Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/wjRHAPUBCvuPkmJzPKo51Q1zMAA.roa
File: wjRHAPUBCvuPkmJzPKo51Q1zMAA.roa (raw, json)
Hash identifier: Su1Y7Y/Vq9D1Vmv15lH1JlfDBmvcfrOzON/0Ij1pbiY=
Subject key identifier: C2:34:47:00:F5:01:0A:FB:8F:92:62:73:3C:AA:39:D5:0D:73:30:00
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1111
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wjRHAPUBCvuPkmJzPKo51Q1zMAA.roa
Signing time: Wed 01 Feb 2023 10:29:25 +0000
ROA not before: Wed 01 Feb 2023 10:29:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 106.107.160.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4369 (0x1111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:25 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C2344700F5010AFB8F9262733CAA39D50D733000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:98:64:7f:01:d7:67:cb:84:c8:33:9e:3e:43:
a0:47:c6:6a:bf:4a:33:ea:2e:90:5c:18:a9:25:7b:
50:cc:24:9d:09:6a:b7:35:1e:4a:92:62:2b:7d:55:
89:80:3a:c0:2e:57:75:74:1c:fd:be:76:8f:ab:d4:
de:85:db:1a:72:ae:23:98:9c:1e:cb:a5:27:d5:91:
a5:26:e6:9b:bc:ec:2d:b1:72:8a:39:b1:47:2b:b3:
e8:cb:4b:67:6b:a3:94:c4:2d:d1:65:fe:b3:c4:6d:
59:74:3b:68:ea:6c:d0:f0:b2:e2:cc:ed:bf:88:88:
d0:ca:61:5e:0c:65:3b:09:10:89:2e:53:e1:b9:12:
a1:eb:59:49:79:9f:87:75:75:fa:cf:59:e9:1e:cc:
e7:4a:24:98:a3:16:4a:48:33:8d:62:cb:c3:3e:4f:
1d:65:0f:19:0f:32:8d:81:b7:a6:69:31:2c:c1:63:
54:17:18:c5:9a:3d:38:b5:e7:55:e8:06:07:f8:58:
51:25:08:de:61:4c:61:aa:e9:d7:7f:2d:be:4e:ea:
e4:e8:f4:ae:68:1c:f4:5a:93:46:a3:b1:f2:2b:81:
8e:d7:8a:fc:05:50:74:9a:fb:dd:e6:19:77:de:69:
9b:be:e8:d2:d4:54:7b:64:2f:4c:00:de:64:c3:4c:
74:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:34:47:00:F5:01:0A:FB:8F:92:62:73:3C:AA:39:D5:0D:73:30:00
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wjRHAPUBCvuPkmJzPKo51Q1zMAA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.160.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:6d:2b:b1:f4:5c:84:e8:1d:af:db:ea:86:98:61:04:52:a1:
24:ba:76:7b:a3:77:b7:b0:e5:de:e7:9b:80:63:65:41:48:43:
2c:be:b8:61:ef:81:75:07:5c:8d:db:20:23:e8:52:4e:93:21:
bc:32:10:5d:9c:ca:b4:77:5f:77:1e:89:58:c0:3d:27:1b:0c:
14:8e:f5:ac:9b:ac:f6:70:86:de:0e:50:ee:0c:38:59:ce:83:
96:17:75:f2:50:98:4a:0c:92:19:99:3f:f4:0b:37:96:0c:02:
2b:51:dc:b0:04:c0:55:63:0d:79:2d:91:1b:16:47:7b:14:a5:
2e:f4:88:61:bd:b8:1a:74:95:0c:3f:3c:15:88:89:6e:65:c9:
94:f9:0f:77:1d:71:ef:54:81:09:f9:1e:d8:c9:cc:09:3c:23:
f4:40:e0:40:f2:ee:35:6a:bb:2c:23:a5:c6:ca:ea:91:78:83:
4d:32:f8:84:70:e0:0a:bb:cc:aa:df:d7:ea:30:3e:4d:8d:36:
54:b6:e9:f2:37:b2:02:0b:18:d9:f5:cd:02:c2:10:4e:7e:11:
16:de:db:e3:9f:69:53:88:c8:f8:fd:47:20:44:f4:da:98:96:
27:37:0c:08:3e:61:de:22:16:55:74:e7:06:97:87:3a:6a:94:
20:7f:1f:71
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEREwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzAyMDEx
MDI5MjVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEMyMzQ0NzAwRjUwMTBB
RkI4RjkyNjI3MzNDQUEzOUQ1MEQ3MzMwMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD0mGR/Addny4TIM54+Q6BHxmq/SjPqLpBcGKkle1DMJJ0Jarc1
HkqSYit9VYmAOsAuV3V0HP2+do+r1N6F2xpyriOYnB7LpSfVkaUm5pu87C2xcoo5
sUcrs+jLS2dro5TELdFl/rPEbVl0O2jqbNDwsuLM7b+IiNDKYV4MZTsJEIkuU+G5
EqHrWUl5n4d1dfrPWekezOdKJJijFkpIM41iy8M+Tx1lDxkPMo2Bt6ZpMSzBY1QX
GMWaPTi151XoBgf4WFElCN5hTGGq6dd/Lb5O6uTo9K5oHPRak0ajsfIrgY7XivwF
UHSa+93mGXfeaZu+6NLUVHtkL0wA3mTDTHSHAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUwjRHAPUBCvuPkmJzPKo51Q1zMAAwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvd2pSSEFQVUJDdnVQa21KelBLbzUx
UTF6TUFBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2proDAN
BgkqhkiG9w0BAQsFAAOCAQEAsm0rsfRchOgdr9vqhphhBFKhJLp2e6N3t7Dl3ueb
gGNlQUhDLL64Ye+BdQdcjdsgI+hSTpMhvDIQXZzKtHdfdx6JWMA9JxsMFI71rJus
9nCG3g5Q7gw4Wc6Dlhd18lCYSgySGZk/9As3lgwCK1HcsATAVWMNeS2RGxZHexSl
LvSIYb24GnSVDD88FYiJbmXJlPkPdx1x71SBCfke2MnMCTwj9EDgQPLuNWq7LCOl
xsrqkXiDTTL4hHDgCrvMqt/X6jA+TY02VLbp8jeyAgsY2fXNAsIQTn4RFt7b459p
U4jI+P1HIET02piWJzcMCD5h3iIWVXTnBpeHOmqUIH8fcQ==
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:52:51 2023 by rpki-client on console-ams.rpki-client.org