Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/p_IAhJw3gEHmIwTQo7eeviekrts.roa
File: p_IAhJw3gEHmIwTQo7eeviekrts.roa (raw, json)
Hash identifier: hUr8uksGpl1uxPMPtZ8lUgePI+5kQEZgYcDFEZP2t1U=
Subject key identifier: A7:F2:00:84:9C:37:80:41:E6:23:04:D0:A3:B7:9E:BE:27:A4:AE:DB
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10E2
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/p_IAhJw3gEHmIwTQo7eeviekrts.roa
Signing time: Wed 01 Feb 2023 10:29:10 +0000
ROA not before: Wed 01 Feb 2023 10:29:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 175.183.0.0/17 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4322 (0x10e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:10 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A7F200849C378041E62304D0A3B79EBE27A4AEDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:7d:98:f3:0d:fa:d2:29:12:80:2b:e6:23:
e9:9c:6c:18:ed:95:eb:5d:c7:9c:d5:cd:12:f9:71:
68:98:e5:72:42:77:c3:79:9c:6c:90:4b:be:9c:0c:
ae:99:33:82:72:0d:69:9a:a8:7e:46:0b:c5:13:8c:
b7:24:35:0e:56:f4:06:7e:ce:10:19:48:a7:90:66:
fc:42:22:22:3b:98:b8:5e:1f:ba:dc:ba:30:8d:87:
19:4f:f1:22:4c:e0:7d:d0:43:10:4d:91:06:1a:16:
9e:87:7e:8c:1f:02:0d:d6:09:3f:ab:0a:2d:f6:c5:
98:c8:21:47:a5:b4:dd:7c:91:cc:dc:9a:0c:3c:c4:
40:88:4e:ed:88:6c:dc:ed:10:be:fc:1e:4c:33:b3:
bb:ac:f9:f7:00:91:91:ba:d1:0e:ee:e9:e9:97:b7:
ed:3b:c4:13:33:25:94:ed:37:f1:b9:d3:3d:33:33:
3f:3a:03:f8:ee:da:ff:7c:a7:f5:89:9e:a3:0b:c7:
41:c3:1e:f0:3f:8b:75:23:c6:1f:13:fa:bf:75:fa:
24:49:bc:4f:8d:1f:c3:bb:7a:f3:2e:ee:fa:e3:a5:
b8:3c:34:e8:66:3f:8e:e1:58:66:89:f2:fc:62:03:
02:d7:92:c3:1f:5e:b8:56:95:d0:f7:29:54:f4:9d:
b8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F2:00:84:9C:37:80:41:E6:23:04:D0:A3:B7:9E:BE:27:A4:AE:DB
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/p_IAhJw3gEHmIwTQo7eeviekrts.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.0.0/17
Signature Algorithm: sha256WithRSAEncryption
9e:6d:5f:96:5c:b0:bb:30:b8:12:0d:88:4d:81:06:7e:11:e1:
39:a6:a4:2c:a6:f7:00:44:a6:a4:50:50:ef:ef:ee:e2:b5:2f:
7b:74:01:47:e3:83:97:e8:af:21:f0:05:d5:c9:f0:7f:92:3d:
83:55:e3:39:0b:b9:43:10:f8:4e:ab:f5:bb:f9:07:09:4b:f4:
eb:b9:58:ba:75:63:ca:27:7b:2f:28:8d:f4:61:5b:42:b8:1e:
61:1d:65:c7:4a:b7:3c:fe:1a:7c:7c:47:a6:35:db:90:23:2f:
33:18:cd:ab:dc:e8:7b:b2:60:15:0e:67:e9:b1:2b:16:ef:40:
ab:4d:bd:91:0f:39:7d:b4:cb:00:42:80:f8:91:49:19:f5:5c:
94:aa:a1:24:b9:8f:38:36:3d:67:83:78:32:3e:bf:ee:73:66:
4f:e2:96:30:d7:ca:16:11:af:bf:91:f5:d8:77:12:10:8b:8e:
eb:10:62:a3:3c:ef:44:b1:84:5c:56:ed:c4:ac:b6:d8:ed:03:
a4:5d:f3:f8:30:f6:ca:32:c9:1a:b3:f5:36:05:04:6d:67:54:
33:b7:38:d5:a4:49:f0:4a:48:09:7c:1d:2c:d6:df:70:86:cb:
a8:f7:3e:c2:89:66:4e:a9:cc:02:8b:df:ce:4a:b9:e4:c5:1e:
e6:36:08:cf
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEOIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzAyMDEx
MDI5MTBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEE3RjIwMDg0OUMzNzgw
NDFFNjIzMDREMEEzQjc5RUJFMjdBNEFFREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDISn2Y8w360ikSgCvmI+mcbBjtletdx5zVzRL5cWiY5XJCd8N5
nGyQS76cDK6ZM4JyDWmaqH5GC8UTjLckNQ5W9AZ+zhAZSKeQZvxCIiI7mLheH7rc
ujCNhxlP8SJM4H3QQxBNkQYaFp6HfowfAg3WCT+rCi32xZjIIUeltN18kczcmgw8
xECITu2IbNztEL78Hkwzs7us+fcAkZG60Q7u6emXt+07xBMzJZTtN/G50z0zMz86
A/ju2v98p/WJnqMLx0HDHvA/i3Ujxh8T+r91+iRJvE+NH8O7evMu7vrjpbg8NOhm
P47hWGaJ8vxiAwLXksMfXrhWldD3KVT0nbgFAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUp/IAhJw3gEHmIwTQo7eeviekrtswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvcF9JQWhKdzNnRUhtSXdUUW83ZWV2
aWVrcnRzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB6+3ADAN
BgkqhkiG9w0BAQsFAAOCAQEAnm1fllywuzC4Eg2ITYEGfhHhOaakLKb3AESmpFBQ
7+/u4rUve3QBR+ODl+ivIfAF1cnwf5I9g1XjOQu5QxD4Tqv1u/kHCUv067lYunVj
yid7LyiN9GFbQrgeYR1lx0q3PP4afHxHpjXbkCMvMxjNq9zoe7JgFQ5n6bErFu9A
q029kQ85fbTLAEKA+JFJGfVclKqhJLmPODY9Z4N4Mj6/7nNmT+KWMNfKFhGvv5H1
2HcSEIuO6xBiozzvRLGEXFbtxKy22O0DpF3z+DD2yjLJGrP1NgUEbWdUM7c41aRJ
8EpICXwdLNbfcIbLqPc+wolmTqnMAovfzkq55MUe5jYIzw==
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:16 2023 by rpki-client on console-fra.rpki-client.org