Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/IlQqc3lC7y1Jd9LVC3PkVI5bwjk.roa
File: IlQqc3lC7y1Jd9LVC3PkVI5bwjk.roa (raw, json)
Hash identifier: H3fSTUFWG2NY9q1kyOWWyWLqbCjUwt2Gjg80VxnVGG0=
Subject key identifier: 22:54:2A:73:79:42:EF:2D:49:77:D2:D5:0B:73:E4:54:8E:5B:C2:39
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IlQqc3lC7y1Jd9LVC3PkVI5bwjk.roa
Signing time: Thu 15 Sep 2022 02:43:27 +0000
ROA not before: Thu 15 Sep 2022 02:43:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 221.169.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=22542A737942EF2D4977D2D50B73E4548E5BC239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f4:dc:c1:74:df:ad:d0:0d:26:24:e8:36:9b:
af:4c:e9:e4:ea:9f:13:db:1b:39:97:df:d1:6d:ca:
c7:31:0e:39:4b:69:a7:82:9c:dd:34:85:c0:4e:ae:
eb:01:85:bd:6d:17:1a:50:1d:a2:af:4e:c5:98:a8:
e5:8b:9b:32:b6:79:af:e2:76:23:57:ff:66:30:78:
82:c1:af:b4:4e:5e:ee:9b:1f:a5:9c:37:e7:58:b3:
14:bc:d1:40:73:71:21:75:88:0d:0d:d3:a6:19:08:
06:bd:de:00:a4:58:7c:36:2a:81:f8:6e:ae:e3:e5:
a3:d7:1d:78:2e:22:c8:e2:61:a0:81:5e:e1:cf:83:
15:39:d6:9f:92:1f:10:bd:28:86:9d:18:6c:fc:01:
87:64:8b:54:98:4f:e0:ab:6a:a9:06:98:72:dc:e9:
47:4c:67:09:f7:d9:5e:61:01:e1:3b:5c:6e:cf:2b:
b2:3a:f5:cc:45:39:c1:7f:8d:d8:6c:dd:a8:fa:55:
03:ae:06:bb:ab:e2:68:b1:31:09:fc:fe:1b:0a:d3:
e6:86:8c:17:cc:67:6e:09:0b:72:9d:51:91:88:cf:
04:d8:b1:0c:34:bd:ac:6f:76:b6:5f:9d:88:fe:05:
61:6b:ff:8c:68:d8:9b:e4:c1:28:99:92:7a:2a:7b:
5f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:54:2A:73:79:42:EF:2D:49:77:D2:D5:0B:73:E4:54:8E:5B:C2:39
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IlQqc3lC7y1Jd9LVC3PkVI5bwjk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
221.169.0.0/16
Signature Algorithm: sha256WithRSAEncryption
74:1d:23:c8:67:6d:c1:45:7a:d6:08:1f:da:3a:14:99:fb:af:
2d:a2:5f:60:06:3f:c8:67:61:05:aa:d3:6f:ef:92:b9:04:55:
d6:0f:10:5a:09:4e:de:26:72:50:b1:8b:96:eb:39:45:47:8b:
48:ef:39:c0:99:72:92:a3:dd:46:86:3a:ec:06:81:fc:f7:a9:
0e:ea:b5:4a:89:cb:5c:51:97:63:d4:10:fb:b1:5c:95:8b:94:
be:61:66:dc:45:da:27:80:b5:9c:57:e4:a6:89:ae:db:cf:66:
56:95:96:60:8a:15:85:78:df:1e:02:7d:05:bb:25:4b:5f:9f:
cf:2c:4c:32:97:52:5a:33:08:3b:81:01:67:a1:8c:51:66:25:
2c:c7:cc:6b:d1:d7:af:f0:99:5f:b8:31:e7:54:85:f8:ec:78:
ce:c3:a4:1f:1a:ee:ef:a9:89:0e:34:47:bf:bd:16:c7:84:f7:
ea:6c:6c:bd:14:ed:98:b6:4b:63:2e:98:e6:52:26:39:4b:d6:
9d:d2:98:f4:cb:83:27:04:16:d3:31:36:26:ab:a0:df:98:2e:
69:46:f5:cd:fe:17:3b:4a:4f:80:38:a6:00:d3:5f:d0:d3:24:
f5:31:58:6a:0e:7f:c3:10:37:b5:d2:81:f3:60:57:7c:1e:c7:
24:7a:7d:0b
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzMjdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDIyNTQyQTczNzk0MkVG
MkQ0OTc3RDJENTBCNzNFNDU0OEU1QkMyMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD59NzBdN+t0A0mJOg2m69M6eTqnxPbGzmX39FtyscxDjlLaaeC
nN00hcBOrusBhb1tFxpQHaKvTsWYqOWLmzK2ea/idiNX/2YweILBr7ROXu6bH6Wc
N+dYsxS80UBzcSF1iA0N06YZCAa93gCkWHw2KoH4bq7j5aPXHXguIsjiYaCBXuHP
gxU51p+SHxC9KIadGGz8AYdki1SYT+CraqkGmHLc6UdMZwn32V5hAeE7XG7PK7I6
9cxFOcF/jdhs3aj6VQOuBrur4mixMQn8/hsK0+aGjBfMZ24JC3KdUZGIzwTYsQw0
vaxvdrZfnYj+BWFr/4xo2JvkwSiZknoqe1/dAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUIlQqc3lC7y1Jd9LVC3PkVI5bwjkwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSWxRcWMzbEM3eTFKZDlMVkMzUGtW
STVid2prLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAN2pMA0G
CSqGSIb3DQEBCwUAA4IBAQB0HSPIZ23BRXrWCB/aOhSZ+68tol9gBj/IZ2EFqtNv
75K5BFXWDxBaCU7eJnJQsYuW6zlFR4tI7znAmXKSo91GhjrsBoH896kO6rVKictc
UZdj1BD7sVyVi5S+YWbcRdongLWcV+Smia7bz2ZWlZZgihWFeN8eAn0FuyVLX5/P
LEwyl1JaMwg7gQFnoYxRZiUsx8xr0dev8JlfuDHnVIX47HjOw6QfGu7vqYkONEe/
vRbHhPfqbGy9FO2YtktjLpjmUiY5S9ad0pj0y4MnBBbTMTYmq6DfmC5pRvXN/hc7
Sk+AOKYA01/Q0yT1MVhqDn/DEDe10oHzYFd8Hscken0L
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org