Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/zBHDrsBVDpSoScVB0xkTDpOHEc8.roa
File: zBHDrsBVDpSoScVB0xkTDpOHEc8.roa (raw, json)
Hash identifier: KzsR8790w0Mo5GZ/XVDJ1cIp9QDIWkRVPYaFjt8NDtg=
Subject key identifier: CC:11:C3:AE:C0:55:0E:94:A8:49:C5:41:D3:19:13:0E:93:87:11:CF
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10D8
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zBHDrsBVDpSoScVB0xkTDpOHEc8.roa
Signing time: Wed 01 Feb 2023 10:29:06 +0000
ROA not before: Wed 01 Feb 2023 10:29:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 106.105.96.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4312 (0x10d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:06 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CC11C3AEC0550E94A849C541D319130E938711CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:40:46:9a:49:dd:cf:25:0c:63:50:02:af:
54:2c:41:59:72:bd:35:76:5d:d0:68:c0:5d:2c:bc:
71:e4:4d:e5:c5:80:a2:77:4c:ca:6e:07:0c:95:47:
64:f1:19:7d:5b:49:15:be:52:31:a1:36:58:c3:85:
6c:9f:ef:06:90:03:0a:09:ef:df:a2:51:e7:2a:20:
5e:d4:a8:a1:f5:6f:e6:a5:ed:be:fd:b1:37:fa:9e:
56:8b:64:52:34:d7:38:52:e0:bb:cd:d5:aa:d6:c6:
26:fd:80:07:d5:6a:f7:bb:e1:aa:77:26:da:ce:0c:
5e:25:3e:40:f9:34:db:b1:5b:e5:36:f6:73:e7:a6:
2a:80:0c:20:52:2b:e4:0f:20:a6:c8:77:fb:f4:30:
6c:4d:29:af:63:68:fa:57:63:5e:28:65:5d:4a:98:
25:88:7a:29:5b:4b:27:30:4e:d0:7f:47:46:70:5a:
65:26:66:11:bb:5b:ad:9b:1d:06:1d:f3:cb:a0:10:
8c:26:3f:09:07:96:71:98:2f:94:f0:a8:43:3c:c9:
e7:c4:84:46:ba:9a:01:8f:d8:e7:3e:2a:99:06:4a:
ff:37:8a:98:c5:2a:60:7e:f3:82:6b:9e:91:97:b3:
2a:39:9e:0f:b0:a0:f1:0b:1e:11:96:a3:ef:92:cb:
4c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:11:C3:AE:C0:55:0E:94:A8:49:C5:41:D3:19:13:0E:93:87:11:CF
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zBHDrsBVDpSoScVB0xkTDpOHEc8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.96.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:9e:e3:38:90:29:03:0e:91:51:50:d4:84:fc:b8:22:e0:3e:
d4:43:cc:4e:c7:c7:da:0f:4e:16:5d:5e:b9:47:5c:cf:a1:a4:
b7:c0:61:7b:44:37:f7:18:35:77:34:9b:23:96:8a:80:56:7c:
00:0e:eb:45:c8:21:69:2d:5d:41:49:70:f5:08:24:5c:24:b6:
1e:f6:24:1b:01:73:0b:69:51:cc:fb:68:ea:0a:d5:65:ec:6d:
4c:8b:d7:44:7b:5e:18:e0:75:cb:fa:23:a7:82:58:ed:af:b0:
f1:55:5e:5d:3e:be:58:2e:4b:00:8b:ec:72:ac:e5:5c:bc:1d:
e7:6e:3f:07:62:03:09:44:60:a7:8d:a7:d1:4b:50:26:a2:a7:
6a:8a:e8:f1:f7:5e:da:51:4a:24:6a:fd:08:43:92:84:9b:f9:
7b:83:f9:6f:8a:9e:42:d8:d0:42:0a:6f:52:c7:98:89:47:01:
89:aa:33:8c:58:e8:5d:2c:fa:00:7c:57:85:1b:b7:7c:ae:96:
9a:e0:5c:e1:a3:a0:66:bc:2d:e6:65:18:d0:ca:55:a9:9d:b2:
c6:e7:93:4a:db:62:02:06:26:92:2c:50:f0:7b:1e:90:4f:ed:
27:36:c1:18:97:79:96:b9:e4:b0:4e:eb:09:4e:69:27:b2:cd:
3e:e4:f7:1c
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICENgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzAyMDEx
MDI5MDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKENDMTFDM0FFQzA1NTBF
OTRBODQ5QzU0MUQzMTkxMzBFOTM4NzExQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9rEBGmkndzyUMY1ACr1QsQVlyvTV2XdBowF0svHHkTeXFgKJ3
TMpuBwyVR2TxGX1bSRW+UjGhNljDhWyf7waQAwoJ79+iUecqIF7UqKH1b+al7b79
sTf6nlaLZFI01zhS4LvN1arWxib9gAfVave74ap3JtrODF4lPkD5NNuxW+U29nPn
piqADCBSK+QPIKbId/v0MGxNKa9jaPpXY14oZV1KmCWIeilbSycwTtB/R0ZwWmUm
ZhG7W62bHQYd88ugEIwmPwkHlnGYL5TwqEM8yefEhEa6mgGP2Oc+KpkGSv83ipjF
KmB+84JrnpGXsyo5ng+woPELHhGWo++Sy0x1AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUzBHDrsBVDpSoScVB0xkTDpOHEc8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvekJIRHJzQlZEcFNvU2NWQjB4a1RE
cE9IRWM4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2ppYDAN
BgkqhkiG9w0BAQsFAAOCAQEAep7jOJApAw6RUVDUhPy4IuA+1EPMTsfH2g9OFl1e
uUdcz6Gkt8Bhe0Q39xg1dzSbI5aKgFZ8AA7rRcghaS1dQUlw9QgkXCS2HvYkGwFz
C2lRzPto6grVZextTIvXRHteGOB1y/ojp4JY7a+w8VVeXT6+WC5LAIvscqzlXLwd
524/B2IDCURgp42n0UtQJqKnaoro8fde2lFKJGr9CEOShJv5e4P5b4qeQtjQQgpv
UseYiUcBiaozjFjoXSz6AHxXhRu3fK6WmuBc4aOgZrwt5mUY0MpVqZ2yxueTStti
AgYmkixQ8HsekE/tJzbBGJd5lrnksE7rCU5pJ7LNPuT3HA==
-----END CERTIFICATE-----
Generated at Fri Sep 1 09:53:16 2023 by rpki-client on console-fra.rpki-client.org