Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/JmggNPn4HK0rxNB2Ujtxeso8pT4.roa
File: JmggNPn4HK0rxNB2Ujtxeso8pT4.roa (raw, json)
Hash identifier: +QvQl0as6FlvzJxOtodX+hn8yTzCuolWpYEpAjEPtNo=
Subject key identifier: 26:68:20:34:F9:F8:1C:AD:2B:C4:D0:76:52:3B:71:7A:CA:3C:A5:3E
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10FF
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/JmggNPn4HK0rxNB2Ujtxeso8pT4.roa
Signing time: Wed 01 Feb 2023 10:29:20 +0000
ROA not before: Wed 01 Feb 2023 10:29:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 61.56.192.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4351 (0x10ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:20 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=26682034F9F81CAD2BC4D076523B717ACA3CA53E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:16:69:98:1a:fb:67:ec:23:75:6d:ec:86:74:
24:16:03:91:11:83:02:01:e0:a5:55:25:3b:dd:39:
bf:9c:c7:0f:5d:64:d0:ea:7b:90:2f:a8:4b:70:27:
d0:4f:59:22:7e:0e:e0:d6:3b:a9:44:45:c8:40:70:
85:40:c1:df:13:11:35:77:f3:f0:ef:4f:38:fd:80:
4f:7d:be:15:72:2c:87:35:07:7a:d1:3d:91:a9:30:
c2:c5:32:15:ad:b2:dc:98:fd:81:d3:0f:3f:ed:b3:
78:77:fc:c2:3d:7a:dd:a6:75:39:aa:22:cd:8b:10:
81:28:b6:d9:4b:bb:04:0b:74:f5:a7:fc:56:94:11:
f6:99:1c:5e:ad:39:d8:34:87:0f:96:1b:5e:4d:c2:
96:ad:69:f6:58:30:c9:51:4b:38:57:5a:0d:71:7f:
6c:97:da:7d:de:b1:cb:2a:06:17:b7:9a:87:44:9a:
fb:57:f4:70:d1:4f:dc:f4:87:19:d6:40:a1:f6:72:
f1:be:a9:6d:42:8d:e1:96:d8:19:a3:aa:23:82:ff:
73:81:58:5a:05:ff:aa:50:41:f5:96:bf:11:db:1e:
1c:30:17:f0:28:a1:44:6a:18:77:cf:0a:8b:1a:8a:
d3:f2:1f:3d:86:d3:40:c9:ac:4f:e7:68:74:fe:49:
7b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:68:20:34:F9:F8:1C:AD:2B:C4:D0:76:52:3B:71:7A:CA:3C:A5:3E
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/JmggNPn4HK0rxNB2Ujtxeso8pT4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.192.0/19
Signature Algorithm: sha256WithRSAEncryption
66:b7:7d:3d:31:39:0c:e0:d1:b4:cf:23:ff:27:9b:61:24:ff:
05:2f:8f:4a:58:f6:78:cc:3c:c4:d1:6b:6f:ab:c2:5b:2c:15:
5f:b0:b1:f8:50:ce:45:66:87:c2:cc:e0:63:c1:9b:11:42:b6:
77:4e:15:31:6b:25:1e:7a:c4:50:dd:13:64:f4:c8:98:cc:ff:
bb:a0:fb:bb:2d:e1:03:25:a3:97:57:26:92:fe:d0:d8:81:15:
b3:bb:bf:9f:70:7d:12:75:86:c5:ae:eb:bc:3e:2e:0d:93:1f:
27:a9:53:0f:7a:e6:2b:d5:7a:57:ea:ed:57:42:b3:ad:18:6a:
f7:71:c5:d6:69:4a:e9:ff:7a:68:82:8d:62:dc:31:82:f3:c4:
08:42:32:bb:18:9f:69:83:81:ed:12:e4:b4:00:88:c2:4c:6f:
d2:c4:e4:69:eb:cb:4d:a2:a4:d4:30:b6:6b:99:93:f2:cb:b1:
2f:2e:a9:18:38:70:88:bc:d5:3f:7f:8b:26:13:47:89:e5:07:
e4:32:7e:c5:98:fc:9e:3b:ab:00:9e:e0:8c:f4:f1:41:a4:d9:
d5:84:aa:1c:a9:c2:05:5d:17:b7:d8:68:74:f7:12:a9:b6:12:
93:32:b1:78:61:af:ca:27:2a:4a:88:9b:0d:d4:d9:a0:7b:82:
0c:f0:4e:78
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEP8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzAyMDEx
MDI5MjBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDI2NjgyMDM0RjlGODFD
QUQyQkM0RDA3NjUyM0I3MTdBQ0EzQ0E1M0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFFmmYGvtn7CN1beyGdCQWA5ERgwIB4KVVJTvdOb+cxw9dZNDq
e5AvqEtwJ9BPWSJ+DuDWO6lERchAcIVAwd8TETV38/DvTzj9gE99vhVyLIc1B3rR
PZGpMMLFMhWtstyY/YHTDz/ts3h3/MI9et2mdTmqIs2LEIEottlLuwQLdPWn/FaU
EfaZHF6tOdg0hw+WG15NwpatafZYMMlRSzhXWg1xf2yX2n3escsqBhe3modEmvtX
9HDRT9z0hxnWQKH2cvG+qW1CjeGW2BmjqiOC/3OBWFoF/6pQQfWWvxHbHhwwF/Ao
oURqGHfPCosaitPyHz2G00DJrE/naHT+SXuVAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUJmggNPn4HK0rxNB2Ujtxeso8pT4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSm1nZ05QbjRISzByeE5CMlVqdHhl
c284cFQ0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBT04wDAN
BgkqhkiG9w0BAQsFAAOCAQEAZrd9PTE5DODRtM8j/yebYST/BS+PSlj2eMw8xNFr
b6vCWywVX7Cx+FDORWaHwszgY8GbEUK2d04VMWslHnrEUN0TZPTImMz/u6D7uy3h
AyWjl1cmkv7Q2IEVs7u/n3B9EnWGxa7rvD4uDZMfJ6lTD3rmK9V6V+rtV0KzrRhq
93HF1mlK6f96aIKNYtwxgvPECEIyuxifaYOB7RLktACIwkxv0sTkaevLTaKk1DC2
a5mT8suxLy6pGDhwiLzVP3+LJhNHieUH5DJ+xZj8njurAJ7gjPTxQaTZ1YSqHKnC
BV0Xt9hodPcSqbYSkzKxeGGvyicqSoibDdTZoHuCDPBOeA==
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:50 2023 by rpki-client on console-ams.rpki-client.org