Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Aw4dOREUDPReGUdOfArWb4mWPDc.roa
File: Aw4dOREUDPReGUdOfArWb4mWPDc.roa (raw, json)
Hash identifier: vtg4GH32dvB3g322mW2TVVWzwZ68DVuoadx1z6b7Rfc=
Subject key identifier: 03:0E:1D:39:11:14:0C:F4:5E:19:47:4E:7C:0A:D6:6F:89:96:3C:37
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Aw4dOREUDPReGUdOfArWb4mWPDc.roa
Signing time: Thu 15 Sep 2022 02:43:42 +0000
ROA not before: Thu 15 Sep 2022 02:43:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 61.56.192.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=030E1D3911140CF45E19474E7C0AD66F89963C37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:4d:1d:6c:8d:17:2c:2d:95:9e:4e:82:3e:
02:2c:b7:9d:3a:95:f9:2d:20:7e:6e:15:b9:89:61:
eb:29:38:88:63:60:3a:e1:ca:5e:e6:20:ae:6d:07:
b9:28:35:c4:5d:9e:78:22:7d:c9:94:78:37:40:73:
ff:78:da:ee:d8:bd:fa:f5:70:8f:24:e1:93:28:f3:
fc:10:4d:01:cf:49:67:50:22:e5:94:20:90:02:2a:
7b:9d:00:88:f5:3f:58:5f:45:a2:f8:83:8e:71:75:
a3:89:cd:6f:87:a6:10:b8:dd:ee:e1:26:91:d7:2e:
27:6a:5f:10:93:98:3a:b3:f9:bc:d3:6c:d3:ab:02:
0e:43:62:84:20:f5:89:86:12:94:ec:71:d9:7a:54:
26:0f:c6:3d:f5:b3:53:60:ab:4e:47:8e:c7:86:d3:
2e:94:02:ee:93:5a:e6:b8:f1:cf:bf:c3:79:0e:90:
6c:3c:0d:ed:89:8b:c8:86:3a:98:35:a5:d8:e7:a5:
89:1b:b8:58:35:32:43:67:b5:6b:53:43:f2:f6:a3:
51:17:74:68:0e:fe:40:73:1c:f6:79:27:94:63:75:
66:4f:90:08:3a:e6:b9:e2:11:9d:7c:8f:5c:7b:c9:
60:c9:53:4e:9e:8e:4e:1c:9a:44:76:ec:52:65:80:
ff:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0E:1D:39:11:14:0C:F4:5E:19:47:4E:7C:0A:D6:6F:89:96:3C:37
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Aw4dOREUDPReGUdOfArWb4mWPDc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.192.0/19
Signature Algorithm: sha256WithRSAEncryption
68:0a:a5:97:4d:a8:4b:a8:40:a5:28:58:43:27:86:de:1c:c8:
e6:39:8d:5d:f0:f1:73:d6:64:6d:87:87:4a:4b:69:46:2a:7a:
af:c2:1a:3b:b0:bb:a1:38:0e:06:32:30:48:9d:b7:a0:49:ce:
54:2c:c1:e2:26:f3:de:9f:cd:0c:46:fb:f2:f4:cc:9f:b6:cc:
d6:42:b6:d0:6c:56:06:b0:99:65:6d:c0:e6:5d:44:9d:aa:dd:
80:f1:07:37:b5:fc:1f:7b:3a:7a:e0:bb:84:41:23:5f:dc:4e:
cc:6b:7f:b1:db:5b:cd:28:d2:1f:a0:fb:42:36:01:91:ef:d6:
e0:79:78:9b:70:a2:9e:fe:9a:e6:9d:84:08:6b:67:fc:2b:b8:
03:d8:13:0a:ee:63:33:0d:8c:db:9b:04:f6:97:0c:04:3c:61:
e5:39:c5:28:75:96:87:17:d8:be:37:43:a8:03:a2:ec:ff:b3:
35:28:45:a7:93:7e:9e:9c:4a:4d:ef:65:0a:7b:17:0d:b4:34:
7b:59:58:c0:7b:2a:98:32:d8:70:3a:07:35:c0:a9:53:54:a7:
91:28:36:e0:22:26:81:51:b0:e7:8f:d6:04:08:e5:ef:33:2f:
4e:20:7b:89:b5:9c:78:29:f3:72:49:ef:05:1e:a3:8a:2f:4d:
15:81:9f:05
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzNDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDAzMEUxRDM5MTExNDBD
RjQ1RTE5NDc0RTdDMEFENjZGODk5NjNDMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwSU0dbI0XLC2Vnk6CPgIst506lfktIH5uFbmJYespOIhjYDrh
yl7mIK5tB7koNcRdnngifcmUeDdAc/942u7Yvfr1cI8k4ZMo8/wQTQHPSWdQIuWU
IJACKnudAIj1P1hfRaL4g45xdaOJzW+HphC43e7hJpHXLidqXxCTmDqz+bzTbNOr
Ag5DYoQg9YmGEpTscdl6VCYPxj31s1Ngq05HjseG0y6UAu6TWua48c+/w3kOkGw8
De2Ji8iGOpg1pdjnpYkbuFg1MkNntWtTQ/L2o1EXdGgO/kBzHPZ5J5RjdWZPkAg6
5rniEZ18j1x7yWDJU06ejk4cmkR27FJlgP9nAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUAw4dOREUDPReGUdOfArWb4mWPDcwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQXc0ZE9SRVVEUFJlR1VkT2ZBcldi
NG1XUERjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBT04wDAN
BgkqhkiG9w0BAQsFAAOCAQEAaAqll02oS6hApShYQyeG3hzI5jmNXfDxc9ZkbYeH
SktpRip6r8IaO7C7oTgOBjIwSJ23oEnOVCzB4ibz3p/NDEb78vTMn7bM1kK20GxW
BrCZZW3A5l1EnardgPEHN7X8H3s6euC7hEEjX9xOzGt/sdtbzSjSH6D7QjYBke/W
4Hl4m3Cinv6a5p2ECGtn/Cu4A9gTCu5jMw2M25sE9pcMBDxh5TnFKHWWhxfYvjdD
qAOi7P+zNShFp5N+npxKTe9lCnsXDbQ0e1lYwHsqmDLYcDoHNcCpU1SnkSg24CIm
gVGw54/WBAjl7zMvTiB7ibWceCnzcknvBR6jii9NFYGfBQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org