Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/UtVfAVa4kLRUX8X-BahRfe3IXyc.roa
File: UtVfAVa4kLRUX8X-BahRfe3IXyc.roa (raw, json)
Hash identifier: CC4XHUR/nhAmfdQW6TD2sZppjHRlItgpZt6yDX/4R0A=
Subject key identifier: 52:D5:5F:01:56:B8:90:B4:54:5F:C5:FE:05:A8:51:7D:ED:C8:5F:27
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UtVfAVa4kLRUX8X-BahRfe3IXyc.roa
Signing time: Thu 15 Sep 2022 02:42:58 +0000
ROA not before: Thu 15 Sep 2022 02:42:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 112.104.0.0/15 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=52D55F0156B890B4545FC5FE05A8517DEDC85F27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:79:01:bf:c4:f1:45:22:24:26:77:82:a6:
8f:ef:bb:da:34:91:5c:a1:2c:5f:62:7f:f2:f4:c0:
ef:cb:54:b6:09:73:6b:e4:5f:fd:ec:8b:c3:97:45:
42:45:4b:56:c9:ae:03:8b:2b:d0:0f:ef:f3:93:dd:
33:36:50:1d:a8:ae:8c:fa:0c:06:d6:a2:61:d6:c4:
e0:ed:35:81:54:c8:83:eb:f6:92:6e:b7:18:05:52:
02:a5:a8:57:db:26:0c:84:7a:b8:24:ff:f7:8c:a8:
e9:5a:7a:65:4c:b3:e3:50:2b:1e:ec:d1:9d:2b:78:
1a:f1:3a:db:d4:3b:49:73:cf:42:05:87:df:4f:b1:
2a:f7:31:64:9f:15:2f:06:0a:ba:c9:e5:e2:d5:4b:
52:72:6f:b5:18:40:64:ca:51:f3:69:d7:2e:e7:48:
81:6d:d5:83:f6:d0:31:87:af:ba:dc:ef:da:e5:8c:
4e:0f:46:27:a3:02:9e:43:51:b5:7c:b5:70:9b:95:
39:4a:63:63:35:80:87:9a:e2:bf:e5:3e:9b:b5:48:
de:05:00:87:c2:dc:97:d5:1c:f9:b1:1d:11:3e:58:
6e:d2:0c:c8:ff:47:d2:c4:63:9f:ec:20:db:51:47:
4d:28:89:25:c5:69:6d:ee:96:c7:fc:71:50:ee:b2:
8a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D5:5F:01:56:B8:90:B4:54:5F:C5:FE:05:A8:51:7D:ED:C8:5F:27
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UtVfAVa4kLRUX8X-BahRfe3IXyc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.104.0.0/15
Signature Algorithm: sha256WithRSAEncryption
3d:f3:ee:f0:f7:63:5a:62:52:0b:fc:75:55:25:b3:37:09:bf:
c7:ee:1a:c2:cb:5f:bd:27:e4:6b:37:8f:2c:e6:68:3d:8e:42:
c6:8a:04:f5:83:81:44:20:cc:9c:41:37:b3:76:a6:e9:bc:6d:
70:f7:45:9a:a5:af:2d:31:c1:31:c5:f8:df:f3:96:06:b0:05:
c9:2d:d8:65:5b:5d:e6:f3:04:02:5e:4f:fc:ed:93:bb:cf:67:
cc:66:80:46:80:62:46:64:78:27:ad:ea:aa:bb:06:ae:a3:19:
51:58:51:30:56:d5:f4:f2:84:f6:e9:52:a5:4f:a0:14:7d:c0:
97:4b:29:3f:fc:e4:e1:93:cd:5c:8d:f8:41:3c:c6:37:44:47:
d7:9e:4b:29:1c:5a:40:1a:67:49:19:2d:8a:d9:20:af:b1:d2:
76:0d:c5:a6:3e:12:a9:e0:6a:53:39:9c:08:b2:6c:a1:2d:a4:
14:b4:a0:eb:c8:51:99:97:cc:9a:d1:3f:e8:50:dc:a0:00:a5:
e1:d8:92:53:bb:84:ff:25:46:69:30:78:cd:60:ed:ee:32:0e:
10:2a:c3:d8:ad:83:c5:64:66:91:16:35:7f:c3:0f:37:8b:ad:
50:e9:c7:d6:aa:e7:fe:c1:79:4a:38:47:01:2b:c2:cc:6e:10:
2d:c0:e0:b4
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQyNThaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDUyRDU1RjAxNTZCODkw
QjQ1NDVGQzVGRTA1QTg1MTdERURDODVGMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFHXkBv8TxRSIkJneCpo/vu9o0kVyhLF9if/L0wO/LVLYJc2vk
X/3si8OXRUJFS1bJrgOLK9AP7/OT3TM2UB2oroz6DAbWomHWxODtNYFUyIPr9pJu
txgFUgKlqFfbJgyEergk//eMqOlaemVMs+NQKx7s0Z0reBrxOtvUO0lzz0IFh99P
sSr3MWSfFS8GCrrJ5eLVS1Jyb7UYQGTKUfNp1y7nSIFt1YP20DGHr7rc79rljE4P
RiejAp5DUbV8tXCblTlKY2M1gIea4r/lPpu1SN4FAIfC3JfVHPmxHRE+WG7SDMj/
R9LEY5/sINtRR00oiSXFaW3ulsf8cVDusorzAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUUtVfAVa4kLRUX8X+BahRfe3IXycwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvVXRWZkFWYTRrTFJVWDhYLUJhaFJm
ZTNJWHljLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAXBoMA0G
CSqGSIb3DQEBCwUAA4IBAQA98+7w92NaYlIL/HVVJbM3Cb/H7hrCy1+9J+RrN48s
5mg9jkLGigT1g4FEIMycQTezdqbpvG1w90Wapa8tMcExxfjf85YGsAXJLdhlW13m
8wQCXk/87ZO7z2fMZoBGgGJGZHgnreqquwauoxlRWFEwVtX08oT26VKlT6AUfcCX
Syk//OThk81cjfhBPMY3REfXnkspHFpAGmdJGS2K2SCvsdJ2DcWmPhKp4GpTOZwI
smyhLaQUtKDryFGZl8ya0T/oUNygAKXh2JJTu4T/JUZpMHjNYO3uMg4QKsPYrYPF
ZGaRFjV/ww83i61Q6cfWquf+wXlKOEcBK8LMbhAtwOC0
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:11:59 2023 by rpki-client on console-ams.rpki-client.org