Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/IttTBd5jvRRJTj5pABV84RjYYAc.roa
File: IttTBd5jvRRJTj5pABV84RjYYAc.roa (raw, json)
Hash identifier: xK2KcYYat1vgopw55O6ang7CRBu/y9FiGZGkPLxiHUU=
Subject key identifier: 22:DB:53:05:DE:63:BD:14:49:4E:3E:69:00:15:7C:E1:18:D8:60:07
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IttTBd5jvRRJTj5pABV84RjYYAc.roa
Signing time: Thu 15 Sep 2022 02:43:08 +0000
ROA not before: Thu 15 Sep 2022 02:43:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18419
IP address blocks: 106.105.184.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=22DB5305DE63BD14494E3E6900157CE118D86007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:41:fb:9c:7d:cb:62:e4:39:42:aa:73:7b:
a6:2b:a4:9e:ea:3b:eb:fb:21:ea:8d:55:4b:4d:45:
c8:38:c7:a2:5f:85:c4:f1:f3:54:4b:5f:d1:54:ec:
b4:40:9f:b4:e6:f3:47:da:08:7b:69:77:36:cd:50:
c7:4f:d9:98:1e:60:3e:e1:f5:b7:4c:1f:29:0c:86:
91:28:c9:c7:e5:73:21:c6:2e:35:b2:0d:8f:3c:a1:
0a:fe:3e:7b:b0:ef:94:2a:c9:57:bf:08:1b:72:94:
92:09:d8:3d:df:f0:6b:cf:4b:b7:c0:be:6b:fa:94:
b3:2f:d1:ba:c2:05:62:b0:9d:cb:8c:fd:1b:0e:08:
12:55:07:50:b8:be:60:72:8f:3b:ad:fa:b1:5f:c3:
f7:d4:6d:56:9e:ab:26:7e:9e:f8:9d:1f:02:e5:42:
4a:5a:d5:8f:5e:b2:f6:20:6c:d2:1d:11:cf:0c:e6:
d9:3e:5c:4f:00:d9:2d:28:da:1f:27:f2:8b:6a:57:
6d:be:32:27:25:5e:cd:e0:55:94:07:c9:37:6b:12:
10:7f:60:37:2d:92:88:29:63:19:f9:a1:cc:41:25:
9e:70:40:50:df:7b:69:62:e0:8f:86:a6:41:02:14:
4b:84:c9:9f:f9:86:00:eb:5c:b4:30:9d:75:18:83:
bf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DB:53:05:DE:63:BD:14:49:4E:3E:69:00:15:7C:E1:18:D8:60:07
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IttTBd5jvRRJTj5pABV84RjYYAc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.184.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:e0:77:09:56:d8:72:86:a6:34:10:5c:30:3c:7c:1d:2a:16:
8a:74:1e:41:fa:3a:eb:e1:c9:81:d7:35:66:49:34:34:f9:12:
0b:2c:e7:02:2a:59:f2:94:9e:7e:5d:34:62:86:61:9d:ee:05:
fd:06:dc:c5:36:78:58:9c:1f:be:e6:b3:6a:84:30:a9:95:a9:
d9:f2:88:ca:04:18:ee:ab:73:d6:33:49:8f:d3:02:94:7b:e0:
bb:3a:15:48:7c:5a:f1:c1:ad:b5:65:3a:7f:fd:64:3e:c0:f3:
c3:72:11:29:93:b1:c1:58:43:54:e8:2e:e0:12:e8:bd:97:b4:
bf:b8:09:b0:54:37:21:79:3a:be:d8:76:e4:b5:21:b8:23:b7:
27:da:29:1a:ea:95:94:0a:64:35:4a:6c:b6:6d:ee:8a:99:08:
e1:2f:32:d0:c5:ba:cc:82:2e:02:db:e4:f0:7c:e0:68:1f:97:
99:eb:16:e4:1c:75:c4:af:ad:10:ac:45:fc:b3:56:ea:41:cc:
d4:63:54:d9:b3:a4:f3:be:90:20:b5:7d:8f:48:12:c4:2c:53:
a5:b6:59:46:f0:75:cb:ef:d4:a8:72:16:5e:92:df:59:e0:8d:
63:45:f3:d1:a9:de:f7:c9:c9:4a:5f:45:93:c3:3f:24:41:7b:
2e:db:7c:61
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzMDhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDIyREI1MzA1REU2M0JE
MTQ0OTRFM0U2OTAwMTU3Q0UxMThEODYwMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCp8kH7nH3LYuQ5Qqpze6YrpJ7qO+v7IeqNVUtNRcg4x6JfhcTx
81RLX9FU7LRAn7Tm80faCHtpdzbNUMdP2ZgeYD7h9bdMHykMhpEoycflcyHGLjWy
DY88oQr+Pnuw75QqyVe/CBtylJIJ2D3f8GvPS7fAvmv6lLMv0brCBWKwncuM/RsO
CBJVB1C4vmByjzut+rFfw/fUbVaeqyZ+nvidHwLlQkpa1Y9esvYgbNIdEc8M5tk+
XE8A2S0o2h8n8otqV22+MiclXs3gVZQHyTdrEhB/YDctkogpYxn5ocxBJZ5wQFDf
e2li4I+GpkECFEuEyZ/5hgDrXLQwnXUYg799AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUIttTBd5jvRRJTj5pABV84RjYYAcwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSXR0VEJkNWp2UlJKVGo1cEFCVjg0
UmpZWUFjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2ppuDAN
BgkqhkiG9w0BAQsFAAOCAQEAP+B3CVbYcoamNBBcMDx8HSoWinQeQfo66+HJgdc1
Zkk0NPkSCyznAipZ8pSefl00YoZhne4F/QbcxTZ4WJwfvuazaoQwqZWp2fKIygQY
7qtz1jNJj9MClHvguzoVSHxa8cGttWU6f/1kPsDzw3IRKZOxwVhDVOgu4BLovZe0
v7gJsFQ3IXk6vth25LUhuCO3J9opGuqVlApkNUpstm3uipkI4S8y0MW6zIIuAtvk
8HzgaB+XmesW5Bx1xK+tEKxF/LNW6kHM1GNU2bOk876QILV9j0gSxCxTpbZZRvB1
y+/UqHIWXpLfWeCNY0Xz0ane98nJSl9Fk8M/JEF7Ltt8YQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:58 2023 by rpki-client on console-ams.rpki-client.org