Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/sBY-5lyhKk-FhJhAg25raTNUNTQ.roa
File: sBY-5lyhKk-FhJhAg25raTNUNTQ.roa (raw, json)
Hash identifier: 8oUPkjO6hw3Gs13P+nai7FGKUjT8i+G7LDNNwv+5i4o=
Subject key identifier: B0:16:3E:E6:5C:A1:2A:4F:85:84:98:40:83:6E:6B:69:33:54:35:34
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sBY-5lyhKk-FhJhAg25raTNUNTQ.roa
Signing time: Thu 15 Sep 2022 02:43:35 +0000
ROA not before: Thu 15 Sep 2022 02:43:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 106.107.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B0163EE65CA12A4F85849840836E6B6933543534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d0:79:8f:4c:31:00:af:cd:56:04:f2:85:f9:
a4:15:74:b1:d2:be:29:d6:92:18:cb:0a:6b:37:74:
16:e4:9c:cc:4b:fc:6b:7a:83:c7:9e:a7:9a:35:89:
af:35:73:e3:18:23:6e:af:55:5f:43:b5:5e:bb:85:
22:bc:a4:c2:e8:89:e7:ee:bb:84:c7:8e:b2:89:ef:
83:77:b5:d6:43:37:c0:83:d4:77:76:37:ef:42:b7:
4b:61:6c:97:96:a1:c1:5a:83:4c:21:af:8c:2e:52:
9e:15:e3:ed:eb:e7:59:49:71:7d:15:5b:87:d6:c3:
2c:c6:a2:aa:d5:aa:ac:e3:6b:17:7f:1a:4e:0b:a6:
11:27:13:0b:9f:6c:65:5d:f3:4d:3c:e9:03:54:5f:
73:3e:ee:6e:93:14:0b:48:9a:87:e5:9b:ff:16:1b:
00:d6:8d:e9:03:1a:5f:0f:33:04:04:c9:10:2b:13:
78:86:a7:f1:69:91:25:50:c6:77:25:2e:6a:e3:6e:
ff:c7:e4:dd:54:0c:cb:9e:d6:df:5f:49:39:42:9a:
60:ac:48:36:f6:de:cb:18:ca:6b:bf:b1:2d:be:4b:
3c:1c:d0:c3:10:b5:c6:29:f0:56:9f:d2:ba:88:d2:
2c:97:89:ff:69:eb:c8:60:e3:ce:ec:bb:21:01:35:
6e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:16:3E:E6:5C:A1:2A:4F:85:84:98:40:83:6E:6B:69:33:54:35:34
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sBY-5lyhKk-FhJhAg25raTNUNTQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.175.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:2a:8b:c8:fb:4a:5f:52:9a:a8:34:3b:69:92:40:2a:92:e4:
b3:96:a9:26:d8:a8:5a:6d:d9:31:a9:91:6e:84:55:10:b1:49:
a0:b1:62:49:8e:60:97:05:fd:2c:51:e8:3a:33:db:22:46:98:
42:27:86:cc:97:79:7f:a8:0d:1f:39:82:3c:83:99:bf:1a:48:
ea:71:4d:83:4c:d1:fa:0b:2e:99:20:0e:03:74:d7:cd:2a:3a:
0e:53:40:af:ed:de:21:b2:c0:61:7b:6a:c2:b7:99:ae:95:02:
10:21:40:e5:5b:a9:7a:98:ef:71:d0:0e:2a:87:d1:91:83:5e:
27:1c:90:38:80:d5:9c:6c:1d:75:08:34:69:ac:ba:62:75:32:
26:9c:28:02:49:7f:65:f1:41:3a:fd:37:2e:5e:7d:83:a5:7b:
cd:6d:d9:e1:47:5b:2d:8f:9c:95:76:35:0b:ca:d7:7a:ad:3f:
c7:ca:96:4e:61:cd:c3:50:15:b5:13:06:19:93:3e:ce:00:1c:
49:0d:78:c9:50:05:c0:d7:5d:4d:f4:d9:89:3e:c5:d5:56:b2:
37:a2:b3:9f:71:70:7d:5d:82:0d:b5:51:0d:b7:31:4f:0f:06:
db:2c:f1:52:ce:d1:0d:27:ee:f0:98:e0:01:b9:5b:3f:94:a6:
d8:8f:24:09
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzMzVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEIwMTYzRUU2NUNBMTJB
NEY4NTg0OTg0MDgzNkU2QjY5MzM1NDM1MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC80HmPTDEAr81WBPKF+aQVdLHSvinWkhjLCms3dBbknMxL/Gt6
g8eep5o1ia81c+MYI26vVV9DtV67hSK8pMLoiefuu4THjrKJ74N3tdZDN8CD1Hd2
N+9Ct0thbJeWocFag0whr4wuUp4V4+3r51lJcX0VW4fWwyzGoqrVqqzjaxd/Gk4L
phEnEwufbGVd80086QNUX3M+7m6TFAtImoflm/8WGwDWjekDGl8PMwQEyRArE3iG
p/FpkSVQxnclLmrjbv/H5N1UDMue1t9fSTlCmmCsSDb23ssYymu/sS2+Szwc0MMQ
tcYp8Faf0rqI0iyXif9p68hg487suyEBNW51AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUsBY+5lyhKk+FhJhAg25raTNUNTQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvc0JZLTVseWhLay1GaEpoQWcyNXJh
VE5VTlRRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGprrzAN
BgkqhkiG9w0BAQsFAAOCAQEAyyqLyPtKX1KaqDQ7aZJAKpLks5apJtioWm3ZMamR
boRVELFJoLFiSY5glwX9LFHoOjPbIkaYQieGzJd5f6gNHzmCPIOZvxpI6nFNg0zR
+gsumSAOA3TXzSo6DlNAr+3eIbLAYXtqwreZrpUCECFA5VupepjvcdAOKofRkYNe
JxyQOIDVnGwddQg0aay6YnUyJpwoAkl/ZfFBOv03Ll59g6V7zW3Z4UdbLY+clXY1
C8rXeq0/x8qWTmHNw1AVtRMGGZM+zgAcSQ14yVAFwNddTfTZiT7F1VayN6Kzn3Fw
fV2CDbVRDbcxTw8G2yzxUs7RDSfu8JjgAblbP5Sm2I8kCQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:13 2023 by rpki-client on console-fra.rpki-client.org