Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/ErxUgAFlffSDubDMHlYrqdrGFmU.roa
File: ErxUgAFlffSDubDMHlYrqdrGFmU.roa (raw, json)
Hash identifier: H6CfmLCg1jWTisoi8s8aSh9NV4NHdavH5sMePMikMSI=
Subject key identifier: 12:BC:54:80:01:65:7D:F4:83:B9:B0:CC:1E:56:2B:A9:DA:C6:16:65
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10ED
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ErxUgAFlffSDubDMHlYrqdrGFmU.roa
Signing time: Wed 01 Feb 2023 10:29:13 +0000
ROA not before: Wed 01 Feb 2023 10:29:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 61.56.192.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4333 (0x10ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:13 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=12BC548001657DF483B9B0CC1E562BA9DAC61665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:ee:37:d0:11:4c:35:67:a9:53:4a:22:45:
51:b0:ed:9d:2f:df:ba:e7:f6:8d:31:86:f6:92:7b:
26:5c:0a:63:3d:1b:76:ea:aa:dd:c3:d5:0a:13:8c:
41:1d:20:f7:a4:eb:64:e1:c1:e9:15:d0:b7:13:30:
9c:61:3d:cd:b2:bd:54:21:0b:3e:7a:99:e1:41:20:
92:93:71:74:2e:94:5a:97:d2:44:bf:d4:af:43:44:
b7:5e:cf:f4:b3:ff:0c:7f:20:b1:c6:32:53:30:63:
20:15:27:29:67:16:b4:4e:74:97:48:e1:87:66:a2:
fe:09:c4:a2:73:44:d4:81:f7:cb:47:50:8a:86:b3:
d4:8b:7e:4a:bb:cf:ce:46:5a:20:eb:c2:75:28:89:
7d:0f:72:09:5d:82:8e:40:35:62:a5:d2:d9:ab:13:
54:f3:5f:c4:7e:4b:5e:95:f6:a4:42:7f:23:43:45:
17:61:a7:7c:e4:a6:4c:67:54:f9:ab:71:61:22:cb:
ea:2b:6b:cd:10:12:7f:87:d0:79:49:64:ff:fb:65:
21:39:a2:b9:97:01:c2:92:da:5d:e1:ec:b9:0d:21:
06:ef:30:61:93:2d:b7:06:d5:e9:14:98:11:5d:1f:
a5:4b:54:dd:91:d7:d2:d4:a7:d8:61:90:01:d0:2a:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BC:54:80:01:65:7D:F4:83:B9:B0:CC:1E:56:2B:A9:DA:C6:16:65
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/ErxUgAFlffSDubDMHlYrqdrGFmU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.192.0/19
Signature Algorithm: sha256WithRSAEncryption
b1:bb:6c:ce:a1:b0:60:af:13:13:1c:f0:31:97:7a:53:4c:54:
30:ef:af:bb:22:45:a5:82:84:d0:5f:41:b8:94:c6:75:33:fd:
0e:34:38:1b:61:8b:29:9d:a0:45:6f:22:99:16:93:69:9c:b9:
a7:16:b3:7f:0b:b1:7c:2b:48:92:c7:6f:ae:fb:f6:41:9d:b6:
3d:81:43:d8:ef:4b:53:04:1c:94:e8:b3:4e:61:96:45:0c:8f:
77:2e:b6:93:78:89:fa:b9:49:ce:27:de:cd:80:05:ad:e8:00:
fb:db:38:f0:86:bf:0c:36:7b:bd:f3:23:20:5d:e5:ff:25:15:
f8:48:16:d0:d4:be:e4:e3:92:80:c0:9c:e5:4f:89:8b:af:f8:
b4:ec:04:cf:8f:81:4e:03:be:76:49:cd:18:bb:6c:8e:71:8b:
ec:5d:96:43:a9:8a:42:47:b0:29:2b:60:77:7a:64:3f:fa:45:
5e:08:7e:30:d3:a9:15:5f:24:50:cd:94:00:2b:a8:13:3b:2d:
bf:d4:48:0f:ba:64:d8:ce:14:cd:52:a7:20:83:0f:bc:bb:79:
0f:89:b9:e1:5c:01:66:b1:07:85:7b:64:22:19:7a:24:ae:22:
41:24:69:9f:74:c7:80:a8:92:e0:cf:0a:e1:b3:ac:c8:e6:b1:
7a:f4:1c:20
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEO0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzAyMDEx
MDI5MTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDEyQkM1NDgwMDE2NTdE
RjQ4M0I5QjBDQzFFNTYyQkE5REFDNjE2NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC01e430BFMNWepU0oiRVGw7Z0v37rn9o0xhvaSeyZcCmM9G3bq
qt3D1QoTjEEdIPek62ThwekV0LcTMJxhPc2yvVQhCz56meFBIJKTcXQulFqX0kS/
1K9DRLdez/Sz/wx/ILHGMlMwYyAVJylnFrROdJdI4Ydmov4JxKJzRNSB98tHUIqG
s9SLfkq7z85GWiDrwnUoiX0Pcgldgo5ANWKl0tmrE1TzX8R+S16V9qRCfyNDRRdh
p3zkpkxnVPmrcWEiy+ora80QEn+H0HlJZP/7ZSE5ormXAcKS2l3h7LkNIQbvMGGT
LbcG1ekUmBFdH6VLVN2R19LUp9hhkAHQKtFlAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUErxUgAFlffSDubDMHlYrqdrGFmUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvRXJ4VWdBRmxmZlNEdWJETUhsWXJx
ZHJHRm1VLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBT04wDAN
BgkqhkiG9w0BAQsFAAOCAQEAsbtszqGwYK8TExzwMZd6U0xUMO+vuyJFpYKE0F9B
uJTGdTP9DjQ4G2GLKZ2gRW8imRaTaZy5pxazfwuxfCtIksdvrvv2QZ22PYFD2O9L
UwQclOizTmGWRQyPdy62k3iJ+rlJzifezYAFregA+9s48Ia/DDZ7vfMjIF3l/yUV
+EgW0NS+5OOSgMCc5U+Ji6/4tOwEz4+BTgO+dknNGLtsjnGL7F2WQ6mKQkewKStg
d3pkP/pFXgh+MNOpFV8kUM2UACuoEzstv9RID7pk2M4UzVKnIIMPvLt5D4m54VwB
ZrEHhXtkIhl6JK4iQSRpn3THgKiS4M8K4bOsyOaxevQcIA==
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:50 2023 by rpki-client on console-ams.rpki-client.org