Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/9tyVFlp6ef6uvbs0rdpk2Ub2Cu4.roa
File: 9tyVFlp6ef6uvbs0rdpk2Ub2Cu4.roa (raw, json)
Hash identifier: 4nlfMrCAwaDNSa7whU1Fgnml1jjHQTkB+58vryhUoo4=
Subject key identifier: F6:DC:95:16:5A:7A:79:FE:AE:BD:BB:34:AD:DA:64:D9:46:F6:0A:EE
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1110
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9tyVFlp6ef6uvbs0rdpk2Ub2Cu4.roa
Signing time: Wed 01 Feb 2023 10:29:25 +0000
ROA not before: Wed 01 Feb 2023 10:29:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 122.146.64.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4368 (0x1110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:25 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F6DC95165A7A79FEAEBDBB34ADDA64D946F60AEE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:40:d9:d5:1e:9d:17:ff:8b:51:ce:3c:4f:
9d:d6:3c:18:63:36:62:80:83:f0:71:3e:1d:01:66:
ac:ee:26:4f:07:41:b4:12:8e:fd:4e:bf:79:8f:fc:
f9:07:03:7b:f7:9d:00:6b:cd:de:4b:7e:ff:ce:b8:
48:77:d5:12:17:b0:ce:92:a1:8b:91:b3:62:ee:b8:
74:29:61:e9:76:73:c7:2a:e8:63:50:f9:53:d0:e2:
17:f6:98:70:2d:0a:c2:3a:b1:7a:ab:3e:9f:a3:42:
22:c1:21:58:7d:c8:5c:b0:19:fa:fa:ad:69:e7:3b:
c5:11:2d:2e:9d:f9:34:c8:3f:8d:58:27:e8:20:6c:
dd:e5:41:01:70:f0:f8:a2:d7:9d:4b:07:1c:e4:7a:
31:02:02:6d:f6:06:0d:87:6b:f4:9b:12:d1:58:ea:
e3:d8:16:dd:05:84:2f:8a:ad:4d:f0:0a:39:4b:4e:
1e:5b:fc:d6:f7:64:0e:76:ab:50:87:8b:a9:94:35:
0a:e4:78:25:91:ce:f0:ab:13:35:cd:74:d3:39:0d:
2b:7a:1f:f6:13:47:3e:2c:9b:75:85:ab:d2:9d:5f:
36:f8:f8:09:83:32:1c:8e:63:ad:bb:5d:fa:b7:b4:
3e:f6:ae:98:56:ab:bb:2c:53:fc:74:2e:58:92:a3:
c8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DC:95:16:5A:7A:79:FE:AE:BD:BB:34:AD:DA:64:D9:46:F6:0A:EE
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9tyVFlp6ef6uvbs0rdpk2Ub2Cu4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.64.0/19
Signature Algorithm: sha256WithRSAEncryption
71:5b:f3:d2:33:90:9e:2b:2a:87:7a:3c:51:f2:a4:af:c2:ea:
ce:02:a1:f1:38:a4:4d:47:52:c5:70:2a:e9:dc:b8:93:16:13:
29:6c:9b:27:01:83:42:98:42:82:7d:c1:b9:11:89:44:46:b5:
47:7e:93:ec:df:c0:4b:da:8e:96:7d:93:0d:1f:93:8d:81:13:
2d:b1:4a:a4:b5:84:46:0b:d1:76:a0:6d:c5:81:69:b8:58:39:
6b:83:98:39:fd:75:4f:d5:1c:3d:5f:1b:31:be:7d:38:ee:ba:
ba:fa:c0:5f:6b:7d:a7:6b:3d:b8:68:9a:6e:95:10:c1:d5:9f:
02:cf:20:6b:5b:4b:96:52:85:cf:4d:13:af:00:f3:b6:de:27:
67:70:2b:82:c2:08:82:8f:d5:f8:ad:5b:bf:08:68:d6:aa:3a:
bd:ab:31:3c:b6:72:42:ff:86:44:d3:d1:b1:91:34:70:b6:ff:
d6:d4:1f:33:89:86:56:95:52:3b:ba:c1:de:c8:37:16:c8:5f:
a6:3d:95:68:ac:6d:02:a5:09:10:65:70:f6:cd:05:dd:21:5b:
5d:7a:63:2c:44:9c:a6:c9:31:a0:92:29:b0:98:bc:70:63:bc:
c0:bf:5b:c0:2b:4f:af:3e:d9:de:25:98:e8:62:b7:92:95:33:
df:4d:79:f2
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICERAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzAyMDEx
MDI5MjVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEY2REM5NTE2NUE3QTc5
RkVBRUJEQkIzNEFEREE2NEQ5NDZGNjBBRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2LkDZ1R6dF/+LUc48T53WPBhjNmKAg/BxPh0BZqzuJk8HQbQS
jv1Ov3mP/PkHA3v3nQBrzd5Lfv/OuEh31RIXsM6SoYuRs2LuuHQpYel2c8cq6GNQ
+VPQ4hf2mHAtCsI6sXqrPp+jQiLBIVh9yFywGfr6rWnnO8URLS6d+TTIP41YJ+gg
bN3lQQFw8Pii151LBxzkejECAm32Bg2Ha/SbEtFY6uPYFt0FhC+KrU3wCjlLTh5b
/Nb3ZA52q1CHi6mUNQrkeCWRzvCrEzXNdNM5DSt6H/YTRz4sm3WFq9KdXzb4+AmD
MhyOY627Xfq3tD72rphWq7ssU/x0LliSo8irAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU9tyVFlp6ef6uvbs0rdpk2Ub2Cu4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvOXR5VkZscDZlZjZ1dmJzMHJkcGsy
VWIyQ3U0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXqSQDAN
BgkqhkiG9w0BAQsFAAOCAQEAcVvz0jOQnisqh3o8UfKkr8LqzgKh8TikTUdSxXAq
6dy4kxYTKWybJwGDQphCgn3BuRGJREa1R36T7N/AS9qOln2TDR+TjYETLbFKpLWE
RgvRdqBtxYFpuFg5a4OYOf11T9UcPV8bMb59OO66uvrAX2t9p2s9uGiabpUQwdWf
As8ga1tLllKFz00TrwDztt4nZ3ArgsIIgo/V+K1bvwho1qo6vasxPLZyQv+GRNPR
sZE0cLb/1tQfM4mGVpVSO7rB3sg3Fshfpj2VaKxtAqUJEGVw9s0F3SFbXXpjLESc
pskxoJIpsJi8cGO8wL9bwCtPrz7Z3iWY6GK3kpUz30158g==
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:15 2023 by rpki-client on console-fra.rpki-client.org