Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/WNI86SQNL6UtC-ZkNPuFBYtMGj0.roa
File: WNI86SQNL6UtC-ZkNPuFBYtMGj0.roa (raw, json)
Hash identifier: 1DkrCHMBJUvcGZh3uIYbGKYeBMCLNUSO+K4jb7M/a/s=
Subject key identifier: 58:D2:3C:E9:24:0D:2F:A5:2D:0B:E6:64:34:FB:85:05:8B:4C:1A:3D
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/WNI86SQNL6UtC-ZkNPuFBYtMGj0.roa
Signing time: Thu 15 Sep 2022 02:43:07 +0000
ROA not before: Thu 15 Sep 2022 02:43:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 210.244.0.0/17 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=58D23CE9240D2FA52D0BE66434FB85058B4C1A3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:61:55:d2:7c:34:c8:35:66:96:fc:46:e0:12:
48:fd:fb:64:64:18:34:89:89:83:cc:72:0c:3f:14:
e5:dd:c6:24:fe:63:71:05:56:db:65:ad:a4:40:c4:
7c:cb:b8:22:59:34:de:0d:88:49:ff:8a:ac:0c:a8:
78:26:8b:8b:d9:88:fa:04:1c:ef:98:f0:9d:9d:0c:
7d:05:5d:24:c7:11:a6:9e:73:42:2a:83:0f:9a:4e:
e4:3f:d7:68:61:35:f1:90:e8:c8:59:1d:cf:9a:b4:
1b:05:1d:f6:84:5e:9a:3b:f1:c8:ed:77:9d:b0:a9:
af:69:2f:96:11:f6:31:52:f5:21:ab:01:a4:34:93:
ee:37:24:22:11:06:13:4e:5d:de:d6:7c:a0:9f:48:
46:67:4f:63:f3:6d:33:f6:2b:81:28:85:ba:14:ed:
4a:fd:6a:ca:7f:26:cf:6f:c6:5a:ab:a9:bc:3f:47:
75:e9:5d:9c:49:73:d8:d4:c0:fc:12:00:b7:6a:fd:
9a:1f:6e:33:b9:4e:38:d1:a4:f3:ef:61:ff:21:36:
d5:7b:46:a3:63:a6:29:44:64:63:67:cb:d2:12:b3:
9b:e1:a3:5d:fd:ad:3b:99:24:f2:f2:a0:ea:b9:72:
49:8b:96:72:e1:1b:60:cb:c5:f1:ee:c5:1f:ee:1d:
cf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D2:3C:E9:24:0D:2F:A5:2D:0B:E6:64:34:FB:85:05:8B:4C:1A:3D
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/WNI86SQNL6UtC-ZkNPuFBYtMGj0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.244.0.0/17
Signature Algorithm: sha256WithRSAEncryption
9d:10:c6:a2:64:93:ec:3d:21:b4:c2:2f:9f:65:a0:3c:c6:22:
52:cf:9c:e2:49:92:66:87:77:5a:0a:5c:95:74:b0:90:b3:22:
22:11:05:31:7a:9d:2f:b7:15:d8:cb:10:f1:4f:47:f2:47:34:
86:c1:80:82:03:66:79:a9:3f:98:8e:2f:92:53:08:58:fe:ff:
a6:5f:2a:a6:89:22:11:4a:1e:47:63:61:97:aa:26:59:6c:a9:
c3:e9:1c:75:43:4a:79:56:b6:27:8d:f4:93:22:82:26:ba:fe:
2e:b7:e7:e9:7c:7e:02:2d:e3:fd:5b:13:fb:da:76:a1:13:dc:
a6:fe:80:5e:d5:63:ac:ee:84:b6:54:f0:8e:fd:77:2e:05:98:
7f:78:8a:5c:66:b1:33:5f:9c:ac:18:8c:c3:5b:00:0a:b0:8a:
36:8a:0a:63:f1:e7:c5:6f:5c:57:04:10:1d:54:5c:62:a8:11:
6c:71:42:c3:a8:8b:fc:eb:7e:ab:f0:6c:b6:f5:90:7f:c8:4f:
c0:c8:af:a8:d6:70:7b:0b:fb:b2:73:c6:1f:16:e6:1d:7f:67:
5b:ec:fa:c8:da:52:6f:49:55:50:40:9b:71:91:9d:6a:e8:2e:
1a:15:a7:39:aa:bf:0f:14:3a:43:ec:e8:b6:65:ad:80:fc:54:
14:91:e7:44
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzMDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDU4RDIzQ0U5MjQwRDJG
QTUyRDBCRTY2NDM0RkI4NTA1OEI0QzFBM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNYVXSfDTINWaW/EbgEkj9+2RkGDSJiYPMcgw/FOXdxiT+Y3EF
VttlraRAxHzLuCJZNN4NiEn/iqwMqHgmi4vZiPoEHO+Y8J2dDH0FXSTHEaaec0Iq
gw+aTuQ/12hhNfGQ6MhZHc+atBsFHfaEXpo78cjtd52wqa9pL5YR9jFS9SGrAaQ0
k+43JCIRBhNOXd7WfKCfSEZnT2PzbTP2K4EohboU7Ur9asp/Js9vxlqrqbw/R3Xp
XZxJc9jUwPwSALdq/ZofbjO5TjjRpPPvYf8hNtV7RqNjpilEZGNny9ISs5vho139
rTuZJPLyoOq5ckmLlnLhG2DLxfHuxR/uHc89AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUWNI86SQNL6UtC+ZkNPuFBYtMGj0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvV05JODZTUU5MNlV0Qy1aa05QdUZC
WXRNR2owLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB9L0ADAN
BgkqhkiG9w0BAQsFAAOCAQEAnRDGomST7D0htMIvn2WgPMYiUs+c4kmSZod3Wgpc
lXSwkLMiIhEFMXqdL7cV2MsQ8U9H8kc0hsGAggNmeak/mI4vklMIWP7/pl8qpoki
EUoeR2Nhl6omWWypw+kcdUNKeVa2J430kyKCJrr+Lrfn6Xx+Ai3j/VsT+9p2oRPc
pv6AXtVjrO6EtlTwjv13LgWYf3iKXGaxM1+crBiMw1sACrCKNooKY/HnxW9cVwQQ
HVRcYqgRbHFCw6iL/Ot+q/BstvWQf8hPwMivqNZwewv7snPGHxbmHX9nW+z6yNpS
b0lVUECbcZGdauguGhWnOaq/DxQ6Q+zotmWtgPxUFJHnRA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:11 2023 by rpki-client on console-fra.rpki-client.org