Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/riSq1s41KDs_p6pZH33R0TPcXCk.roa
File: riSq1s41KDs_p6pZH33R0TPcXCk.roa (raw, json)
Hash identifier: I2o9VxVKBuyRVN9yL/bJiufsk3+UA5ZkUmPwG35Jscw=
Subject key identifier: AE:24:AA:D6:CE:35:28:3B:3F:A7:AA:59:1F:7D:D1:D1:33:DC:5C:29
Certificate issuer: /CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
Certificate serial: 1097
Authority key identifier: ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/riSq1s41KDs_p6pZH33R0TPcXCk.roa
Signing time: Thu 11 Jan 2024 12:52:26 +0000
ROA not before: Thu 11 Jan 2024 12:52:26 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 57175
IP address blocks: 103.127.238.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Feb 2024 16:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4247 (0x1097)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED186F6314D7B5713EFFECFB93EBC3E82197E2EF
Validity
Not Before: Jan 11 12:52:26 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=AE24AAD6CE35283B3FA7AA591F7DD1D133DC5C29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:ee:f2:f8:4a:84:97:f6:27:8d:56:88:15:
55:c5:8b:b3:98:e4:5f:81:75:bf:fc:70:6a:c5:12:
fc:7d:52:f3:8e:db:60:ea:f0:ae:b4:1f:fa:c0:2c:
46:06:b5:71:d7:11:aa:5f:ea:76:0a:37:e3:ff:f4:
81:18:67:37:01:fc:0e:93:c4:05:85:6c:2a:32:68:
14:6e:21:32:d9:b4:34:73:7c:86:8c:a8:d5:8b:42:
c1:f3:08:cb:ce:99:be:bf:84:a7:98:c8:e5:3a:d4:
17:90:9b:44:3e:48:3b:8f:10:49:00:3f:a4:c7:55:
6a:29:97:b1:e0:db:39:f4:86:a8:80:90:a1:f3:93:
47:04:0d:96:39:01:e1:88:21:17:35:f3:d2:10:88:
8c:ee:72:c6:aa:1d:14:34:eb:51:ff:12:cd:f6:ac:
b9:d5:7d:1e:17:f6:c4:46:05:4d:ac:59:47:5d:8e:
16:ac:34:bf:04:f6:d8:45:04:c3:54:34:26:44:a8:
e6:bb:e0:c7:71:6c:4f:b5:e4:3e:84:39:4e:fa:66:
77:ce:fc:03:6e:fa:71:c6:ee:a2:e2:f3:00:86:2d:
ad:94:d7:da:45:1d:e0:9a:47:99:a9:e7:72:e9:6b:
56:75:9a:8e:98:52:48:a6:34:56:bb:42:3e:89:d7:
c9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:24:AA:D6:CE:35:28:3B:3F:A7:AA:59:1F:7D:D1:D1:33:DC:5C:29
X509v3 Authority Key Identifier:
keyid:ED:18:6F:63:14:D7:B5:71:3E:FF:EC:FB:93:EB:C3:E8:21:97:E2:EF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/7RhvYxTXtXE-_-z7k-vD6CGX4u8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7RhvYxTXtXE-_-z7k-vD6CGX4u8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/SHUNYING/riSq1s41KDs_p6pZH33R0TPcXCk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.238.0/23
Signature Algorithm: sha256WithRSAEncryption
65:62:74:b5:a3:f7:dc:0f:6a:b6:50:15:49:dc:a9:4d:9a:71:
8b:dc:80:3a:55:fe:00:3d:3d:38:e6:8b:0e:8a:1b:5f:9a:7d:
af:4f:33:f9:2d:46:67:1e:e5:bc:f9:be:39:19:ef:a2:3d:b1:
2f:9f:ed:09:30:47:78:ae:25:04:1e:e3:3b:91:a5:b9:b9:60:
30:f3:be:22:48:ca:63:01:a2:14:15:d2:94:58:ca:a2:17:f6:
f2:37:ca:8f:d4:a9:63:2c:0c:00:72:4c:ff:3e:e3:4b:21:3e:
e9:00:39:5c:4f:86:48:5c:9f:5d:47:da:2d:35:fd:13:a4:15:
bd:5d:25:d5:d1:2f:25:1f:52:bc:17:7d:d9:ab:1b:21:e1:28:
fd:98:d1:1f:42:6b:ab:8e:1c:cb:58:a8:4d:d4:c7:a0:2f:a1:
66:c0:9d:a7:79:cb:1a:a7:3e:a8:38:0d:31:ab:56:99:32:27:
ad:e4:91:06:8d:57:6a:00:db:a7:42:4b:eb:9f:a2:65:9d:4a:
c2:ce:9f:28:68:07:76:cf:bd:23:80:d3:6a:1b:af:08:6d:62:
69:9e:37:8f:6f:a2:e2:6d:e8:73:c7:c8:13:29:cc:6a:64:f8:
01:53:ae:9d:83:3a:f6:90:25:07:27:ae:3b:7f:e1:d8:3f:cb:
61:cb:2c:66
-----BEGIN CERTIFICATE-----
MIIE1jCCA76gAwIBAgICEJcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUQx
ODZGNjMxNEQ3QjU3MTNFRkZFQ0ZCOTNFQkMzRTgyMTk3RTJFRjAeFw0yNDAxMTEx
MjUyMjZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFFMjRBQUQ2Q0UzNTI4
M0IzRkE3QUE1OTFGN0REMUQxMzNEQzVDMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDB5u7y+EqEl/YnjVaIFVXFi7OY5F+Bdb/8cGrFEvx9UvOO22Dq
8K60H/rALEYGtXHXEapf6nYKN+P/9IEYZzcB/A6TxAWFbCoyaBRuITLZtDRzfIaM
qNWLQsHzCMvOmb6/hKeYyOU61BeQm0Q+SDuPEEkAP6THVWopl7Hg2zn0hqiAkKHz
k0cEDZY5AeGIIRc189IQiIzucsaqHRQ061H/Es32rLnVfR4X9sRGBU2sWUddjhas
NL8E9thFBMNUNCZEqOa74MdxbE+15D6EOU76ZnfO/ANu+nHG7qLi8wCGLa2U19pF
HeCaR5mp53Lpa1Z1mo6YUkimNFa7Qj6J18mNAgMBAAGjggHyMIIB7jAdBgNVHQ4E
FgQUriSq1s41KDs/p6pZH33R0TPcXCkwHwYDVR0jBBgwFoAU7RhvYxTXtXE+/+z7
k+vD6CGX4u8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBeBgNVHR8EVzBVMFOg
UaBPhk1yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvU0hVTllJ
TkcvN1Jodll4VFh0WEUtXy16N2stdkQ2Q0dYNHU4LmNybDBgBggrBgEFBQcBAQRU
MFIwUAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdO
SUNDQS83Umh2WXhUWHRYRS1fLXo3ay12RDZDR1g0dTguY2VyMA4GA1UdDwEB/wQE
AwIHgDCBngYIKwYBBQUHAQsEgZEwgY4wWQYIKwYBBQUHMAuGTXJzeW5jOi8vcnBr
aWNhLnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9TSFVOWUlORy9yaVNxMXM0MUtEc19w
NnBaSDMzUjBUUGNYQ2sucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHdu
aWMudHcvcnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQBZ3/uMA0GCSqGSIb3DQEBCwUAA4IBAQBlYnS1o/fcD2q2UBVJ3KlNmnGL3IA6
Vf4APT045osOihtfmn2vTzP5LUZnHuW8+b45Ge+iPbEvn+0JMEd4riUEHuM7kaW5
uWAw874iSMpjAaIUFdKUWMqiF/byN8qP1KljLAwAckz/PuNLIT7pADlcT4ZIXJ9d
R9otNf0TpBW9XSXV0S8lH1K8F33Zqxsh4Sj9mNEfQmurjhzLWKhN1MegL6FmwJ2n
ecsapz6oOA0xq1aZMiet5JEGjVdqANunQkvrn6JlnUrCzp8oaAd2z70jgNNqG68I
bWJpnjePb6Libehzx8gTKcxqZPgBU66dgzr2kCUHJ647f+HYP8thyyxm
Generated at Mon Feb 19 20:53:09 2024 by rpki-client on console-ams.rpki-client.org