Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/SuV3X2tDVeqHj1d9xraMRKOSqmU.roa
File: SuV3X2tDVeqHj1d9xraMRKOSqmU.roa (raw, json)
Hash identifier: DjraPxQw0QTPv5dtNdfDT06oidPlKfn1/9KxAulrA1I=
Subject key identifier: 4A:E5:77:5F:6B:43:55:EA:87:8F:57:7D:C6:B6:8C:44:A3:92:AA:65
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/SuV3X2tDVeqHj1d9xraMRKOSqmU.roa
Signing time: Thu 15 Sep 2022 02:43:07 +0000
ROA not before: Thu 15 Sep 2022 02:43:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 113.196.128.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4AE5775F6B4355EA878F577DC6B68C44A392AA65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:a5:52:f1:fd:53:6d:be:fc:e3:46:82:9b:
f8:d2:b5:f8:12:18:21:c5:a3:46:c5:19:26:7b:3c:
62:4a:29:17:f9:f7:4d:fe:3e:61:1a:b3:d5:7c:32:
a2:2a:bb:a3:38:85:5e:37:79:f9:e3:0b:4d:9c:a4:
46:dc:a5:f0:22:af:63:6a:ae:2f:2e:e1:5c:1e:f2:
92:1f:e4:e8:01:d3:bc:3b:9e:fb:c5:94:41:d9:89:
e7:36:6b:fc:a5:9c:36:97:ec:a5:7a:8d:42:57:02:
eb:c3:bc:0e:d3:99:9b:0e:27:ac:f6:e8:24:46:e1:
21:0e:c2:9b:7d:b3:e4:44:88:0b:f3:49:a8:5f:b0:
bd:57:e0:de:23:32:13:20:90:46:0e:0d:b6:91:03:
d8:b4:69:86:9d:ce:d3:43:e1:d0:fb:27:39:64:72:
3d:96:19:11:c2:37:f5:ae:07:a2:13:34:b7:72:23:
35:f9:24:02:80:55:5a:62:09:73:ef:98:46:a5:9f:
c2:d8:c4:67:b6:3e:f5:dd:d8:3e:51:72:4f:39:f7:
6b:07:70:af:42:ab:1c:ec:7d:de:52:40:c5:cc:e7:
d0:8b:e3:34:9c:53:02:b9:ea:5e:e9:78:97:f9:ce:
88:33:fc:b0:b1:0b:0c:59:eb:0d:14:95:88:eb:fb:
7a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E5:77:5F:6B:43:55:EA:87:8F:57:7D:C6:B6:8C:44:A3:92:AA:65
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/SuV3X2tDVeqHj1d9xraMRKOSqmU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a8:e1:02:d9:68:b4:36:87:13:9d:3c:4e:ec:59:64:f9:67:e5:
53:95:3e:23:84:df:79:a0:b4:ea:9e:54:fa:57:8f:1f:a0:bc:
5b:e2:54:94:69:e8:d2:16:64:33:ee:2b:9f:97:9e:17:1c:db:
81:47:a9:75:b4:35:5e:42:ae:73:d7:5d:81:2e:e5:ab:92:97:
42:d4:8e:f6:c2:8c:c2:b9:85:a8:a4:9c:17:d3:8c:f1:f2:22:
e8:60:f6:02:70:41:78:2f:fd:f2:17:b6:5a:b0:07:9c:d9:cf:
a2:24:b1:48:46:4a:cd:2e:af:72:15:e3:5b:cf:4a:ae:4a:43:
06:8b:73:c9:c1:75:12:dc:72:48:02:77:5f:12:ef:1a:82:55:
2c:9b:34:39:b6:d3:f1:e2:89:c7:ca:8e:a4:a7:e2:05:92:49:
c7:55:4a:4b:c8:27:1d:9e:44:2d:d6:96:f6:ce:5e:0d:08:1d:
a6:9a:da:a0:20:9b:66:f4:7f:54:7f:e9:2b:39:b5:d6:75:d4:
4e:f2:da:1d:d0:a5:29:54:1c:b8:1a:a6:4c:8b:7d:2e:77:be:
87:eb:05:6a:d4:ab:17:86:95:68:32:51:86:87:14:6b:e0:fe:
a9:89:89:88:ea:df:ed:7a:f3:d1:90:14:ab:26:f7:dd:b0:b0:
c1:89:af:5b
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzMDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDRBRTU3NzVGNkI0MzU1
RUE4NzhGNTc3REM2QjY4QzQ0QTM5MkFBNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF86VS8f1Tbb7840aCm/jStfgSGCHFo0bFGSZ7PGJKKRf5903+
PmEas9V8MqIqu6M4hV43efnjC02cpEbcpfAir2Nqri8u4Vwe8pIf5OgB07w7nvvF
lEHZiec2a/ylnDaX7KV6jUJXAuvDvA7TmZsOJ6z26CRG4SEOwpt9s+REiAvzSahf
sL1X4N4jMhMgkEYODbaRA9i0aYadztND4dD7Jzlkcj2WGRHCN/WuB6ITNLdyIzX5
JAKAVVpiCXPvmEaln8LYxGe2PvXd2D5Rck8592sHcK9Cqxzsfd5SQMXM59CL4zSc
UwK56l7peJf5zogz/LCxCwxZ6w0UlYjr+3rjAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUSuV3X2tDVeqHj1d9xraMRKOSqmUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvU3VWM1gydERWZXFIajFkOXhyYU1S
S09TcW1VLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHHEgDAN
BgkqhkiG9w0BAQsFAAOCAQEAqOEC2Wi0NocTnTxO7Flk+WflU5U+I4TfeaC06p5U
+lePH6C8W+JUlGno0hZkM+4rn5eeFxzbgUepdbQ1XkKuc9ddgS7lq5KXQtSO9sKM
wrmFqKScF9OM8fIi6GD2AnBBeC/98he2WrAHnNnPoiSxSEZKzS6vchXjW89KrkpD
BotzycF1EtxySAJ3XxLvGoJVLJs0ObbT8eKJx8qOpKfiBZJJx1VKS8gnHZ5ELdaW
9s5eDQgdppraoCCbZvR/VH/pKzm11nXUTvLaHdClKVQcuBqmTIt9Lne+h+sFatSr
F4aVaDJRhocUa+D+qYmJiOrf7Xrz0ZAUqyb33bCwwYmvWw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org