Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/B21tchEKP7RZ1ykCUGEyMvqX7jg.roa
File: B21tchEKP7RZ1ykCUGEyMvqX7jg.roa (raw, json)
Hash identifier: j76LPL0/4OshobAHQDCVqHudD3xQ1lSfX+RdslF6raI=
Subject key identifier: 07:6D:6D:72:11:0A:3F:B4:59:D7:29:02:50:61:32:32:FA:97:EE:38
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1053
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/B21tchEKP7RZ1ykCUGEyMvqX7jg.roa
Signing time: Wed 01 Feb 2023 10:28:25 +0000
ROA not before: Wed 01 Feb 2023 10:28:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 218.210.0.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4179 (0x1053)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:25 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=076D6D72110A3FB459D7290250613232FA97EE38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f8:4f:95:96:6c:75:6f:19:48:f3:4d:f7:b7:
bd:17:85:b4:70:2c:47:e7:67:1a:bd:fd:e1:15:1b:
63:80:9d:1f:6d:a4:7b:25:9b:80:f4:6a:e2:5f:34:
f5:0c:25:1a:b3:17:b7:b0:58:c8:75:d6:9b:7d:25:
2d:70:a5:eb:1c:83:ad:62:67:63:ac:a2:76:7e:7e:
a5:63:f2:3a:49:e3:03:ce:bd:ab:68:1a:4c:2f:ac:
43:e0:27:30:fc:62:71:ea:b4:30:0d:1b:b4:1e:1f:
26:8a:f3:2a:ac:90:84:29:52:8d:1f:60:c7:ca:21:
9d:97:4c:48:bf:8b:89:3b:e8:fe:60:f0:ab:f8:3d:
e8:a4:71:79:1b:98:9e:b5:94:9b:5b:2b:4a:ed:50:
91:61:a3:c2:e1:3e:94:42:12:85:fd:9a:6e:95:6f:
5f:74:1f:ac:d2:31:a0:10:fb:1c:22:67:5b:cf:42:
97:1b:86:e2:e3:bf:5a:55:f4:3d:51:7a:e5:d2:6d:
3c:dd:23:3d:0e:0a:29:d3:7b:3e:97:69:2d:ab:6a:
97:11:fe:da:64:4b:2a:7d:af:88:2a:46:d6:2d:ac:
02:fd:1a:94:b3:8c:e8:80:ea:05:16:22:dd:28:4b:
b0:50:6f:5f:a2:ba:21:c6:21:ca:ed:49:51:a5:29:
cd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6D:6D:72:11:0A:3F:B4:59:D7:29:02:50:61:32:32:FA:97:EE:38
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/B21tchEKP7RZ1ykCUGEyMvqX7jg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.0.0/19
Signature Algorithm: sha256WithRSAEncryption
86:9e:43:00:77:84:23:3f:ff:9c:0e:0c:6d:ed:5a:32:12:50:
0b:97:30:33:62:d0:d0:67:c2:1d:59:f9:f9:0c:72:40:e2:b7:
70:75:9e:31:d1:83:df:f5:9a:85:2b:93:18:53:b1:d8:0b:b6:
19:bf:e0:32:fd:b0:07:c2:71:77:d9:2d:d4:f7:19:65:06:ab:
ba:2c:9d:5f:31:8f:f6:ed:9e:30:ab:dc:df:0f:49:87:54:51:
df:87:e3:f8:c7:94:a9:d7:3d:1e:c8:68:78:ff:ff:6a:2b:f6:
34:55:aa:57:7a:ec:40:5f:3e:8b:e7:97:33:7f:93:00:c2:a6:
6c:18:34:5f:a3:c5:32:96:ac:f9:26:df:e2:77:5d:f0:58:37:
bf:46:11:3b:83:c2:89:9d:4a:5f:e1:72:f1:6b:f9:be:87:09:
5c:c2:0c:59:ea:10:c9:da:75:0b:a6:3c:db:69:3f:e7:f9:ff:
df:9f:7c:de:87:60:bc:23:c5:52:7c:51:aa:25:fb:80:8a:ff:
e2:9f:12:66:18:8d:e1:5f:d2:ab:45:0e:3e:39:e9:f8:ac:79:
0b:44:e5:1d:21:ee:a2:fa:03:de:15:bb:ff:78:7b:2f:5a:df:
63:d2:a8:1f:b2:18:86:2e:2b:c4:22:de:40:c9:ac:ea:7d:05:
c0:c6:1d:2d
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEFMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzAyMDEx
MDI4MjVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDA3NkQ2RDcyMTEwQTNG
QjQ1OUQ3MjkwMjUwNjEzMjMyRkE5N0VFMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDy+E+Vlmx1bxlI8033t70XhbRwLEfnZxq9/eEVG2OAnR9tpHsl
m4D0auJfNPUMJRqzF7ewWMh11pt9JS1wpescg61iZ2OsonZ+fqVj8jpJ4wPOvato
GkwvrEPgJzD8YnHqtDANG7QeHyaK8yqskIQpUo0fYMfKIZ2XTEi/i4k76P5g8Kv4
PeikcXkbmJ61lJtbK0rtUJFho8LhPpRCEoX9mm6Vb190H6zSMaAQ+xwiZ1vPQpcb
huLjv1pV9D1ReuXSbTzdIz0OCinTez6XaS2rapcR/tpkSyp9r4gqRtYtrAL9GpSz
jOiA6gUWIt0oS7BQb1+iuiHGIcrtSVGlKc03AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUB21tchEKP7RZ1ykCUGEyMvqX7jgwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQjIxdGNoRUtQN1JaMXlrQ1VHRXlN
dnFYN2pnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdrSADAN
BgkqhkiG9w0BAQsFAAOCAQEAhp5DAHeEIz//nA4Mbe1aMhJQC5cwM2LQ0GfCHVn5
+QxyQOK3cHWeMdGD3/WahSuTGFOx2Au2Gb/gMv2wB8Jxd9kt1PcZZQaruiydXzGP
9u2eMKvc3w9Jh1RR34fj+MeUqdc9HshoeP//aiv2NFWqV3rsQF8+i+eXM3+TAMKm
bBg0X6PFMpas+Sbf4ndd8Fg3v0YRO4PCiZ1KX+Fy8Wv5vocJXMIMWeoQydp1C6Y8
22k/5/n/35983odgvCPFUnxRqiX7gIr/4p8SZhiN4V/Sq0UOPjnp+Kx5C0TlHSHu
ovoD3hW7/3h7L1rfY9KoH7IYhi4rxCLeQMms6n0FwMYdLQ==
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:15 2023 by rpki-client on console-fra.rpki-client.org