Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/VL9Cr9eGFshhJRo3-r6206l7Fn0.roa
File: VL9Cr9eGFshhJRo3-r6206l7Fn0.roa (raw, json)
Hash identifier: vYs7fUdu4oMPTyJeRK3y/GAMyz/6m11Bi29UJlkOIt0=
Subject key identifier: 54:BF:42:AF:D7:86:16:C8:61:25:1A:37:FA:BE:B6:D3:A9:7B:16:7D
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VL9Cr9eGFshhJRo3-r6206l7Fn0.roa
Signing time: Thu 15 Sep 2022 02:42:56 +0000
ROA not before: Thu 15 Sep 2022 02:42:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 59.104.0.0/15 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=54BF42AFD78616C861251A37FABEB6D3A97B167D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:ed:d9:3b:19:ad:a6:e3:d0:d4:ce:c2:1b:
0e:07:e1:a1:64:75:68:e4:ab:00:4d:87:e3:47:86:
bf:c3:f2:ae:9d:24:3e:d8:d8:ea:8b:3b:bc:da:90:
3b:b8:2b:b9:0c:2b:9e:d7:0b:c8:51:1e:5d:95:ad:
3b:ad:ab:9c:ba:d0:57:00:0a:b0:7a:3a:b9:b8:ac:
59:e6:cf:df:da:8c:30:44:0f:89:a5:83:c3:42:14:
db:99:5e:cb:43:fc:c4:b6:d7:71:a9:64:2e:56:47:
77:cf:0e:92:42:f2:12:cd:ec:77:68:be:83:7b:d0:
a2:95:30:72:57:9d:9d:02:19:61:6b:ef:18:6d:5e:
79:90:e6:80:14:ae:2b:c1:f7:c6:1f:cf:61:43:85:
ca:78:3b:5f:93:83:eb:5e:7a:68:29:be:79:e5:2b:
e7:20:e0:c7:09:a1:c8:c1:59:e2:66:98:9d:61:0e:
ac:92:c2:94:be:54:27:d2:a8:7d:2d:86:b9:45:4a:
1a:8d:64:c3:7e:68:1d:c1:4b:4d:92:93:02:a1:0a:
a7:28:ff:a8:a9:da:85:7c:c4:82:a2:ad:e3:13:7e:
6c:da:0f:3e:99:c5:d3:d2:8c:dc:7d:80:15:ae:4b:
ef:07:ce:7e:d5:12:dd:78:db:7b:fd:8c:76:b7:1a:
d2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BF:42:AF:D7:86:16:C8:61:25:1A:37:FA:BE:B6:D3:A9:7B:16:7D
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VL9Cr9eGFshhJRo3-r6206l7Fn0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.104.0.0/15
Signature Algorithm: sha256WithRSAEncryption
46:cd:fc:29:39:69:bb:45:e0:b0:e0:c0:4c:c8:13:74:4a:6a:
b9:d1:7a:ab:17:27:2f:f4:af:ef:2d:1b:8b:81:c4:e9:a5:b9:
83:7c:47:b1:39:d7:a7:ad:86:29:0f:ab:04:6d:16:7d:91:4e:
ae:fc:4e:a2:3e:6b:e2:20:e6:7f:67:19:2c:04:ce:ef:d1:58:
7e:7f:fd:ed:e4:0e:3a:36:a0:33:4d:a9:18:ea:03:41:a8:fa:
35:a2:05:2a:e6:8d:77:d6:14:34:04:04:48:13:01:49:da:ce:
b1:ab:cd:1a:66:97:62:a1:d7:33:ed:de:36:8f:12:76:70:4d:
af:af:13:d2:b0:03:0e:ba:cb:4c:67:77:34:ae:7c:7f:04:e7:
4c:4e:e7:d0:24:c6:bb:cc:28:36:d2:f6:05:df:2b:f5:40:23:
61:10:70:3d:bf:d1:2b:c6:4d:92:c0:32:a5:f3:24:1b:c2:a6:
2d:45:92:25:3c:8c:8f:1f:58:5b:0c:9f:e9:28:7d:b8:2d:3b:
70:c8:e4:80:9e:92:9c:a7:dd:dd:09:f1:4b:eb:71:b4:2e:1d:
b3:72:96:45:33:6d:3b:f6:62:32:05:1f:94:57:de:27:75:7f:
35:9b:17:46:b5:e0:dc:2c:43:dc:d1:98:07:7c:c9:12:66:a0:
7b:08:36:33
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQyNTZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDU0QkY0MkFGRDc4NjE2
Qzg2MTI1MUEzN0ZBQkVCNkQzQTk3QjE2N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZAu3ZOxmtpuPQ1M7CGw4H4aFkdWjkqwBNh+NHhr/D8q6dJD7Y
2OqLO7zakDu4K7kMK57XC8hRHl2VrTutq5y60FcACrB6Orm4rFnmz9/ajDBED4ml
g8NCFNuZXstD/MS213GpZC5WR3fPDpJC8hLN7HdovoN70KKVMHJXnZ0CGWFr7xht
XnmQ5oAUrivB98Yfz2FDhcp4O1+Tg+teemgpvnnlK+cg4McJocjBWeJmmJ1hDqyS
wpS+VCfSqH0thrlFShqNZMN+aB3BS02SkwKhCqco/6ip2oV8xIKireMTfmzaDz6Z
xdPSjNx9gBWuS+8Hzn7VEt1423v9jHa3GtKXAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUVL9Cr9eGFshhJRo3+r6206l7Fn0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvVkw5Q3I5ZUdGc2hoSlJvMy1yNjIw
Nmw3Rm4wLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATtoMA0G
CSqGSIb3DQEBCwUAA4IBAQBGzfwpOWm7ReCw4MBMyBN0Smq50XqrFycv9K/vLRuL
gcTppbmDfEexOdenrYYpD6sEbRZ9kU6u/E6iPmviIOZ/ZxksBM7v0Vh+f/3t5A46
NqAzTakY6gNBqPo1ogUq5o131hQ0BARIEwFJ2s6xq80aZpdiodcz7d42jxJ2cE2v
rxPSsAMOustMZ3c0rnx/BOdMTufQJMa7zCg20vYF3yv1QCNhEHA9v9Erxk2SwDKl
8yQbwqYtRZIlPIyPH1hbDJ/pKH24LTtwyOSAnpKcp93dCfFL63G0Lh2zcpZFM207
9mIyBR+UV94ndX81mxdGteDcLEPc0ZgHfMkSZqB7CDYz
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org