Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/6bxcjISlWZgwzVn2pJm-xjv5CIk.roa
File: 6bxcjISlWZgwzVn2pJm-xjv5CIk.roa (raw, json)
Hash identifier: TqK9PewjkViPOZgnLnlIWjYW5MzVuliokw6aNc7T2+U=
Subject key identifier: E9:BC:5C:8C:84:A5:59:98:30:CD:59:F6:A4:99:BE:C6:3B:F9:08:89
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0C6F
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6bxcjISlWZgwzVn2pJm-xjv5CIk.roa
Signing time: Thu 15 Sep 2022 02:44:00 +0000
ROA not before: Thu 15 Sep 2022 02:44:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 192.72.64.0/18 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3183 (0xc6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Sep 15 02:44:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E9BC5C8C84A5599830CD59F6A499BEC63BF90889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:f0:db:fe:e5:d8:d7:e0:12:84:b2:11:08:
26:95:e8:93:84:7f:0a:1c:47:f3:ef:01:7b:9b:d6:
41:bd:71:b3:c9:6b:53:82:bd:4c:93:f5:74:e5:e4:
02:5d:39:4d:6c:8e:a1:8e:b6:4f:a6:33:9e:8d:99:
0a:ee:56:5f:27:d2:9d:6c:59:a8:22:37:78:f0:cd:
10:4b:15:c0:fe:56:1e:2a:15:d5:5f:4d:57:d5:b0:
7a:14:ed:6d:2e:ba:39:d5:be:08:02:2d:bb:b2:d3:
a5:56:15:64:ba:06:c0:e8:34:82:de:ea:5c:6e:fb:
41:49:4c:85:18:ba:5c:96:01:b9:27:b7:ad:be:d7:
64:71:b5:bb:6d:4b:dd:ae:25:2c:70:3b:e2:25:20:
e9:ef:00:01:70:5b:12:64:66:9d:52:af:9f:6f:de:
f6:c7:c7:da:2e:9c:af:71:23:80:e1:da:fd:bf:ab:
ea:01:a5:28:48:7b:67:8b:91:46:23:1a:87:9e:9e:
09:aa:4f:50:40:4a:4a:d4:9d:6f:f3:ce:b6:b6:f0:
06:7c:92:a1:1f:0b:4e:24:92:33:2a:e8:fb:b5:7c:
38:c5:d2:0f:8f:a2:b1:c4:f7:df:07:e3:e8:f8:cd:
76:34:48:12:05:5e:3f:8b:0e:82:9a:02:76:f7:db:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BC:5C:8C:84:A5:59:98:30:CD:59:F6:A4:99:BE:C6:3B:F9:08:89
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6bxcjISlWZgwzVn2pJm-xjv5CIk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3c:fa:1b:df:f2:c1:1f:1f:6a:57:89:e0:e1:26:ec:3f:b3:4a:
c9:ea:ea:3b:68:c4:70:d3:64:65:9f:0f:6b:12:53:cf:ac:d5:
b6:e4:68:1e:1c:2b:78:68:a0:40:47:97:03:26:90:ca:39:35:
4a:e4:10:d4:79:e7:14:10:ac:19:73:7f:cf:d3:c5:18:91:d3:
6e:46:41:9e:18:25:6c:75:9c:9d:f0:42:7d:a6:23:18:d1:05:
e9:6e:9e:b8:dd:8d:28:9f:cc:3e:20:71:30:c6:70:89:29:a3:
96:a6:05:b0:9a:69:22:78:ac:a0:09:5f:70:93:2a:b0:e8:13:
d5:44:a0:ed:14:92:d8:1d:5c:40:83:8e:4c:44:eb:bc:c6:9d:
7f:6e:f4:ed:ac:70:9e:c5:4a:d1:86:52:81:cf:4e:46:49:3f:
8f:b7:0f:85:65:09:a2:2a:fb:5b:a5:47:c5:f3:a9:2e:a7:f3:
b5:1a:c3:8e:2d:27:8e:9c:30:5f:52:ec:b0:51:05:5a:6a:5d:
8a:76:3c:ed:e6:51:65:0b:ea:b8:76:83:31:62:65:e6:2a:77:
73:18:1b:0c:a6:d6:9f:30:6d:9d:4b:99:2f:4f:b2:4d:2e:d6:
41:c1:ff:df:9b:30:21:ac:c8:a5:38:45:67:93:21:de:5d:70:
c4:71:90:28
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDG8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB
NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yMjA5MTUw
MjQ0MDBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEU5QkM1QzhDODRBNTU5
OTgzMENENTlGNkE0OTlCRUM2M0JGOTA4ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9afDb/uXY1+AShLIRCCaV6JOEfwocR/PvAXub1kG9cbPJa1OC
vUyT9XTl5AJdOU1sjqGOtk+mM56NmQruVl8n0p1sWagiN3jwzRBLFcD+Vh4qFdVf
TVfVsHoU7W0uujnVvggCLbuy06VWFWS6BsDoNILe6lxu+0FJTIUYulyWAbknt62+
12RxtbttS92uJSxwO+IlIOnvAAFwWxJkZp1Sr59v3vbHx9ounK9xI4Dh2v2/q+oB
pShIe2eLkUYjGoeengmqT1BASkrUnW/zzra28AZ8kqEfC04kkjMq6Pu1fDjF0g+P
orHE998H4+j4zXY0SBIFXj+LDoKaAnb3288VAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU6bxcjISlWZgwzVn2pJm+xjv5CIkwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC
1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90
S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvNmJ4Y2pJU2xXWmd3elZuMnBKbS14
anY1Q0lrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBsBIQDAN
BgkqhkiG9w0BAQsFAAOCAQEAPPob3/LBHx9qV4ng4SbsP7NKyerqO2jEcNNkZZ8P
axJTz6zVtuRoHhwreGigQEeXAyaQyjk1SuQQ1HnnFBCsGXN/z9PFGJHTbkZBnhgl
bHWcnfBCfaYjGNEF6W6euN2NKJ/MPiBxMMZwiSmjlqYFsJppInisoAlfcJMqsOgT
1USg7RSS2B1cQIOOTETrvMadf2707axwnsVK0YZSgc9ORkk/j7cPhWUJoir7W6VH
xfOpLqfztRrDji0njpwwX1LssFEFWmpdinY87eZRZQvquHaDMWJl5ip3cxgbDKbW
nzBtnUuZL0+yTS7WQcH/35swIazIpThFZ5Mh3l1wxHGQKA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org