Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/CB6_Fyu2rux9yiq-kFBSlTbnGuA.roa
File: CB6_Fyu2rux9yiq-kFBSlTbnGuA.roa (raw, json)
Hash identifier: 8TQc1LHUzIbEzEQjQBQhqPgLWviOsQcTnOEwILGXEl8=
Subject key identifier: 08:1E:BF:17:2B:B6:AE:EC:7D:CA:2A:BE:90:50:52:95:36:E7:1A:E0
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CB6_Fyu2rux9yiq-kFBSlTbnGuA.roa
Signing time: Thu 15 Sep 2022 02:42:52 +0000
ROA not before: Thu 15 Sep 2022 02:42:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 60.245.96.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=081EBF172BB6AEEC7DCA2ABE9050529536E71AE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:59:47:08:22:93:a6:47:59:08:e1:c7:07:5b:
3b:46:bd:36:02:15:22:bc:2e:e9:af:e9:31:c5:c4:
67:9b:e6:91:cb:ef:00:c7:ea:d6:a9:58:e2:7a:0b:
e9:93:40:80:3c:86:54:6c:20:10:76:fe:6d:24:80:
68:9c:33:c0:d3:7d:cb:eb:48:7c:84:0b:80:d9:cf:
04:a3:91:cd:11:f5:2e:40:7d:12:7f:3c:0a:25:8b:
b3:9f:ed:bb:a3:ad:29:4a:7a:5a:62:9c:ec:88:08:
a0:83:68:3d:67:59:b2:bc:cf:c2:47:05:4b:6c:ce:
0b:5d:3c:68:91:89:8f:8b:ef:a8:48:71:d4:4a:b0:
4f:13:55:8b:4e:d7:3d:d9:c4:bb:dc:51:e9:e2:59:
b4:66:14:bf:0c:a5:14:e6:ba:78:88:1b:dd:b9:77:
9e:ef:93:39:8c:22:1c:4f:d0:4d:ce:cd:ab:0d:6e:
11:87:39:3f:47:3d:8c:1b:22:e9:ff:f8:14:09:1c:
58:61:2a:5f:f6:fe:ce:b9:4b:f5:0b:84:7b:21:5b:
12:96:01:0f:ec:6f:b8:89:a3:2a:06:92:ee:1e:7d:
1b:60:99:6a:11:29:d3:ff:a6:91:75:dd:a5:54:2f:
05:40:d8:d9:7e:f3:c4:6a:90:0e:98:82:d1:e2:c0:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1E:BF:17:2B:B6:AE:EC:7D:CA:2A:BE:90:50:52:95:36:E7:1A:E0
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CB6_Fyu2rux9yiq-kFBSlTbnGuA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.245.96.0/19
Signature Algorithm: sha256WithRSAEncryption
92:bb:5c:7a:92:d3:fd:8e:77:59:6a:1e:f5:99:e6:e4:19:cf:
bc:ac:fe:fa:4d:80:cf:11:7f:b2:2e:0c:59:cb:08:a0:bc:54:
01:10:ed:1b:ea:67:3c:ca:06:3f:f5:b7:af:dd:48:21:87:5f:
a7:29:ac:29:83:96:25:51:76:69:3e:a0:64:e7:51:db:5e:a5:
6b:85:b5:97:d5:c7:ec:56:a5:df:2c:5f:c6:9a:30:04:e3:eb:
1b:32:a5:66:c6:86:25:4f:b4:30:09:c4:93:76:a0:32:70:9b:
83:e7:7c:0c:d1:a0:49:f0:72:69:96:3c:23:2a:ca:fd:40:8a:
e4:8a:0f:4b:2d:9f:c1:73:9d:78:cd:cf:06:ad:f1:74:aa:7b:
d0:bf:89:9a:f9:f7:e3:e3:b0:4d:fd:5a:1d:b8:10:88:eb:3d:
e8:52:84:39:35:73:db:c5:76:f6:97:99:6a:02:b2:1f:da:9b:
f4:0a:00:63:bc:85:dc:0e:f8:1c:99:9a:a4:8f:4f:ff:3f:0a:
8a:39:42:0b:ec:37:15:39:7c:0a:fb:37:42:e7:e9:1f:36:bd:
7d:5b:bb:76:71:fb:e8:99:09:92:ec:d2:18:53:a9:44:6a:63:
39:91:03:6e:c6:aa:b1:ae:07:78:5f:da:c4:2c:f5:63:d8:65:
49:83:00:ef
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQyNTJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDA4MUVCRjE3MkJCNkFF
RUM3RENBMkFCRTkwNTA1Mjk1MzZFNzFBRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9WUcIIpOmR1kI4ccHWztGvTYCFSK8Lumv6THFxGeb5pHL7wDH
6tapWOJ6C+mTQIA8hlRsIBB2/m0kgGicM8DTfcvrSHyEC4DZzwSjkc0R9S5AfRJ/
PAoli7Of7bujrSlKelpinOyICKCDaD1nWbK8z8JHBUtszgtdPGiRiY+L76hIcdRK
sE8TVYtO1z3ZxLvcUeniWbRmFL8MpRTmuniIG925d57vkzmMIhxP0E3OzasNbhGH
OT9HPYwbIun/+BQJHFhhKl/2/s65S/ULhHshWxKWAQ/sb7iJoyoGku4efRtgmWoR
KdP/ppF13aVULwVA2Nl+88RqkA6YgtHiwEsHAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUCB6/Fyu2rux9yiq+kFBSlTbnGuAwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQ0I2X0Z5dTJydXg5eWlxLWtGQlNs
VGJuR3VBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBTz1YDAN
BgkqhkiG9w0BAQsFAAOCAQEAkrtcepLT/Y53WWoe9Znm5BnPvKz++k2AzxF/si4M
WcsIoLxUARDtG+pnPMoGP/W3r91IIYdfpymsKYOWJVF2aT6gZOdR216la4W1l9XH
7Fal3yxfxpowBOPrGzKlZsaGJU+0MAnEk3agMnCbg+d8DNGgSfByaZY8IyrK/UCK
5IoPSy2fwXOdeM3PBq3xdKp70L+Jmvn34+OwTf1aHbgQiOs96FKEOTVz28V29peZ
agKyH9qb9AoAY7yF3A74HJmapI9P/z8KijlCC+w3FTl8Cvs3QufpHza9fVu7dnH7
6JkJkuzSGFOpRGpjOZEDbsaqsa4HeF/axCz1Y9hlSYMA7w==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org