Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/R4S--ikpn9dEd2XRWjo8UdEapWw.roa
File: R4S--ikpn9dEd2XRWjo8UdEapWw.roa (raw, json)
Hash identifier: OZHno1K38BLy8MLYyL1SOk0PcV7PdXZQIzeN16e7cRs=
Subject key identifier: 47:84:BE:FA:29:29:9F:D7:44:77:65:D1:5A:3A:3C:51:D1:1A:A5:6C
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/R4S--ikpn9dEd2XRWjo8UdEapWw.roa
Signing time: Thu 15 Sep 2022 02:43:54 +0000
ROA not before: Thu 15 Sep 2022 02:43:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 106.106.197.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4784BEFA29299FD7447765D15A3A3C51D11AA56C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:44:31:ca:19:11:24:db:e1:29:63:84:b7:
f8:0d:9b:97:be:a2:43:61:ee:17:e6:75:2c:5b:35:
aa:91:56:f3:a0:fc:a0:a8:12:82:94:d7:64:a4:cc:
90:5c:7b:b8:9c:d1:1c:71:79:89:03:68:e4:0a:bb:
dd:10:a9:6f:7b:2c:29:67:20:4a:61:3a:8a:04:96:
b8:11:22:de:6f:12:9b:fc:10:a3:fd:53:db:b8:03:
69:0b:0d:20:91:cb:bc:ce:30:21:99:05:c5:3c:53:
e0:38:07:2a:32:c8:ce:96:c2:fb:e6:fb:08:0f:de:
ed:ae:58:c1:ea:ff:92:f5:6d:14:c5:53:0c:10:3c:
86:93:e0:04:b5:6a:4e:1a:b4:ba:80:0e:42:6e:8a:
c0:b4:9d:71:62:03:42:5d:e2:fb:e6:f0:45:60:a8:
6f:64:f9:1a:d2:73:3f:1b:c0:d7:8b:24:ff:d5:06:
de:89:47:10:c6:e5:e5:ca:ff:13:11:de:87:99:f1:
33:b4:1f:b7:b1:81:71:eb:02:d1:14:85:98:03:ac:
21:2b:26:51:46:bc:c3:35:55:d6:be:82:bf:bc:f6:
5d:18:98:40:2b:91:e0:ba:c2:5a:e3:1b:f8:00:b9:
0e:d3:8f:c7:73:35:cb:27:63:4b:10:0f:2a:ad:9b:
7b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:84:BE:FA:29:29:9F:D7:44:77:65:D1:5A:3A:3C:51:D1:1A:A5:6C
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/R4S--ikpn9dEd2XRWjo8UdEapWw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.106.197.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:a0:bc:69:23:8f:a4:c4:5d:73:c2:e7:13:81:c4:09:f7:2a:
57:07:07:ee:dd:f2:3d:c6:2a:5b:01:6f:59:e3:f3:32:03:af:
e3:1b:0c:02:2f:d1:97:09:ff:93:d4:72:ef:e3:cc:28:34:b2:
f3:84:a3:fc:16:a2:ff:30:43:55:dd:65:c9:5d:2d:59:bd:04:
c3:f0:72:fc:eb:8b:82:a3:5a:8f:07:24:bc:12:cf:ad:21:3f:
5c:8e:52:46:71:13:24:85:a5:17:8c:2b:a3:07:26:b8:7c:4b:
86:42:55:11:7a:56:30:71:63:47:3f:93:f3:f4:3a:d3:3f:fd:
79:53:89:9b:7f:34:dc:da:cf:4b:a9:7e:79:92:b9:fe:7c:32:
18:59:e6:67:ed:45:01:25:1a:a2:53:31:9b:e2:d7:1a:91:29:
ee:eb:c0:d9:8f:0b:66:0a:ad:33:8c:c1:51:49:4d:5b:b6:db:
35:f9:5d:26:ab:ee:01:8e:74:de:7d:db:e5:16:17:36:69:3f:
1f:16:17:75:e4:b8:94:a9:f4:38:b5:f1:2b:27:43:08:aa:6e:
80:d9:ee:2d:5f:4c:43:b5:29:d8:e9:cd:a0:93:30:55:0f:10:
51:2e:35:09:5e:5c:7a:c3:f2:c7:17:53:7c:ee:e4:63:fb:92:
43:cb:a2:a8
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzNTRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDQ3ODRCRUZBMjkyOTlG
RDc0NDc3NjVEMTVBM0EzQzUxRDExQUE1NkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC52EQxyhkRJNvhKWOEt/gNm5e+okNh7hfmdSxbNaqRVvOg/KCo
EoKU12SkzJBce7ic0RxxeYkDaOQKu90QqW97LClnIEphOooElrgRIt5vEpv8EKP9
U9u4A2kLDSCRy7zOMCGZBcU8U+A4ByoyyM6Wwvvm+wgP3u2uWMHq/5L1bRTFUwwQ
PIaT4AS1ak4atLqADkJuisC0nXFiA0Jd4vvm8EVgqG9k+RrScz8bwNeLJP/VBt6J
RxDG5eXK/xMR3oeZ8TO0H7exgXHrAtEUhZgDrCErJlFGvMM1Vda+gr+89l0YmEAr
keC6wlrjG/gAuQ7Tj8dzNcsnY0sQDyqtm3sFAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUR4S++ikpn9dEd2XRWjo8UdEapWwwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvUjRTLS1pa3BuOWRFZDJYUldqbzhV
ZEVhcFd3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGpqxTAN
BgkqhkiG9w0BAQsFAAOCAQEAv6C8aSOPpMRdc8LnE4HECfcqVwcH7t3yPcYqWwFv
WePzMgOv4xsMAi/Rlwn/k9Ry7+PMKDSy84Sj/Bai/zBDVd1lyV0tWb0Ew/By/OuL
gqNajwckvBLPrSE/XI5SRnETJIWlF4wrowcmuHxLhkJVEXpWMHFjRz+T8/Q60z/9
eVOJm3803NrPS6l+eZK5/nwyGFnmZ+1FASUaolMxm+LXGpEp7uvA2Y8LZgqtM4zB
UUlNW7bbNfldJqvuAY503n3b5RYXNmk/HxYXdeS4lKn0OLXxKydDCKpugNnuLV9M
Q7Up2OnNoJMwVQ8QUS41CV5cesPyxxdTfO7kY/uSQ8uiqA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org