Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-dgL9NLUklnVkCwpQCx00btmMZc.roa
File: -dgL9NLUklnVkCwpQCx00btmMZc.roa (raw, json)
Hash identifier: EEp+CAkNMRXxTzTOEoO+Ezd2fDDNb6kV3U0h1QNF4zs=
Subject key identifier: F9:D8:0B:F4:D2:D4:92:59:D5:90:2C:29:40:2C:74:D1:BB:66:31:97
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 109C
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-dgL9NLUklnVkCwpQCx00btmMZc.roa
Signing time: Wed 01 Feb 2023 10:28:47 +0000
ROA not before: Wed 01 Feb 2023 10:28:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131597
IP address blocks: 106.105.224.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4252 (0x109c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:47 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F9D80BF4D2D49259D5902C29402C74D1BB663197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d4:7f:c6:01:ff:87:b8:bc:cd:ea:8e:3e:a9:
b8:cb:e4:1d:9a:6d:79:dd:52:cf:e1:6b:64:13:c3:
07:0a:e7:bc:69:6a:87:8d:ae:71:24:cc:ce:37:35:
38:66:e5:12:27:b0:49:6a:32:c1:c0:2c:ca:67:62:
cc:63:90:4a:46:66:b3:ef:f2:85:74:91:2c:d2:b5:
dc:6a:43:ca:6f:a7:1b:c8:7b:27:72:3c:51:8d:4a:
17:c5:dc:48:f0:f5:26:74:5d:6e:91:eb:2d:fb:92:
61:97:52:06:f8:f4:59:e5:a9:3d:d1:96:fc:d2:3f:
e8:6a:b2:59:87:29:d7:c6:c2:9a:f6:75:7b:df:63:
38:30:a1:16:06:b8:a7:bb:21:16:69:21:11:06:d2:
8e:1a:c9:98:3b:4c:44:33:df:92:0d:1e:a0:d9:25:
89:3c:fe:23:ea:41:26:bb:3c:b8:26:20:4c:f5:fb:
94:f9:c8:17:67:5f:08:fd:b4:c5:7d:0b:74:10:2a:
4e:14:86:f2:95:c4:35:d0:2c:95:39:c7:01:9a:9e:
a2:f6:04:0e:8f:31:dd:f6:65:64:b8:91:b5:68:58:
c0:da:af:70:06:82:05:62:7e:b2:be:99:ef:77:da:
de:a4:44:c3:17:7d:c8:6f:12:63:11:50:5c:cd:e4:
c1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D8:0B:F4:D2:D4:92:59:D5:90:2C:29:40:2C:74:D1:BB:66:31:97
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-dgL9NLUklnVkCwpQCx00btmMZc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.224.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:7d:de:a5:2d:c8:ca:d4:a0:4b:d3:3a:00:f0:6b:33:7e:d0:
be:23:91:31:fd:f8:e8:e3:7a:3f:01:35:90:ca:53:1f:48:41:
51:d7:60:1c:33:d2:51:ec:ff:f1:46:2e:f9:10:57:aa:c2:43:
54:95:2d:bd:e1:27:58:17:2c:aa:f8:47:62:e1:10:90:20:f5:
d4:84:7a:fd:26:c7:d9:1c:0f:90:0f:3d:f0:d2:79:85:3f:ac:
57:a1:33:e5:9f:92:98:81:aa:2c:11:5e:91:1b:a7:82:f8:c8:
ff:6d:e2:d5:7f:30:e5:c0:37:13:86:87:cb:00:5e:93:70:f1:
b6:5a:5b:55:5c:9e:fa:b9:9e:fa:e6:d2:f4:4f:24:58:aa:56:
c7:1d:ad:f5:84:22:d1:ce:6c:7c:19:c6:a0:a3:f3:89:5a:4f:
dd:52:20:e0:39:b3:d8:fc:0c:97:9a:84:5e:58:c6:59:66:ab:
96:d3:af:6f:fe:4f:8b:14:1b:d3:f4:96:8e:83:df:c9:f3:28:
d5:dc:d6:57:16:88:55:e9:c3:91:49:25:2d:15:b1:35:a5:3b:
5d:2d:58:ad:4f:dd:50:22:5b:9c:eb:ff:96:3b:e8:d5:e8:ad:
35:f9:ff:ef:9d:39:a0:a3:96:60:b5:7c:4a:4d:c1:12:e3:a7:
e2:29:b3:21
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzAyMDEx
MDI4NDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEY5RDgwQkY0RDJENDky
NTlENTkwMkMyOTQwMkM3NEQxQkI2NjMxOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDI1H/GAf+HuLzN6o4+qbjL5B2abXndUs/ha2QTwwcK57xpaoeN
rnEkzM43NThm5RInsElqMsHALMpnYsxjkEpGZrPv8oV0kSzStdxqQ8pvpxvIeydy
PFGNShfF3Ejw9SZ0XW6R6y37kmGXUgb49FnlqT3RlvzSP+hqslmHKdfGwpr2dXvf
YzgwoRYGuKe7IRZpIREG0o4ayZg7TEQz35INHqDZJYk8/iPqQSa7PLgmIEz1+5T5
yBdnXwj9tMV9C3QQKk4UhvKVxDXQLJU5xwGanqL2BA6PMd32ZWS4kbVoWMDar3AG
ggVifrK+me932t6kRMMXfchvEmMRUFzN5MHnAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU+dgL9NLUklnVkCwpQCx00btmMZcwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvLWRnTDlOTFVrbG5Wa0N3cFFDeDAw
YnRtTVpjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2pp4DAN
BgkqhkiG9w0BAQsFAAOCAQEAa33epS3IytSgS9M6APBrM37QviORMf346ON6PwE1
kMpTH0hBUddgHDPSUez/8UYu+RBXqsJDVJUtveEnWBcsqvhHYuEQkCD11IR6/SbH
2RwPkA898NJ5hT+sV6Ez5Z+SmIGqLBFekRungvjI/23i1X8w5cA3E4aHywBek3Dx
tlpbVVye+rme+ubS9E8kWKpWxx2t9YQi0c5sfBnGoKPziVpP3VIg4Dmz2PwMl5qE
XljGWWarltOvb/5PixQb0/SWjoPfyfMo1dzWVxaIVenDkUklLRWxNaU7XS1YrU/d
UCJbnOv/ljvo1eitNfn/7505oKOWYLV8Sk3BEuOn4imzIQ==
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:14 2023 by rpki-client on console-fra.rpki-client.org