Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/ISTVC/Ory_XWKBKBkPI5cbavgJhhVNW-s.roa
File: Ory_XWKBKBkPI5cbavgJhhVNW-s.roa (raw, json)
Hash identifier: fLT4nVnEwOIC/qUFI39Rjw1Ug/h9K0QctuibbhZROFo=
Subject key identifier: 3A:BC:BF:5D:62:81:28:19:0F:23:97:1B:6A:F8:09:86:15:4D:5B:EB
Certificate issuer: /CN=6887985DB19E5FD82F962B420ECC0FC4ED730D02
Certificate serial: EF
Authority key identifier: 68:87:98:5D:B1:9E:5F:D8:2F:96:2B:42:0E:CC:0F:C4:ED:73:0D:02
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/aIeYXbGeX9gvlitCDswPxO1zDQI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/ISTVC/Ory_XWKBKBkPI5cbavgJhhVNW-s.roa
Signing time: Wed 19 Oct 2022 01:30:53 +0000
ROA not before: Wed 19 Oct 2022 01:30:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9920
IP address blocks: 103.173.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 239 (0xef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6887985DB19E5FD82F962B420ECC0FC4ED730D02
Validity
Not Before: Oct 19 01:30:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3ABCBF5D628128190F23971B6AF80986154D5BEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:12:12:fc:40:15:88:b0:64:d4:25:d9:bd:
6b:0e:36:5a:2c:8c:69:4e:88:2a:b3:e8:e8:67:0e:
f9:90:43:3a:e9:a4:4c:f0:fd:a8:38:e5:ff:1a:b2:
d4:58:86:15:7a:2b:97:84:da:c0:13:47:6a:05:03:
eb:57:93:b9:9a:6d:42:a5:1d:85:06:a4:bd:ae:89:
6c:b3:f0:b9:3f:ec:78:8f:b5:a5:c1:7a:e8:d5:46:
83:7f:89:29:ee:50:a1:55:b3:e5:ce:48:f7:d8:04:
dc:41:bc:56:25:21:56:34:39:da:25:45:68:ca:cd:
f3:5d:2c:b9:50:29:1d:fb:8b:2f:b1:9a:fc:67:7a:
de:c9:da:fc:0b:64:37:88:60:09:1c:f7:b1:45:fe:
df:d2:47:14:9c:58:87:85:43:58:b0:38:61:6a:40:
79:36:19:aa:6c:9a:3c:50:f6:5e:54:0d:71:f0:a8:
fb:c9:a4:c2:2c:35:db:e8:b1:51:39:89:a6:26:33:
ba:69:67:71:fd:d2:68:49:74:03:f4:a1:27:f7:15:
8d:40:cc:ae:f9:e1:e2:af:ba:b0:3d:4d:c8:91:6e:
2e:43:b3:60:13:86:13:aa:02:fb:62:18:99:ff:3b:
52:39:37:8b:3b:fa:6a:dc:ef:04:f1:fe:9c:a6:ad:
87:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BC:BF:5D:62:81:28:19:0F:23:97:1B:6A:F8:09:86:15:4D:5B:EB
X509v3 Authority Key Identifier:
keyid:68:87:98:5D:B1:9E:5F:D8:2F:96:2B:42:0E:CC:0F:C4:ED:73:0D:02
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISTVC/aIeYXbGeX9gvlitCDswPxO1zDQI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/aIeYXbGeX9gvlitCDswPxO1zDQI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/ISTVC/Ory_XWKBKBkPI5cbavgJhhVNW-s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.95.0/24
Signature Algorithm: sha256WithRSAEncryption
97:9e:5f:07:ee:3a:80:4e:0e:a8:22:6c:09:72:b3:f6:48:3b:
ef:6e:de:ca:4c:41:81:86:0a:bf:9c:6f:33:e7:72:11:d7:d1:
a5:da:4e:39:c6:cc:15:de:6a:4e:5d:6d:52:6f:52:40:c7:3f:
dc:cc:98:9b:4a:27:fa:69:d3:f8:f6:2b:50:04:9a:93:1f:cc:
43:88:be:94:9e:54:d2:01:6e:c1:89:cc:d2:e9:00:e8:bb:e6:
18:b8:00:ec:35:52:2d:34:61:bc:8b:51:4a:44:d3:64:99:64:
c8:7d:2a:9d:b7:04:18:ce:09:c8:d5:c1:17:91:f1:08:c8:a3:
8f:6f:9f:97:f9:5d:49:e8:c6:32:9d:35:01:42:4d:a3:63:d4:
eb:cf:26:11:23:f7:81:28:32:84:e2:a8:b0:71:b5:fc:9a:31:
4b:50:8d:48:f3:6e:6a:17:a7:ae:b4:e3:bd:9f:fb:31:cf:09:
45:06:29:38:6d:80:36:65:9b:c0:30:08:3e:44:8d:86:3b:fe:
c8:77:cd:86:3b:95:dc:26:e6:57:98:3e:d7:30:d9:ea:29:a3:
ca:24:a3:1e:d5:d2:e5:d2:82:1c:c4:51:ff:85:13:3c:d7:bb:
4d:c1:d7:16:9e:84:fb:be:ea:ec:01:28:d5:68:f6:47:05:8d:
54:19:ec:35
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjg4
Nzk4NURCMTlFNUZEODJGOTYyQjQyMEVDQzBGQzRFRDczMEQwMjAeFw0yMjEwMTkw
MTMwNTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDNBQkNCRjVENjI4MTI4
MTkwRjIzOTcxQjZBRjgwOTg2MTU0RDVCRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCveBIS/EAViLBk1CXZvWsONlosjGlOiCqz6OhnDvmQQzrppEzw
/ag45f8astRYhhV6K5eE2sATR2oFA+tXk7mabUKlHYUGpL2uiWyz8Lk/7HiPtaXB
eujVRoN/iSnuUKFVs+XOSPfYBNxBvFYlIVY0OdolRWjKzfNdLLlQKR37iy+xmvxn
et7J2vwLZDeIYAkc97FF/t/SRxScWIeFQ1iwOGFqQHk2GapsmjxQ9l5UDXHwqPvJ
pMIsNdvosVE5iaYmM7ppZ3H90mhJdAP0oSf3FY1AzK754eKvurA9TciRbi5Ds2AT
hhOqAvtiGJn/O1I5N4s7+mrc7wTx/pymrYd/AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUOry/XWKBKBkPI5cbavgJhhVNW+swHwYDVR0jBBgwFoAUaIeYXbGeX9gvlitC
DswPxO1zDQIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvSVNUVkMv
YUllWVhiR2VYOWd2bGl0Q0Rzd1B4TzF6RFFJLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9hSWVZWGJHZVg5Z3ZsaXRDRHN3UHhPMXpEUUkuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9JU1RWQy9PcnlfWFdLQktCa1BJNWNiYXZn
SmhoVk5XLXMucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ61f
MA0GCSqGSIb3DQEBCwUAA4IBAQCXnl8H7jqATg6oImwJcrP2SDvvbt7KTEGBhgq/
nG8z53IR19Gl2k45xswV3mpOXW1Sb1JAxz/czJibSif6adP49itQBJqTH8xDiL6U
nlTSAW7BiczS6QDou+YYuADsNVItNGG8i1FKRNNkmWTIfSqdtwQYzgnI1cEXkfEI
yKOPb5+X+V1J6MYynTUBQk2jY9TrzyYRI/eBKDKE4qiwcbX8mjFLUI1I825qF6eu
tOO9n/sxzwlFBik4bYA2ZZvAMAg+RI2GO/7Id82GO5XcJuZXmD7XMNnqKaPKJKMe
1dLl0oIcxFH/hRM817tNwdcWnoT7vursASjVaPZHBY1UGew1
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:28:15 2023 by rpki-client on console-fra.rpki-client.org