Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/RZjiYVWa0ET3-FJOHb8qHNHMyR4.roa
File: RZjiYVWa0ET3-FJOHb8qHNHMyR4.roa (raw, json)
Hash identifier: GRYl5W+D4u7TCXnam8wcqAAKHX04avsNFc8zMX3HGkg=
Subject key identifier: 45:98:E2:61:55:9A:D0:44:F7:F8:52:4E:1D:BF:2A:1C:D1:CC:C9:1E
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/RZjiYVWa0ET3-FJOHb8qHNHMyR4.roa
Signing time: Thu 15 Sep 2022 02:43:37 +0000
ROA not before: Thu 15 Sep 2022 02:43:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 106.105.164.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4598E261559AD044F7F8524E1DBF2A1CD1CCC91E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:c0:33:88:19:6a:58:8e:1e:a8:66:47:66:
12:06:48:ab:f2:da:2b:dc:d2:2f:e6:67:39:34:2b:
88:b5:2a:a7:b9:29:59:08:93:57:04:34:83:26:e3:
9c:20:07:d5:32:92:08:bc:df:5d:1e:95:3c:28:dd:
81:61:fa:6f:a7:bd:bc:9e:02:5f:5f:7a:d0:fa:57:
fc:af:4d:26:e7:27:7b:e1:d6:ef:9b:44:92:b1:f3:
ea:d1:26:18:83:37:52:4d:b4:eb:ec:51:6c:45:24:
b6:3f:f9:fd:08:73:bd:d8:f8:94:9b:06:27:f6:8c:
27:37:6d:42:4f:a3:fd:75:36:d2:3f:23:0c:2d:79:
9a:0f:cf:bd:0a:fe:ec:48:bf:2c:64:bb:d9:a6:ce:
95:d5:22:51:5e:67:36:30:97:f4:40:0c:d9:24:78:
a2:dc:dc:86:e2:e3:48:b8:97:aa:ea:21:2f:d2:00:
95:c2:84:57:73:66:65:78:f5:ce:67:02:c9:eb:c3:
93:1f:29:87:e9:48:5a:4b:d2:f6:ee:9e:68:e6:17:
35:8f:3a:fa:b2:e1:aa:e4:5c:34:30:b5:b9:b2:3a:
14:2e:61:c0:d0:cf:0c:5e:5d:ff:01:e0:00:9e:34:
0d:5e:ae:a1:b5:19:5f:2b:34:15:17:20:27:23:86:
72:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:98:E2:61:55:9A:D0:44:F7:F8:52:4E:1D:BF:2A:1C:D1:CC:C9:1E
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/RZjiYVWa0ET3-FJOHb8qHNHMyR4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.164.0/22
Signature Algorithm: sha256WithRSAEncryption
88:22:5f:1f:39:af:ac:76:fc:04:de:d8:de:0b:57:08:a8:e0:
0a:80:e9:e0:d7:4a:ee:31:7b:f1:90:bb:17:bd:94:db:8f:25:
c7:ff:4c:a6:62:21:31:e7:fe:c2:a1:0a:60:e6:1d:28:06:cf:
df:44:6b:4c:d8:e1:8d:30:74:47:5b:64:06:5a:e3:70:04:28:
ff:0b:8d:36:18:e7:1c:54:4d:04:ac:15:89:65:8a:70:20:7f:
18:a1:90:cc:d4:8a:31:c8:84:0b:3d:f1:a2:5a:e8:c9:35:a5:
46:91:b7:77:70:84:a1:3d:d9:37:96:60:91:78:fa:79:a1:d9:
10:c6:8f:0a:15:56:3f:2b:d3:bf:78:63:f8:03:22:fa:45:d9:
6d:52:ac:fc:98:b6:27:d6:49:60:d1:d5:96:d0:d5:6d:b9:65:
59:8c:2e:c3:4e:24:d2:4a:97:7d:91:20:13:8f:57:0d:5e:c5:
0c:8e:d9:b0:17:6c:95:6a:b9:74:5a:76:77:b0:45:3f:f3:66:
9e:35:b9:d8:ef:07:05:13:68:b9:82:64:f1:57:bb:2a:e6:bd:
10:b9:90:a1:a6:ce:e3:79:e8:97:36:ba:c6:ca:ff:d1:e4:44:
4c:33:d0:88:d3:0c:a2:42:ff:6c:d4:a3:6b:a7:16:10:74:34:
0f:cd:47:e5
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzMzdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDQ1OThFMjYxNTU5QUQw
NDRGN0Y4NTI0RTFEQkYyQTFDRDFDQ0M5MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwXMAziBlqWI4eqGZHZhIGSKvy2ivc0i/mZzk0K4i1Kqe5KVkI
k1cENIMm45wgB9Uykgi8310elTwo3YFh+m+nvbyeAl9fetD6V/yvTSbnJ3vh1u+b
RJKx8+rRJhiDN1JNtOvsUWxFJLY/+f0Ic73Y+JSbBif2jCc3bUJPo/11NtI/Iwwt
eZoPz70K/uxIvyxku9mmzpXVIlFeZzYwl/RADNkkeKLc3Ibi40i4l6rqIS/SAJXC
hFdzZmV49c5nAsnrw5MfKYfpSFpL0vbunmjmFzWPOvqy4arkXDQwtbmyOhQuYcDQ
zwxeXf8B4ACeNA1erqG1GV8rNBUXICcjhnInAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQURZjiYVWa0ET3+FJOHb8qHNHMyR4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvUlpqaVlWV2EwRVQzLUZKT0hiOHFI
TkhNeVI0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmpppDAN
BgkqhkiG9w0BAQsFAAOCAQEAiCJfHzmvrHb8BN7Y3gtXCKjgCoDp4NdK7jF78ZC7
F72U248lx/9MpmIhMef+wqEKYOYdKAbP30RrTNjhjTB0R1tkBlrjcAQo/wuNNhjn
HFRNBKwViWWKcCB/GKGQzNSKMciECz3xolroyTWlRpG3d3CEoT3ZN5ZgkXj6eaHZ
EMaPChVWPyvTv3hj+AMi+kXZbVKs/Ji2J9ZJYNHVltDVbbllWYwuw04k0kqXfZEg
E49XDV7FDI7ZsBdslWq5dFp2d7BFP/NmnjW52O8HBRNouYJk8Ve7Kua9ELmQoabO
43nolza6xsr/0eRETDPQiNMMokL/bNSja6cWEHQ0D81H5Q==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org