Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/YGqqrnCl--JbSvVacTHXiGprTww.roa
File: YGqqrnCl--JbSvVacTHXiGprTww.roa (raw, json)
Hash identifier: jr60hs/bnw1atuTD8pDYImdFA3s+0qehBNp9y+Ee6YI=
Subject key identifier: 60:6A:AA:AE:70:A5:FB:E2:5B:4A:F5:5A:71:31:D7:88:6A:6B:4F:0C
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10BE
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YGqqrnCl--JbSvVacTHXiGprTww.roa
Signing time: Wed 01 Feb 2023 10:28:59 +0000
ROA not before: Wed 01 Feb 2023 10:28:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 220.229.72.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4286 (0x10be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:59 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=606AAAAE70A5FBE25B4AF55A7131D7886A6B4F0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:68:fc:a2:4e:c8:62:f8:69:a9:cd:4f:5c:
27:6c:23:62:df:84:db:4a:90:46:3c:7d:ce:df:37:
52:0d:35:9d:c7:1d:36:88:04:1c:ee:90:12:1f:a5:
84:10:da:0f:5e:9c:78:75:d3:77:52:69:b7:3c:6b:
2c:73:b2:10:65:4b:1e:5a:34:c5:79:19:8a:fe:55:
ee:3f:d6:8b:f9:dc:b0:1d:34:b5:26:cf:cd:30:ea:
5e:53:95:bf:2a:45:56:a8:ae:b3:74:b1:fa:88:4c:
ed:2d:7c:57:56:3e:a9:38:36:83:07:af:88:ce:70:
5d:13:a9:75:ac:43:7c:07:84:80:82:8a:1b:b9:2b:
13:14:e1:8d:e6:76:55:a8:94:c2:ce:99:f3:89:7d:
63:25:b7:60:24:e0:5d:32:fa:f1:b4:0c:3d:30:79:
40:1b:e9:88:6d:d4:95:16:d1:63:d9:30:6a:5a:86:
10:68:08:3b:f4:e5:4f:4a:e7:b8:87:79:05:6c:c8:
9e:2d:94:78:dc:c2:ee:6c:e7:22:f5:62:4a:8f:d2:
f4:da:e3:75:47:2f:1e:d6:0e:65:b4:5a:31:ea:3c:
da:5d:13:35:24:e4:bf:72:87:61:ac:5b:f4:03:65:
20:2c:ab:a8:2d:78:1f:04:d5:db:3a:86:c4:ec:b7:
fb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6A:AA:AE:70:A5:FB:E2:5B:4A:F5:5A:71:31:D7:88:6A:6B:4F:0C
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YGqqrnCl--JbSvVacTHXiGprTww.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.229.72.0/21
Signature Algorithm: sha256WithRSAEncryption
59:35:6a:c2:cf:ad:c3:44:ca:94:5a:5c:32:7a:5a:94:fd:5f:
de:6e:37:ef:64:d7:b7:fb:c2:0a:55:ad:9c:ba:c4:11:76:2b:
83:14:eb:a1:fa:d1:1c:43:9d:99:10:ad:fa:63:31:53:d9:38:
ba:eb:17:d1:af:7e:1f:88:9a:43:31:93:1a:64:68:47:c2:14:
5c:5f:18:c1:93:08:20:82:bb:18:4c:9d:af:51:77:a1:1a:26:
8a:90:d3:c6:71:7b:fc:73:0e:8f:94:1c:f2:c5:bd:9a:0a:28:
ea:35:12:c9:7e:fc:2e:e9:59:7e:61:98:55:08:b5:52:3d:c5:
5b:a6:60:79:5b:c5:ee:ae:24:a0:6a:74:d2:ef:52:38:ea:f1:
14:1e:4c:4d:a3:23:77:4b:af:f5:10:e1:7e:16:d8:be:e2:38:
63:e6:59:fc:99:00:26:6e:9b:a6:67:36:ed:ae:05:4b:80:71:
f4:9d:f8:6b:0a:b9:a7:bf:3d:71:2d:ec:bf:17:9a:00:e8:a4:
70:8b:59:1e:fa:d4:62:ed:95:b9:9f:a5:04:59:00:03:da:64:
cc:03:ad:15:20:49:23:d6:03:2c:53:0b:ab:6f:12:95:05:1c:
a6:d3:50:27:aa:88:51:83:a6:d3:d8:c0:20:3a:c1:cd:fd:37:
42:93:d4:e6
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEL4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzAyMDEx
MDI4NTlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDYwNkFBQUFFNzBBNUZC
RTI1QjRBRjU1QTcxMzFENzg4NkE2QjRGMEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTSGj8ok7IYvhpqc1PXCdsI2LfhNtKkEY8fc7fN1INNZ3HHTaI
BBzukBIfpYQQ2g9enHh103dSabc8ayxzshBlSx5aNMV5GYr+Ve4/1ov53LAdNLUm
z80w6l5Tlb8qRVaorrN0sfqITO0tfFdWPqk4NoMHr4jOcF0TqXWsQ3wHhICCihu5
KxMU4Y3mdlWolMLOmfOJfWMlt2Ak4F0y+vG0DD0weUAb6Yht1JUW0WPZMGpahhBo
CDv05U9K57iHeQVsyJ4tlHjcwu5s5yL1YkqP0vTa43VHLx7WDmW0WjHqPNpdEzUk
5L9yh2GsW/QDZSAsq6gteB8E1ds6hsTst/uRAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUYGqqrnCl++JbSvVacTHXiGprTwwwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvWUdxcXJuQ2wtLUpiU3ZWYWNUSFhp
R3ByVHd3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA9zlSDAN
BgkqhkiG9w0BAQsFAAOCAQEAWTVqws+tw0TKlFpcMnpalP1f3m4372TXt/vCClWt
nLrEEXYrgxTrofrRHEOdmRCt+mMxU9k4uusX0a9+H4iaQzGTGmRoR8IUXF8YwZMI
IIK7GEydr1F3oRomipDTxnF7/HMOj5Qc8sW9mgoo6jUSyX78LulZfmGYVQi1Uj3F
W6ZgeVvF7q4koGp00u9SOOrxFB5MTaMjd0uv9RDhfhbYvuI4Y+ZZ/JkAJm6bpmc2
7a4FS4Bx9J34awq5p789cS3svxeaAOikcItZHvrUYu2VuZ+lBFkAA9pkzAOtFSBJ
I9YDLFMLq28SlQUcptNQJ6qIUYOm09jAIDrBzf03QpPU5g==
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:51 2023 by rpki-client on console-ams.rpki-client.org