Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/rDH18CI5s8f0bOs3-CcIsWaRUh4.roa
File: rDH18CI5s8f0bOs3-CcIsWaRUh4.roa (raw, json)
Hash identifier: O311yvrNyyFjbTRPXajofkKappMeLlZiwq9Mu6VwKIY=
Subject key identifier: AC:31:F5:F0:22:39:B3:C7:F4:6C:EB:37:F8:27:08:B1:66:91:52:1E
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/rDH18CI5s8f0bOs3-CcIsWaRUh4.roa
Signing time: Thu 15 Sep 2022 02:42:40 +0000
ROA not before: Thu 15 Sep 2022 02:42:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 122.147.176.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AC31F5F02239B3C7F46CEB37F82708B16691521E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:52:b5:f9:83:43:ba:cb:e7:0e:98:db:44:
c5:8e:5f:5d:b5:3c:b1:ab:4a:28:43:10:76:f2:7e:
15:79:91:8b:4d:8e:8d:90:82:bf:17:4b:86:c7:b5:
c3:4e:39:7d:bf:f4:da:83:82:c3:c2:85:63:e9:09:
4b:6e:79:61:cc:b1:9f:4f:de:19:6b:c9:fe:94:bc:
57:76:65:67:43:74:83:c1:62:db:1e:18:5d:9e:41:
78:a3:33:9c:4e:e4:9a:61:55:4d:55:00:55:d4:91:
8a:54:4c:51:93:97:d9:20:1a:fa:de:61:d5:85:e7:
45:2b:69:4a:e4:0b:be:ea:4a:d6:1c:cc:6d:c0:2c:
25:fc:61:8f:45:31:51:8e:1f:68:fc:2e:ec:12:b2:
f1:7e:e9:88:05:8d:11:12:74:59:43:b3:99:7c:50:
c2:8a:98:7f:c4:f3:85:74:9c:75:05:86:34:9f:ae:
b7:4d:a4:db:95:cd:e9:2d:cc:a3:cb:1a:b6:51:1c:
5a:d1:02:24:57:79:ad:16:ae:a0:c9:05:30:10:b8:
92:0b:93:70:7c:e9:5e:12:71:d1:b4:c0:43:33:4c:
15:e9:40:01:38:fe:d1:f5:2b:62:d0:df:f8:6c:33:
2c:42:26:9d:a5:6b:82:e3:b6:57:5b:2b:84:4a:25:
86:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:31:F5:F0:22:39:B3:C7:F4:6C:EB:37:F8:27:08:B1:66:91:52:1E
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/rDH18CI5s8f0bOs3-CcIsWaRUh4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.176.0/20
Signature Algorithm: sha256WithRSAEncryption
b2:41:dc:87:cc:cc:93:ad:9e:ab:c4:28:de:01:12:a2:a4:b8:
16:d4:77:49:22:1a:0d:2c:72:d8:87:92:4e:dc:75:96:5b:96:
e5:06:84:d4:87:a4:4f:23:36:0e:a0:26:94:1e:25:e1:ce:d1:
ac:de:82:21:32:3a:ec:45:57:54:b0:03:80:6f:ab:13:40:46:
dd:ea:a4:0e:db:10:30:89:45:5b:a2:c2:18:3e:8d:57:25:3d:
52:e3:0c:b9:4c:0f:1c:f0:a8:1a:05:8e:d3:f7:99:c0:fb:a1:
94:8b:bc:a6:43:14:96:11:4d:88:60:21:46:41:76:55:e0:69:
61:01:b8:08:d3:50:d0:a4:20:2f:09:7d:fd:6a:b6:ee:fd:cd:
a8:bf:b0:1e:e2:08:b6:0f:34:38:2d:74:4a:15:57:8a:10:70:
f4:74:27:a9:71:3d:80:8b:80:d5:ba:60:ae:66:11:20:7b:96:
a5:71:d9:fb:2a:33:9e:13:8d:34:e3:c7:a4:15:95:8f:29:45:
13:63:b4:5d:47:ae:41:b0:97:ec:72:ba:b1:bd:13:3b:73:c3:
00:0f:ed:c2:b0:42:0e:bd:2a:c0:8b:0e:b2:c9:cd:3c:73:b4:
1d:74:94:d6:73:20:45:c7:81:4f:53:d3:45:14:6d:3d:19:7c:
db:54:ad:71
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQyNDBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEFDMzFGNUYwMjIzOUIz
QzdGNDZDRUIzN0Y4MjcwOEIxNjY5MTUyMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9tVK1+YNDusvnDpjbRMWOX121PLGrSihDEHbyfhV5kYtNjo2Q
gr8XS4bHtcNOOX2/9NqDgsPChWPpCUtueWHMsZ9P3hlryf6UvFd2ZWdDdIPBYtse
GF2eQXijM5xO5JphVU1VAFXUkYpUTFGTl9kgGvreYdWF50UraUrkC77qStYczG3A
LCX8YY9FMVGOH2j8LuwSsvF+6YgFjRESdFlDs5l8UMKKmH/E84V0nHUFhjSfrrdN
pNuVzektzKPLGrZRHFrRAiRXea0WrqDJBTAQuJILk3B86V4ScdG0wEMzTBXpQAE4
/tH1K2LQ3/hsMyxCJp2la4LjtldbK4RKJYbTAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUrDH18CI5s8f0bOs3+CcIsWaRUh4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvckRIMThDSTVzOGYwYk9zMy1DY0lz
V2FSVWg0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHqTsDAN
BgkqhkiG9w0BAQsFAAOCAQEAskHch8zMk62eq8Qo3gESoqS4FtR3SSIaDSxy2IeS
Ttx1lluW5QaE1IekTyM2DqAmlB4l4c7RrN6CITI67EVXVLADgG+rE0BG3eqkDtsQ
MIlFW6LCGD6NVyU9UuMMuUwPHPCoGgWO0/eZwPuhlIu8pkMUlhFNiGAhRkF2VeBp
YQG4CNNQ0KQgLwl9/Wq27v3NqL+wHuIItg80OC10ShVXihBw9HQnqXE9gIuA1bpg
rmYRIHuWpXHZ+yoznhONNOPHpBWVjylFE2O0XUeuQbCX7HK6sb0TO3PDAA/twrBC
Dr0qwIsOssnNPHO0HXSU1nMgRceBT1PTRRRtPRl821StcQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:01 2023 by rpki-client on console-ams.rpki-client.org