Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/efxFQvWbX8hLsJb2EHnmoZwQSaM.roa
File: efxFQvWbX8hLsJb2EHnmoZwQSaM.roa (raw, json)
Hash identifier: 5p/vNm292VzCasNLOJBksnbw0vBEu2H7vvz1ElZqx4A=
Subject key identifier: 79:FC:45:42:F5:9B:5F:C8:4B:B0:96:F6:10:79:E6:A1:9C:10:49:A3
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 115E
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/efxFQvWbX8hLsJb2EHnmoZwQSaM.roa
Signing time: Thu 06 Apr 2023 06:53:30 +0000
ROA not before: Thu 06 Apr 2023 06:53:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131602
IP address blocks: 123.205.176.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4446 (0x115e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Apr 6 06:53:30 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=79FC4542F59B5FC84BB096F61079E6A19C1049A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fd:9d:75:a0:60:e7:30:a5:ef:fc:70:08:4b:
3a:86:33:58:13:58:48:ac:1a:42:89:c0:46:8a:50:
36:47:0e:c2:77:60:3b:cf:ae:25:a4:23:af:57:e8:
cd:2f:92:5d:d2:21:3b:9a:84:9a:ef:4a:c1:b4:80:
a4:fc:f6:58:52:d9:58:cd:3f:e4:97:72:61:9f:be:
72:05:3d:f9:df:93:c5:c1:d2:4f:5c:9c:30:69:f7:
bb:e6:db:d9:1e:3e:fd:49:bd:52:09:b8:1a:34:06:
ab:f8:5a:cf:54:81:34:26:36:8e:80:29:07:34:11:
7b:fe:4f:ae:a1:c9:36:12:b6:e2:7f:75:26:cf:ed:
94:30:3b:b0:fe:3b:03:e5:df:f4:0a:95:43:f7:08:
98:f1:cc:57:9f:d1:0f:7e:7f:36:8c:64:7f:b1:be:
15:f2:73:55:8a:23:b9:c8:86:46:a9:6f:81:73:8b:
53:6e:8f:e3:14:72:84:6a:27:09:a0:8a:d7:d4:5d:
9a:98:80:a6:d5:3a:b6:c8:7b:69:45:0c:62:d8:58:
e5:d7:78:22:e1:43:12:7a:fb:85:05:7b:35:d2:f4:
af:dd:be:d5:b9:5c:10:f2:6c:0d:01:14:c6:e9:c8:
94:9b:94:46:87:cb:51:57:2e:eb:51:14:d6:55:be:
dc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FC:45:42:F5:9B:5F:C8:4B:B0:96:F6:10:79:E6:A1:9C:10:49:A3
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/efxFQvWbX8hLsJb2EHnmoZwQSaM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.176.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:ed:9f:16:29:c5:c5:df:17:ce:74:0f:a7:bb:48:ef:a5:22:
de:94:d7:49:5c:b4:00:78:b3:76:89:70:fc:fa:15:a1:3f:9d:
9d:b2:93:83:a0:51:24:db:bb:f0:d8:ec:cc:1c:50:87:ad:15:
d1:ba:a6:68:b7:f5:f2:03:d1:2c:1d:85:86:41:53:cc:49:fe:
d7:f7:e7:f5:98:b0:32:e3:49:c1:21:11:47:0c:96:f9:da:e3:
5c:f4:0f:d4:46:99:ce:83:4c:79:68:10:2e:98:b7:2d:2e:81:
f2:36:86:57:e1:3e:3a:7c:a4:1e:89:0c:28:cb:d8:ce:67:81:
eb:bd:ba:cf:e7:46:16:9d:f8:da:c9:68:b2:df:5d:0f:11:8a:
50:81:e3:18:c9:d2:b7:ec:13:eb:9d:d2:93:9a:f7:44:ff:e6:
00:2d:ca:3f:7a:52:e0:0a:b9:32:d2:19:fe:13:82:34:fc:bf:
9b:6b:ef:7d:a8:9d:6e:40:99:66:33:41:4f:7f:02:8d:9e:0e:
1b:36:40:e5:1b:a0:48:7d:24:2a:68:e5:d5:58:82:a7:a2:ae:
ab:e8:6e:80:2a:5c:a2:8e:cc:27:c8:a2:7e:5a:b9:63:24:60:
bd:38:64:c2:36:27:87:74:d4:32:43:27:f3:e3:4b:36:8b:f0:
c0:d9:a2:8c
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEV4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA0MDYw
NjUzMzBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDc5RkM0NTQyRjU5QjVG
Qzg0QkIwOTZGNjEwNzlFNkExOUMxMDQ5QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC/Z11oGDnMKXv/HAISzqGM1gTWEisGkKJwEaKUDZHDsJ3YDvP
riWkI69X6M0vkl3SITuahJrvSsG0gKT89lhS2VjNP+SXcmGfvnIFPfnfk8XB0k9c
nDBp97vm29kePv1JvVIJuBo0Bqv4Ws9UgTQmNo6AKQc0EXv+T66hyTYStuJ/dSbP
7ZQwO7D+OwPl3/QKlUP3CJjxzFef0Q9+fzaMZH+xvhXyc1WKI7nIhkapb4Fzi1Nu
j+MUcoRqJwmgitfUXZqYgKbVOrbIe2lFDGLYWOXXeCLhQxJ6+4UFezXS9K/dvtW5
XBDybA0BFMbpyJSblEaHy1FXLutRFNZVvtzPAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUefxFQvWbX8hLsJb2EHnmoZwQSaMwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZWZ4RlF2V2JYOGhMc0piMkVIbm1v
WndRU2FNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHvNsDAN
BgkqhkiG9w0BAQsFAAOCAQEAKu2fFinFxd8XznQPp7tI76Ui3pTXSVy0AHizdolw
/PoVoT+dnbKTg6BRJNu78NjszBxQh60V0bqmaLf18gPRLB2FhkFTzEn+1/fn9Ziw
MuNJwSERRwyW+drjXPQP1EaZzoNMeWgQLpi3LS6B8jaGV+E+OnykHokMKMvYzmeB
6726z+dGFp342slost9dDxGKUIHjGMnSt+wT653Sk5r3RP/mAC3KP3pS4Aq5MtIZ
/hOCNPy/m2vvfaidbkCZZjNBT38CjZ4OGzZA5RugSH0kKmjl1ViCp6Kuq+hugCpc
oo7MJ8iiflq5YyRgvThkwjYnh3TUMkMn8+NLNovwwNmijA==
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:51 2023 by rpki-client on console-ams.rpki-client.org