Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/MypkUPaXX-TfytJcQBevEZcOdv0.roa
File: MypkUPaXX-TfytJcQBevEZcOdv0.roa (raw, json)
Hash identifier: t57uP9OUt7iE6jTv2nGAz8WhwF3lJ+wu/K0ILAdv70E=
Subject key identifier: 33:2A:64:50:F6:97:5F:E4:DF:CA:D2:5C:40:17:AF:11:97:0E:76:FD
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10C7
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/MypkUPaXX-TfytJcQBevEZcOdv0.roa
Signing time: Wed 01 Feb 2023 10:29:02 +0000
ROA not before: Wed 01 Feb 2023 10:29:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 123.205.58.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4295 (0x10c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:02 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=332A6450F6975FE4DFCAD25C4017AF11970E76FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2d:e0:62:00:88:dc:88:08:2d:47:3b:a7:82:
71:0a:b1:dc:16:f8:f4:fb:e8:53:27:8d:98:31:3d:
34:c0:5c:cf:ca:23:8e:01:f9:ce:b8:7c:7f:2c:53:
77:29:b9:67:52:24:bd:43:f8:a9:4c:ad:25:17:5b:
56:c0:18:34:4d:90:e0:b6:54:8d:c4:88:9a:ca:98:
3b:52:06:f9:63:7a:00:71:a4:f5:79:7e:eb:3d:97:
38:35:f3:36:b3:7f:97:d2:d5:f9:80:87:12:12:b9:
73:31:4a:f6:7d:98:14:9d:5e:0f:de:51:b9:46:23:
6d:08:69:d8:ec:64:24:16:40:10:e6:c7:e6:4f:ac:
e4:3e:7f:31:a3:b5:d9:b8:c0:63:ec:35:aa:d2:87:
61:ad:78:0b:b4:e2:94:95:f7:04:13:28:1a:97:48:
c0:85:52:70:da:fc:c4:01:38:78:18:86:ab:c4:fd:
f1:bf:72:90:c8:af:28:64:d7:46:9e:3a:a4:ca:de:
34:ae:4b:9d:8f:a2:bb:d3:cc:48:87:48:70:0d:e2:
c6:df:d2:77:3b:17:b1:d5:e0:42:d6:ee:4e:26:e2:
c8:de:c8:ff:b3:40:be:ae:cf:48:8f:84:44:53:4c:
17:5e:d2:5d:b3:e6:10:79:c0:a3:ba:18:56:9e:f6:
d6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:2A:64:50:F6:97:5F:E4:DF:CA:D2:5C:40:17:AF:11:97:0E:76:FD
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/MypkUPaXX-TfytJcQBevEZcOdv0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.58.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a7:f1:39:6d:58:5d:39:76:94:76:74:d8:2f:b7:a2:08:75:
be:22:52:f4:67:93:3f:19:22:59:08:a3:2d:60:8b:9b:de:4f:
ba:ce:da:96:1c:b6:42:63:bd:84:a7:05:76:78:87:94:92:7d:
e8:3f:4c:a0:3f:39:fe:c6:d7:23:84:f0:d1:22:94:1c:58:27:
c3:ca:60:0d:3a:40:f3:91:61:9a:ba:c5:47:83:3e:9c:fe:92:
26:bf:4c:9a:67:c2:5f:9a:8a:71:6f:f6:3a:aa:e6:8e:f0:e2:
41:3b:28:d8:74:a1:f6:2b:72:1f:48:8e:ad:52:01:0a:70:f5:
ac:14:56:46:fb:10:4d:a1:de:95:10:77:c7:b4:ff:90:71:9d:
dc:f9:43:37:46:41:a4:98:03:dd:7e:cf:2c:d5:fd:d1:c9:26:
42:a8:1d:e5:cd:ed:d4:1d:86:d7:d8:e8:a7:f0:cc:30:09:e3:
b6:1f:10:6b:4d:f6:7f:e7:f2:62:87:0a:90:de:57:d3:38:84:
54:b3:4b:e9:ff:1b:ca:6d:ae:2a:f0:27:87:60:ff:8d:d5:26:
43:f9:7d:89:d8:55:62:8f:14:b9:fc:bf:5a:44:27:1d:94:63:
58:21:3e:a7:7f:90:ad:66:34:1d:87:22:5c:10:7d:c2:cb:99:
e1:d1:0b:2e
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEMcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzAyMDEx
MDI5MDJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDMzMkE2NDUwRjY5NzVG
RTRERkNBRDI1QzQwMTdBRjExOTcwRTc2RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDELeBiAIjciAgtRzungnEKsdwW+PT76FMnjZgxPTTAXM/KI44B
+c64fH8sU3cpuWdSJL1D+KlMrSUXW1bAGDRNkOC2VI3EiJrKmDtSBvljegBxpPV5
fus9lzg18zazf5fS1fmAhxISuXMxSvZ9mBSdXg/eUblGI20IadjsZCQWQBDmx+ZP
rOQ+fzGjtdm4wGPsNarSh2GteAu04pSV9wQTKBqXSMCFUnDa/MQBOHgYhqvE/fG/
cpDIryhk10aeOqTK3jSuS52PorvTzEiHSHAN4sbf0nc7F7HV4ELW7k4m4sjeyP+z
QL6uz0iPhERTTBde0l2z5hB5wKO6GFae9tYfAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUMypkUPaXX+TfytJcQBevEZcOdv0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvTXlwa1VQYVhYLVRmeXRKY1FCZXZF
WmNPZHYwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHvNOjAN
BgkqhkiG9w0BAQsFAAOCAQEAaqfxOW1YXTl2lHZ02C+3ogh1viJS9GeTPxkiWQij
LWCLm95Pus7alhy2QmO9hKcFdniHlJJ96D9MoD85/sbXI4Tw0SKUHFgnw8pgDTpA
85FhmrrFR4M+nP6SJr9MmmfCX5qKcW/2OqrmjvDiQTso2HSh9ityH0iOrVIBCnD1
rBRWRvsQTaHelRB3x7T/kHGd3PlDN0ZBpJgD3X7PLNX90ckmQqgd5c3t1B2G19jo
p/DMMAnjth8Qa032f+fyYocKkN5X0ziEVLNL6f8bym2uKvAnh2D/jdUmQ/l9idhV
Yo8Uufy/WkQnHZRjWCE+p3+QrWY0HYciXBB9wsuZ4dELLg==
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:15 2023 by rpki-client on console-fra.rpki-client.org