Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/FWPa024NYOTpVzo-GOBaZaIOoLk.roa
File: FWPa024NYOTpVzo-GOBaZaIOoLk.roa (raw, json)
Hash identifier: cXBeIWsfdo1/70A5xw5rnpjCNger3uRaRwR/hbbETKA=
Subject key identifier: 15:63:DA:D3:6E:0D:60:E4:E9:57:3A:3E:18:E0:5A:65:A2:0E:A0:B9
Certificate issuer: /CN=61E0EE79428B85EDABB5F6EB9578EFB19E63C98F
Certificate serial: 0D3A
Authority key identifier: 61:E0:EE:79:42:8B:85:ED:AB:B5:F6:EB:95:78:EF:B1:9E:63:C9:8F
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/YeDueUKLhe2rtfbrlXjvsZ5jyY8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/FWPa024NYOTpVzo-GOBaZaIOoLk.roa
Signing time: Sun 23 Apr 2023 05:57:10 +0000
ROA not before: Sun 23 Apr 2023 05:57:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 134823
IP address blocks: 103.137.22.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3386 (0xd3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61E0EE79428B85EDABB5F6EB9578EFB19E63C98F
Validity
Not Before: Apr 23 05:57:10 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1563DAD36E0D60E4E9573A3E18E05A65A20EA0B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fe:c7:7e:6d:8e:3f:b1:d0:18:ae:d4:37:7b:
fd:69:8e:9e:ba:c3:05:01:65:bd:da:6a:e1:8d:3b:
bc:80:01:ce:d5:d5:bf:56:3a:71:ab:7c:47:c5:b8:
42:0c:f9:fc:5b:7e:61:7e:0b:9f:78:84:2c:b3:0f:
88:cc:54:3c:ee:17:9d:fc:f6:d6:e9:dc:69:6d:a4:
77:7e:28:1d:1d:ec:cd:18:52:1c:fb:57:41:2b:92:
e3:05:6b:67:0b:40:90:55:40:9a:a0:cf:de:1c:9c:
61:43:4e:3a:6b:10:23:3b:de:d0:6b:7e:1b:a7:fb:
27:70:e1:b7:88:a1:f2:d6:b4:f6:dd:bc:56:52:f1:
98:43:31:08:2c:d4:82:df:5b:d7:fd:0c:c1:88:87:
e8:36:a6:ef:3d:76:0b:36:59:a8:bc:44:7f:40:8e:
91:78:52:ab:63:07:99:63:58:3c:bf:88:99:7d:db:
00:d5:97:ed:38:1e:0a:b3:65:24:d3:04:c2:0d:a8:
86:06:6a:20:91:11:fd:34:18:d9:31:79:31:ae:07:
ec:18:e4:24:e1:51:40:06:4e:90:f1:9e:0a:6b:95:
5c:4a:46:63:14:d1:71:1d:bc:d0:9f:4d:84:28:85:
c2:9c:27:67:8c:b8:9a:e0:ec:d7:80:50:7f:18:c5:
21:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:63:DA:D3:6E:0D:60:E4:E9:57:3A:3E:18:E0:5A:65:A2:0E:A0:B9
X509v3 Authority Key Identifier:
keyid:61:E0:EE:79:42:8B:85:ED:AB:B5:F6:EB:95:78:EF:B1:9E:63:C9:8F
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/YeDueUKLhe2rtfbrlXjvsZ5jyY8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/YeDueUKLhe2rtfbrlXjvsZ5jyY8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/IMCLOUD/FWPa024NYOTpVzo-GOBaZaIOoLk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.22.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:e5:89:fc:11:2d:ef:f9:0d:14:88:c5:f3:3e:1b:41:1e:a6:
9c:d1:98:11:7a:ff:32:30:86:16:1e:49:a4:8a:95:71:22:5b:
93:7b:ab:a5:69:f4:70:50:0f:b6:5b:ea:c0:10:f3:51:72:ce:
db:cf:78:80:4a:27:71:59:b9:c1:e6:14:ab:f3:8e:77:a1:c1:
75:81:02:52:1c:8a:68:4b:a2:66:6b:77:61:54:da:29:53:dd:
b2:ec:43:1a:88:bb:71:c4:f5:45:d1:69:63:2d:7e:9e:d2:b0:
74:ea:14:c4:58:4c:63:02:0e:a2:29:a8:eb:5f:77:57:cf:bf:
95:0e:41:89:d7:69:5c:c7:12:b8:35:cb:f5:09:f6:9d:52:44:
0a:5e:fd:89:33:e6:c2:2b:1e:83:71:a3:40:f6:79:b9:0c:7d:
cd:c5:5e:49:ff:6c:4a:bf:6c:b9:e8:c3:85:8b:4d:cf:07:21:
8c:3e:19:c7:fd:20:ce:fa:1f:c3:0f:3b:09:37:07:c6:6a:05:
01:09:19:23:6b:01:36:21:cc:19:63:54:7e:e5:75:3c:13:61:
d9:3d:ca:c7:e5:b1:2e:d6:1f:56:a2:b1:46:9b:b8:9c:5a:f8:
bf:8b:3c:16:a9:0e:29:82:8a:8c:cd:e1:98:ef:a6:8c:d7:94:
c6:26:ef:ba
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDTowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjFF
MEVFNzk0MjhCODVFREFCQjVGNkVCOTU3OEVGQjE5RTYzQzk4RjAeFw0yMzA0MjMw
NTU3MTBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDE1NjNEQUQzNkUwRDYw
RTRFOTU3M0EzRTE4RTA1QTY1QTIwRUEwQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDh/sd+bY4/sdAYrtQ3e/1pjp66wwUBZb3aauGNO7yAAc7V1b9W
OnGrfEfFuEIM+fxbfmF+C594hCyzD4jMVDzuF5389tbp3GltpHd+KB0d7M0YUhz7
V0ErkuMFa2cLQJBVQJqgz94cnGFDTjprECM73tBrfhun+ydw4beIofLWtPbdvFZS
8ZhDMQgs1ILfW9f9DMGIh+g2pu89dgs2Wai8RH9AjpF4UqtjB5ljWDy/iJl92wDV
l+04HgqzZSTTBMINqIYGaiCREf00GNkxeTGuB+wY5CThUUAGTpDxngprlVxKRmMU
0XEdvNCfTYQohcKcJ2eMuJrg7NeAUH8YxSErAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUFWPa024NYOTpVzo+GOBaZaIOoLkwHwYDVR0jBBgwFoAUYeDueUKLhe2rtfbr
lXjvsZ5jyY8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSU1DTE9V
RC9ZZUR1ZVVLTGhlMnJ0ZmJybFhqdnNaNWp5WTguY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL1llRHVlVUtMaGUycnRmYnJsWGp2c1o1anlZOC5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL0lNQ0xPVUQvRldQYTAyNE5ZT1RwVnpv
LUdPQmFaYUlPb0xrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AWeJFjANBgkqhkiG9w0BAQsFAAOCAQEApOWJ/BEt7/kNFIjF8z4bQR6mnNGYEXr/
MjCGFh5JpIqVcSJbk3urpWn0cFAPtlvqwBDzUXLO2894gEoncVm5weYUq/OOd6HB
dYECUhyKaEuiZmt3YVTaKVPdsuxDGoi7ccT1RdFpYy1+ntKwdOoUxFhMYwIOoimo
6193V8+/lQ5BiddpXMcSuDXL9Qn2nVJECl79iTPmwiseg3GjQPZ5uQx9zcVeSf9s
Sr9suejDhYtNzwchjD4Zx/0gzvofww87CTcHxmoFAQkZI2sBNiHMGWNUfuV1PBNh
2T3Kx+WxLtYfVqKxRpu4nFr4v4s8FqkOKYKKjM3hmO+mjNeUxibvug==
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:23:41 2023 by rpki-client on console-ams.rpki-client.org