Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/y0wCw12BFE02r4j4BRqZkHe9JYs.roa
File: y0wCw12BFE02r4j4BRqZkHe9JYs.roa (raw, json)
Hash identifier: c+D2oX4JgDwouBcFEW+JaFt4PN+I2oNnrbl8baPR75k=
Subject key identifier: CB:4C:02:C3:5D:81:14:4D:36:AF:88:F8:05:1A:99:90:77:BD:25:8B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/y0wCw12BFE02r4j4BRqZkHe9JYs.roa
Signing time: Thu 15 Sep 2022 02:42:58 +0000
ROA not before: Thu 15 Sep 2022 02:42:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 106.105.64.0/19 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CB4C02C35D81144D36AF88F8051A999077BD258B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6b:71:c9:37:67:60:88:32:35:7c:d3:49:57:
8a:aa:42:b9:4a:6d:b3:3a:fa:a3:a7:bf:32:34:86:
14:24:31:ea:00:d7:a1:ce:4b:c6:65:cc:06:f8:f7:
9d:2a:72:f3:cb:f9:96:79:90:89:26:56:e8:b5:20:
d3:3d:4d:fc:8f:05:78:2f:19:32:87:ab:3e:b4:58:
1c:15:0b:7d:8c:30:67:5a:60:cd:8f:d2:01:98:1e:
dc:9e:9b:82:33:ab:a7:36:1f:16:9c:13:ab:58:af:
ec:0a:06:93:2a:31:5d:c3:94:15:39:7f:69:92:75:
d5:88:9a:ba:50:8d:99:03:35:0a:1f:3a:bf:39:b6:
b0:ee:57:e8:29:37:05:34:4f:79:75:32:ca:26:8c:
6c:33:ce:fe:c1:60:9a:7e:cc:ee:6a:c6:aa:a3:ac:
ab:45:cd:a7:ce:f7:78:1a:c1:4f:ce:70:8e:08:55:
26:97:14:2a:88:33:45:5f:01:f8:82:00:61:a2:f8:
41:c7:36:e1:ad:c5:71:a6:8f:3e:6f:c9:29:6b:80:
15:77:9d:76:1b:cd:92:3e:2a:31:e0:18:68:86:25:
11:9d:14:47:45:c0:8b:3a:d0:e5:d5:d2:ed:c4:14:
41:65:68:60:43:68:45:65:66:75:db:2e:c8:b2:c0:
15:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4C:02:C3:5D:81:14:4D:36:AF:88:F8:05:1A:99:90:77:BD:25:8B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/y0wCw12BFE02r4j4BRqZkHe9JYs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.64.0/19
Signature Algorithm: sha256WithRSAEncryption
0b:33:14:cd:29:6d:c0:d3:e6:99:ec:4c:77:7f:95:d6:c4:4b:
ef:d1:32:68:29:b2:4c:85:77:80:37:74:2c:4b:87:f8:01:8d:
45:c0:ee:55:2e:25:9a:9c:04:2c:55:15:0a:81:7b:99:e6:66:
19:ab:99:7e:de:93:c0:58:9f:6b:48:23:e0:a8:26:ea:48:22:
14:26:27:ad:e8:9a:56:2b:70:33:5c:2e:09:30:68:9f:cc:9c:
df:1a:67:10:a1:04:7d:e2:e3:86:a9:6e:b4:c8:56:0e:04:b3:
cf:a5:c2:98:80:07:4c:47:3d:82:ff:6d:27:f7:42:5b:15:ba:
ef:cc:45:df:1b:b1:01:e6:81:3a:01:65:30:ec:30:1b:eb:59:
11:df:92:b0:fa:b8:c3:04:06:eb:04:47:73:5a:96:3b:58:1b:
3d:98:05:74:5d:40:ee:c5:a0:45:f6:9a:b0:ab:f0:b8:b0:e6:
02:e7:11:dc:59:dd:26:1e:da:4b:7a:90:03:d0:75:68:f1:28:
ba:ba:9c:7b:62:59:8d:04:57:81:6a:26:2e:da:ab:05:b9:91:
a1:2e:74:39:6f:3f:2d:75:26:cd:69:ef:d9:91:83:76:82:fd:
04:34:0b:ad:af:ee:d6:96:55:bb:ec:9f:dc:de:b6:07:07:ab:
bf:f1:2c:69
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQyNThaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKENCNEMwMkMzNUQ4MTE0
NEQzNkFGODhGODA1MUE5OTkwNzdCRDI1OEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIa3HJN2dgiDI1fNNJV4qqQrlKbbM6+qOnvzI0hhQkMeoA16HO
S8ZlzAb4950qcvPL+ZZ5kIkmVui1INM9TfyPBXgvGTKHqz60WBwVC32MMGdaYM2P
0gGYHtyem4Izq6c2HxacE6tYr+wKBpMqMV3DlBU5f2mSddWImrpQjZkDNQofOr85
trDuV+gpNwU0T3l1MsomjGwzzv7BYJp+zO5qxqqjrKtFzafO93gawU/OcI4IVSaX
FCqIM0VfAfiCAGGi+EHHNuGtxXGmjz5vySlrgBV3nXYbzZI+KjHgGGiGJRGdFEdF
wIs60OXV0u3EFEFlaGBDaEVlZnXbLsiywBUxAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUy0wCw12BFE02r4j4BRqZkHe9JYswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMveTB3Q3cxMkJGRTAycjRqNEJScVpr
SGU5SllzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBWppQDAN
BgkqhkiG9w0BAQsFAAOCAQEACzMUzSltwNPmmexMd3+V1sRL79EyaCmyTIV3gDd0
LEuH+AGNRcDuVS4lmpwELFUVCoF7meZmGauZft6TwFifa0gj4Kgm6kgiFCYnreia
VitwM1wuCTBon8yc3xpnEKEEfeLjhqlutMhWDgSzz6XCmIAHTEc9gv9tJ/dCWxW6
78xF3xuxAeaBOgFlMOwwG+tZEd+SsPq4wwQG6wRHc1qWO1gbPZgFdF1A7sWgRfaa
sKvwuLDmAucR3FndJh7aS3qQA9B1aPEourqce2JZjQRXgWomLtqrBbmRoS50OW8/
LXUmzWnv2ZGDdoL9BDQLra/u1pZVu+yf3N62Bwerv/EsaQ==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:13 2023 by rpki-client on console-fra.rpki-client.org