WkhpbE8wZFdO
ZTd3ZE1pbjZGby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn
mbAwDQYJKoZIhvcNAQELBQADggEBAAxE8JwbpocXZJgjn5ILok/MpvRB9H31/F3F
ceLh4KBqL/R2HuHYUECl5zGC9+aHIIwLzsp4yh2pNDIaGKBT35tJPvR7A524RnvA
v/koG8ixuAhi5itUoemqZml0Z3cgn6tZdZa9jKYXEN0hstqf5Z0rlx1ZhROS8YCZ
z+GNoQaKpbGsD8QJseZOdK9QRyBtS7XI9JI+Jvn7Xzp3C4uNAP7mYql5L6/BQUFU
BNADkbkS+TOE/eQ3XxNSfg5Q4bBwm8fxQIyXcdy+YHjWK/+Ee7MD0bKWoD2WNOuG
xyCYvcRG1WIOvVbSybdb8eccngMLYsvhKA+7GvMgc4PGzsRCjXQ=
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:15 2023 by rpki-client on console-fra.rpki-client.org