Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/o9WK8pEIF6U151WehIEuEjzMZ-U.roa
File: o9WK8pEIF6U151WehIEuEjzMZ-U.roa (raw, json)
Hash identifier: zMsQeCND0oz6miyFIBlTwPLmTH9kEAcM7j4FZGwcWzY=
Subject key identifier: A3:D5:8A:F2:91:08:17:A5:35:E7:55:9E:84:81:2E:12:3C:CC:67:E5
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 11AB
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/o9WK8pEIF6U151WehIEuEjzMZ-U.roa
Signing time: Wed 12 Jul 2023 00:52:27 +0000
ROA not before: Wed 12 Jul 2023 00:52:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131602
IP address blocks: 115.30.72.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4523 (0x11ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Jul 12 00:52:27 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A3D58AF2910817A535E7559E84812E123CCC67E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:27:a2:9a:01:47:ea:92:a7:e0:74:68:69:3f:
ea:82:b7:ac:e9:f1:1b:47:3f:dc:59:de:30:2b:a0:
4c:ab:91:33:01:49:b6:51:d4:48:ab:c2:2f:7a:79:
31:5f:d8:5f:06:8b:2d:c8:51:d3:c9:ee:83:2c:de:
d2:37:90:de:fe:f9:eb:fd:ec:6a:d5:3a:6b:4c:1d:
45:ec:58:70:2f:ea:aa:36:0b:1a:d3:e5:25:fa:28:
a6:75:88:95:89:64:9d:b7:ea:5d:12:d5:c0:00:8c:
99:d8:72:3c:f4:2a:98:16:f3:33:ae:28:e4:52:2a:
2f:7c:1a:50:d0:ac:e4:0d:9a:4b:55:79:34:3c:27:
0b:23:15:4f:1c:d2:d0:68:72:91:9c:7b:ad:cb:34:
5a:f0:cf:e5:f6:05:95:5d:b9:f9:6c:f9:09:79:ab:
cc:ca:b3:7f:d6:25:f3:08:ff:0e:59:d5:7b:a3:e4:
30:02:d4:4f:8a:5b:92:72:bd:03:41:79:1a:d5:fa:
c4:64:ef:a2:7f:bd:53:1b:6b:96:48:21:ef:df:8b:
8b:a5:40:6d:2e:70:33:a2:66:0f:87:1c:55:79:7b:
dc:98:ed:66:99:71:44:41:64:9e:65:e7:c5:97:a9:
87:40:1b:be:1c:d0:be:f1:08:fa:fe:01:2a:f6:24:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D5:8A:F2:91:08:17:A5:35:E7:55:9E:84:81:2E:12:3C:CC:67:E5
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/o9WK8pEIF6U151WehIEuEjzMZ-U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.30.72.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:3f:56:e3:26:a0:f1:fb:61:b9:06:f4:d0:10:4b:95:fd:22:
16:7d:31:2e:37:3c:e6:7f:6f:24:ef:bb:14:17:fd:5e:17:72:
f1:6f:08:f5:ef:e2:c8:f1:9d:68:61:b4:2c:04:c1:e8:c9:6f:
a0:72:65:0b:b7:c6:4b:72:f9:28:74:81:57:f6:87:37:84:e0:
08:5a:2b:d0:0d:94:91:0a:fa:b2:d4:59:8d:3d:13:b2:9a:4e:
eb:eb:08:bc:bb:36:ea:25:1e:1a:7e:75:2a:2a:63:e6:ef:91:
d5:43:8a:d9:5e:85:bd:1c:79:9f:8b:a0:7b:c8:82:58:7b:f1:
4a:e5:fd:50:f7:45:24:be:64:5a:20:fe:dc:23:3f:8a:08:e1:
93:07:21:48:51:cb:d4:51:86:06:54:57:0d:f9:18:aa:98:fb:
11:6a:fd:58:84:65:09:b4:d4:ff:a9:5d:49:ab:72:f2:18:c8:
b9:77:47:60:69:ab:2e:1c:4b:98:d2:5f:b3:19:dd:a1:9f:22:
b9:20:61:ba:63:b9:b9:0e:5b:84:d0:2d:ca:ed:23:8d:14:9f:
d0:13:a6:e5:86:1f:c4:da:d9:ef:72:94:44:83:37:4f:f6:af:
b1:85:ae:06:66:d7:b2:cf:96:fa:39:45:61:07:f3:f1:57:18:
cc:3b:14:36
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEaswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA3MTIw
MDUyMjdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEEzRDU4QUYyOTEwODE3
QTUzNUU3NTU5RTg0ODEyRTEyM0NDQzY3RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGJ6KaAUfqkqfgdGhpP+qCt6zp8RtHP9xZ3jAroEyrkTMBSbZR
1Eirwi96eTFf2F8Giy3IUdPJ7oMs3tI3kN7++ev97GrVOmtMHUXsWHAv6qo2CxrT
5SX6KKZ1iJWJZJ236l0S1cAAjJnYcjz0KpgW8zOuKORSKi98GlDQrOQNmktVeTQ8
JwsjFU8c0tBocpGce63LNFrwz+X2BZVdufls+Ql5q8zKs3/WJfMI/w5Z1Xuj5DAC
1E+KW5JyvQNBeRrV+sRk76J/vVMba5ZIIe/fi4ulQG0ucDOiZg+HHFV5e9yY7WaZ
cURBZJ5l58WXqYdAG74c0L7xCPr+ASr2JH7PAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUo9WK8pEIF6U151WehIEuEjzMZ+UwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbzlXSzhwRUlGNlUxNTFXZWhJRXVF
anpNWi1VLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAnMeSDAN
BgkqhkiG9w0BAQsFAAOCAQEAfj9W4yag8fthuQb00BBLlf0iFn0xLjc85n9vJO+7
FBf9Xhdy8W8I9e/iyPGdaGG0LATB6MlvoHJlC7fGS3L5KHSBV/aHN4TgCFor0A2U
kQr6stRZjT0TsppO6+sIvLs26iUeGn51Kipj5u+R1UOK2V6FvRx5n4uge8iCWHvx
SuX9UPdFJL5kWiD+3CM/igjhkwchSFHL1FGGBlRXDfkYqpj7EWr9WIRlCbTU/6ld
Saty8hjIuXdHYGmrLhxLmNJfsxndoZ8iuSBhumO5uQ5bhNAtyu0jjRSf0BOm5YYf
xNrZ73KURIM3T/avsYWuBmbXss+W+jlFYQfz8VcYzDsUNg==
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:51 2023 by rpki-client on console-ams.rpki-client.org