Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/LEYUN/c4GzWrJeUzTskdYQXfztyqaOIPg.roa
File: c4GzWrJeUzTskdYQXfztyqaOIPg.roa (raw, json)
Hash identifier: Z4ZOwLYav5h4Myr6FtEtp8alsQ+FVSrrJ8yNrTe0iw8=
Subject key identifier: 73:81:B3:5A:B2:5E:53:34:EC:91:D6:10:5D:FC:ED:CA:A6:8E:20:F8
Certificate issuer: /CN=5322E61AE8C8DD8953E1E6BDC96AE4827AFCF990
Certificate serial: 07
Authority key identifier: 53:22:E6:1A:E8:C8:DD:89:53:E1:E6:BD:C9:6A:E4:82:7A:FC:F9:90
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/c4GzWrJeUzTskdYQXfztyqaOIPg.roa
Signing time: Mon 21 Oct 2024 09:19:38 +0000
ROA not before: Mon 21 Oct 2024 09:19:38 +0000
ROA not after: Tue 14 Oct 2025 15:30:32 +0000
asID: 152616
IP address blocks: 160.191.6.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 22 Oct 2024 00:18:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5322E61AE8C8DD8953E1E6BDC96AE4827AFCF990
Validity
Not Before: Oct 21 09:19:38 2024 GMT
Not After : Oct 14 15:30:32 2025 GMT
Subject: CN=7381B35AB25E5334EC91D6105DFCEDCAA68E20F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:66:70:1d:94:09:43:93:80:21:07:d2:8e:
6c:83:a3:ce:92:3e:26:27:f5:17:f3:dc:fd:67:87:
00:2e:a3:fd:5c:88:7f:82:d2:b7:2f:5d:39:ba:76:
04:c9:40:6e:53:cf:d0:6e:d1:16:29:e0:7b:65:d2:
34:16:d0:c8:9d:77:f2:80:f8:95:21:e5:b7:a8:49:
c5:6d:bd:23:e6:fc:05:dd:2f:e3:eb:80:8e:1b:54:
ba:88:bf:2d:82:dd:1a:c8:bc:6e:3e:27:41:cc:5d:
0a:ac:5e:32:b9:31:41:3b:6b:b6:e1:64:7d:2e:5c:
bd:57:c5:4c:03:05:a5:5f:9c:14:75:a0:9f:aa:77:
ee:ee:86:3d:3f:18:9a:62:1b:61:3b:4d:9c:04:24:
5f:f1:93:98:e3:b1:0a:ad:52:6a:e0:b8:9d:59:ba:
9d:61:da:f7:f5:52:8b:1e:ba:b5:4e:b6:b0:51:ee:
1f:7c:4b:f9:6d:59:a8:b1:15:09:7a:69:35:f8:f1:
6e:77:30:10:83:f8:a8:06:f4:93:d1:3c:ee:2a:e5:
fa:0b:cf:cc:d8:65:b7:d0:45:fc:c3:56:37:68:49:
52:73:cf:ba:77:1b:f1:af:4f:c6:ab:1a:77:00:6d:
3f:2d:bb:de:79:7f:ce:f7:cb:f8:4c:b9:55:e1:59:
a8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:81:B3:5A:B2:5E:53:34:EC:91:D6:10:5D:FC:ED:CA:A6:8E:20:F8
X509v3 Authority Key Identifier:
keyid:53:22:E6:1A:E8:C8:DD:89:53:E1:E6:BD:C9:6A:E4:82:7A:FC:F9:90
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/UyLmGujI3YlT4ea9yWrkgnr8-ZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UyLmGujI3YlT4ea9yWrkgnr8-ZA.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/LEYUN/c4GzWrJeUzTskdYQXfztyqaOIPg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
160.191.6.0/23
Signature Algorithm: sha256WithRSAEncryption
90:24:93:ba:dc:a2:c7:9a:24:35:ef:2d:8e:aa:49:0e:70:8e:
91:80:68:c3:ee:c9:46:f9:4e:7e:e8:95:21:83:b4:22:49:b4:
59:df:a7:70:a3:19:2d:e7:aa:86:ac:1e:76:9b:7b:c2:40:26:
90:91:48:ca:7b:e4:6d:af:16:12:5a:da:54:50:d6:de:59:e1:
65:33:ae:d6:fe:85:ea:1d:ae:4c:2c:9e:e8:ee:ae:81:fb:4c:
23:ce:61:0b:fe:df:86:a0:ff:9d:f5:ed:a2:a7:07:d2:b0:54:
a3:59:4e:6c:7a:45:01:0e:9c:62:23:51:4b:2e:b0:be:02:ae:
d7:fe:05:df:e3:9f:9e:07:23:c4:bd:28:31:cd:ea:ba:a0:0b:
55:fa:bd:b0:62:c3:68:73:4b:9a:1f:f8:16:6b:06:e3:8f:bc:
ae:95:04:ab:e7:07:ef:17:62:67:77:47:bc:4d:4e:1b:5b:27:
c8:11:2b:f5:f5:75:c2:4f:00:d1:b8:80:67:fb:97:b9:55:f5:
47:45:f5:a6:79:07:d4:35:88:d5:f2:0e:8a:5d:98:c5:b6:43:
d6:2b:d6:58:54:e3:f8:44:fc:0c:e3:03:61:ee:0e:7c:0e:46:
5f:3e:49:a6:f1:d2:e0:22:7b:52:65:dd:76:2f:11:c1:9c:89:
a0:12:78:46
-----BEGIN CERTIFICATE-----
MIIEzzCCA7egAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzIy
RTYxQUU4QzhERDg5NTNFMUU2QkRDOTZBRTQ4MjdBRkNGOTkwMB4XDTI0MTAyMTA5
MTkzOFoXDTI1MTAxNDE1MzAzMlowMzExMC8GA1UEAxMoNzM4MUIzNUFCMjVFNTMz
NEVDOTFENjEwNURGQ0VEQ0FBNjhFMjBGODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALrtZnAdlAlDk4AhB9KObIOjzpI+Jif1F/Pc/WeHAC6j/VyIf4LS
ty9dObp2BMlAblPP0G7RFinge2XSNBbQyJ138oD4lSHlt6hJxW29I+b8Bd0v4+uA
jhtUuoi/LYLdGsi8bj4nQcxdCqxeMrkxQTtrtuFkfS5cvVfFTAMFpV+cFHWgn6p3
7u6GPT8YmmIbYTtNnAQkX/GTmOOxCq1SauC4nVm6nWHa9/VSix66tU62sFHuH3xL
+W1ZqLEVCXppNfjxbncwEIP4qAb0k9E87irl+gvPzNhlt9BF/MNWN2hJUnPPuncb
8a9PxqsadwBtPy273nl/zvfL+Ey5VeFZqNECAwEAAaOCAewwggHoMB0GA1UdDgQW
BBRzgbNasl5TNOyR1hBd/O3Kpo4g+DAfBgNVHSMEGDAWgBRTIuYa6MjdiVPh5r3J
auSCevz5kDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsGA1UdHwRUMFIwUKBO
oEyGSnJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9MRVlVTi9V
eUxtR3VqSTNZbFQ0ZWE5eVdya2ducjgtWkEuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L1V5TG1HdWpJM1lsVDRlYTl5V3JrZ25yOC1aQS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGbBggrBgEFBQcBCwSBjjCBizBWBggrBgEFBQcwC4ZKcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0xFWVVOL2M0R3pXckplVXpUc2tkWVFYZnp0
eXFhT0lQZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9y
cmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGgvwYw
DQYJKoZIhvcNAQELBQADggEBAJAkk7rcoseaJDXvLY6qSQ5wjpGAaMPuyUb5Tn7o
lSGDtCJJtFnfp3CjGS3nqoasHnabe8JAJpCRSMp75G2vFhJa2lRQ1t5Z4WUzrtb+
heodrkwsnujuroH7TCPOYQv+34ag/5317aKnB9KwVKNZTmx6RQEOnGIjUUsusL4C
rtf+Bd/jn54HI8S9KDHN6rqgC1X6vbBiw2hzS5of+BZrBuOPvK6VBKvnB+8XYmd3
R7xNThtbJ8gRK/X1dcJPANG4gGf7l7lV9UdF9aZ5B9Q1iNXyDopdmMW2Q9Yr1lhU
4/hE/AzjA2HuDnwORl8+Sabx0uAie1Jl3XYvEcGciaASeEY=
Generated at Tue Oct 22 02:19:43 2024 by rpki-client on console-ams.rpki-client.org