Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/FUNjiwtY3DqCWleP4sCit2Kntow.roa
File: FUNjiwtY3DqCWleP4sCit2Kntow.roa (raw, json)
Hash identifier: +qbc3Vjr3lxnAEo6JOvzHCVV3AXPjMuXA8qa/WHAE7M=
Subject key identifier: 15:43:63:8B:0B:58:DC:3A:82:5A:57:8F:E2:C0:A2:B7:62:A7:B6:8C
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FUNjiwtY3DqCWleP4sCit2Kntow.roa
Signing time: Thu 15 Sep 2022 02:43:35 +0000
ROA not before: Thu 15 Sep 2022 02:43:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 106.105.224.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1543638B0B58DC3A825A578FE2C0A2B762A7B68C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:90:cd:4f:e5:b4:2c:0e:16:ab:9a:9c:26:89:
0c:e2:08:11:08:2f:de:1c:ea:5d:f3:81:41:ba:51:
82:e0:b0:a8:e4:83:06:00:84:ca:32:19:f3:55:f5:
ae:2d:8d:e2:69:e8:06:d2:5b:9c:04:c5:ce:94:2f:
f5:f4:b5:a9:df:bf:75:da:46:58:2a:31:59:f8:76:
9c:ec:67:c5:8b:9a:ae:31:21:6b:bd:9a:ae:76:4a:
19:6a:8d:be:9a:26:33:e7:7e:ee:c6:e1:c3:f4:57:
61:e2:32:71:0f:0a:99:2c:30:42:92:40:1f:70:58:
55:d3:9f:2b:22:22:4c:06:54:b5:0f:ac:1c:cc:d6:
1d:5b:30:4d:d8:61:3f:07:8a:78:d2:5c:69:80:61:
a2:eb:64:63:85:50:56:6a:a3:20:81:0c:95:ea:15:
c8:2f:93:0e:9b:8f:f2:a4:be:2e:13:84:44:52:04:
c1:5a:b9:4e:85:90:f7:41:a2:30:41:88:af:8d:5a:
18:aa:19:ce:96:ab:68:cb:7f:aa:f0:55:27:40:74:
d3:18:bc:9f:d2:55:bd:21:f6:f5:c7:e1:86:5b:e4:
74:e9:db:8a:3d:69:af:55:a3:48:2b:15:ce:48:2d:
f7:29:c3:71:85:b5:2a:05:44:5d:8d:73:fd:0c:c9:
d7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:43:63:8B:0B:58:DC:3A:82:5A:57:8F:E2:C0:A2:B7:62:A7:B6:8C
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FUNjiwtY3DqCWleP4sCit2Kntow.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.224.0/19
Signature Algorithm: sha256WithRSAEncryption
c5:b5:da:79:f0:cf:30:36:10:64:89:cc:3e:c5:42:5e:54:6f:
f1:0e:ec:33:6d:95:59:6f:65:33:37:95:a6:df:47:da:6c:d0:
15:99:24:ac:5d:aa:84:69:01:07:e5:0d:55:cd:fb:71:14:e6:
08:5d:47:ce:49:c6:de:52:10:13:ed:01:84:91:09:54:4f:db:
e7:23:c6:8d:e2:a0:b1:4d:5f:b2:77:fb:37:c7:7d:bf:b6:df:
c6:c8:15:14:f9:10:23:f0:4f:c7:d0:35:ca:4b:30:3d:11:f7:
21:a3:5d:b6:b1:0a:70:a1:5e:58:da:d8:78:84:32:5c:fd:1c:
9e:68:03:ca:96:af:14:7f:8d:ed:54:a7:5f:aa:43:cc:8c:05:
3f:a4:a2:5f:3f:3e:c1:c3:ff:27:11:0d:b1:aa:57:f1:ab:89:
3a:16:0e:a9:7c:0d:76:4c:29:85:95:b1:72:9e:29:9d:67:dd:
be:13:ec:03:02:7d:22:31:dd:3b:ae:5b:5b:ce:c3:50:ea:04:
2d:f5:c9:d6:bd:e4:5b:b9:e6:84:c1:f1:78:6d:f3:7e:f8:48:
51:af:91:a7:ce:1a:7a:87:a7:a3:67:00:88:06:10:cd:1b:b7:
12:85:79:de:1e:2d:83:a2:75:fa:1a:9c:d9:ae:7c:88:ab:0a:
8d:32:d4:24
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzMzVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDE1NDM2MzhCMEI1OERD
M0E4MjVBNTc4RkUyQzBBMkI3NjJBN0I2OEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRkM1P5bQsDharmpwmiQziCBEIL94c6l3zgUG6UYLgsKjkgwYA
hMoyGfNV9a4tjeJp6AbSW5wExc6UL/X0tanfv3XaRlgqMVn4dpzsZ8WLmq4xIWu9
mq52Shlqjb6aJjPnfu7G4cP0V2HiMnEPCpksMEKSQB9wWFXTnysiIkwGVLUPrBzM
1h1bME3YYT8HinjSXGmAYaLrZGOFUFZqoyCBDJXqFcgvkw6bj/Kkvi4ThERSBMFa
uU6FkPdBojBBiK+NWhiqGc6Wq2jLf6rwVSdAdNMYvJ/SVb0h9vXH4YZb5HTp24o9
aa9Vo0grFc5ILfcpw3GFtSoFRF2Nc/0MydefAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUFUNjiwtY3DqCWleP4sCit2KntowwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvRlVOaml3dFkzRHFDV2xlUDRzQ2l0
MktudG93LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBWpp4DAN
BgkqhkiG9w0BAQsFAAOCAQEAxbXaefDPMDYQZInMPsVCXlRv8Q7sM22VWW9lMzeV
pt9H2mzQFZkkrF2qhGkBB+UNVc37cRTmCF1HzknG3lIQE+0BhJEJVE/b5yPGjeKg
sU1fsnf7N8d9v7bfxsgVFPkQI/BPx9A1ykswPRH3IaNdtrEKcKFeWNrYeIQyXP0c
nmgDypavFH+N7VSnX6pDzIwFP6SiXz8+wcP/JxENsapX8auJOhYOqXwNdkwphZWx
cp4pnWfdvhPsAwJ9IjHdO65bW87DUOoELfXJ1r3kW7nmhMHxeG3zfvhIUa+Rp84a
eoeno2cAiAYQzRu3EoV53h4tg6J1+hqc2a58iKsKjTLUJA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-fra.rpki-client.org