Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/uSidOONdfHtFVXE8XAfDMx3CztQ.roa
File: uSidOONdfHtFVXE8XAfDMx3CztQ.roa (raw, json)
Hash identifier: 8Z7aJP0gKIY1UP3t61ywPAF2iI/TOOax8NWFJocSVo4=
Subject key identifier: B9:28:9D:38:E3:5D:7C:7B:45:55:71:3C:5C:07:C3:33:1D:C2:CE:D4
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 105F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/uSidOONdfHtFVXE8XAfDMx3CztQ.roa
Signing time: Wed 01 Feb 2023 10:28:28 +0000
ROA not before: Wed 01 Feb 2023 10:28:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 106.106.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4191 (0x105f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:28 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B9289D38E35D7C7B4555713C5C07C3331DC2CED4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:34:cc:23:c0:3e:7f:d2:be:d3:c3:89:7b:
17:14:1a:42:7b:0a:84:78:09:5b:5f:33:0f:71:e4:
45:5f:19:9a:af:82:02:50:ea:a8:bb:b1:c5:d4:c5:
3e:86:c3:77:88:e2:c7:26:28:6e:17:64:fb:e7:bf:
de:77:1e:37:4a:fa:47:2f:22:ea:9f:33:1c:02:58:
18:60:90:9a:67:25:2b:b4:13:03:66:26:df:b8:5d:
0f:e0:f3:ce:f5:32:17:c2:f3:27:e9:84:a3:98:66:
e2:6d:00:c7:e9:50:4c:16:b0:f5:48:3d:84:e2:da:
e0:dc:0d:46:98:52:0d:4a:82:55:f2:48:b0:a6:57:
c9:93:32:56:7e:21:90:b8:78:e7:1f:59:4a:cf:47:
f4:16:c0:8f:74:91:05:ad:14:5a:36:4d:26:a9:ef:
f1:b0:0e:5c:66:3f:bd:7c:0b:fe:4b:f6:50:77:2c:
c3:aa:9b:60:37:0d:20:c6:40:8b:4a:27:c5:d4:80:
b0:1c:32:0f:fe:6a:54:fa:6b:a2:e1:6d:5d:15:3d:
da:4c:ca:65:1b:2d:75:30:5a:2f:25:fb:be:24:6e:
95:1a:a5:37:f2:c1:b9:c7:3a:79:ea:e8:fe:9d:14:
e6:a5:18:98:4c:73:ab:15:32:80:98:eb:cd:73:15:
ad:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:28:9D:38:E3:5D:7C:7B:45:55:71:3C:5C:07:C3:33:1D:C2:CE:D4
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/uSidOONdfHtFVXE8XAfDMx3CztQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.106.236.0/24
Signature Algorithm: sha256WithRSAEncryption
54:45:15:0e:7b:e3:00:03:ad:99:3d:50:be:38:83:36:b7:e6:
ce:ff:20:5c:b0:79:8c:f8:db:15:05:90:4a:d5:33:0d:3c:78:
66:e7:d6:fd:24:c2:74:76:5e:de:61:7b:b9:bf:ab:8e:f3:41:
50:8b:e7:15:96:42:bb:21:8e:b8:cc:ed:61:a6:9a:e0:d1:59:
3c:d3:be:70:cf:be:0d:92:1f:a6:e4:7f:4e:3f:b7:b8:4f:a2:
c5:5f:ea:0a:16:d8:d1:d7:8d:17:8c:7c:88:86:31:3b:96:9e:
9d:bb:c8:e0:e0:61:d8:c5:59:9b:01:98:fe:ef:d0:75:d0:6d:
88:08:d5:d7:8b:54:41:55:5f:3f:80:e0:26:19:77:12:44:bd:
6b:7c:5a:6c:66:12:43:10:0e:43:27:93:e2:00:e8:3f:5a:9e:
e2:08:d6:d1:4f:ea:57:9a:38:9c:b1:f1:59:ce:7e:6e:ed:18:
d8:00:85:7a:59:ef:1d:e3:22:c4:b8:f2:f4:b9:5f:33:be:df:
b9:f2:df:75:ae:a6:a3:c6:0f:c7:82:74:a4:f8:0b:1f:e7:e3:
34:11:e0:51:2c:67:7a:0f:ff:ef:99:54:b8:9e:8a:9f:1f:15:
2f:2a:1d:9f:a7:ca:5c:24:91:d4:a2:00:e6:26:86:04:72:0f:
c0:a7:51:13
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEF8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzAyMDEx
MDI4MjhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEI5Mjg5RDM4RTM1RDdD
N0I0NTU1NzEzQzVDMDdDMzMzMURDMkNFRDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCt4jTMI8A+f9K+08OJexcUGkJ7CoR4CVtfMw9x5EVfGZqvggJQ
6qi7scXUxT6Gw3eI4scmKG4XZPvnv953HjdK+kcvIuqfMxwCWBhgkJpnJSu0EwNm
Jt+4XQ/g8871MhfC8yfphKOYZuJtAMfpUEwWsPVIPYTi2uDcDUaYUg1KglXySLCm
V8mTMlZ+IZC4eOcfWUrPR/QWwI90kQWtFFo2TSap7/GwDlxmP718C/5L9lB3LMOq
m2A3DSDGQItKJ8XUgLAcMg/+alT6a6LhbV0VPdpMymUbLXUwWi8l+74kbpUapTfy
wbnHOnnq6P6dFOalGJhMc6sVMoCY681zFa15AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUuSidOONdfHtFVXE8XAfDMx3CztQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvdVNpZE9PTmRmSHRGVlhFOFhBZkRN
eDNDenRRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGpq7DAN
BgkqhkiG9w0BAQsFAAOCAQEAVEUVDnvjAAOtmT1QvjiDNrfmzv8gXLB5jPjbFQWQ
StUzDTx4ZufW/STCdHZe3mF7ub+rjvNBUIvnFZZCuyGOuMztYaaa4NFZPNO+cM++
DZIfpuR/Tj+3uE+ixV/qChbY0deNF4x8iIYxO5aenbvI4OBh2MVZmwGY/u/QddBt
iAjV14tUQVVfP4DgJhl3EkS9a3xabGYSQxAOQyeT4gDoP1qe4gjW0U/qV5o4nLHx
Wc5+bu0Y2ACFelnvHeMixLjy9LlfM77fufLfda6mo8YPx4J0pPgLH+fjNBHgUSxn
eg//75lUuJ6Knx8VLyodn6fKXCSR1KIA5iaGBHIPwKdREw==
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:51 2023 by rpki-client on console-ams.rpki-client.org