Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/pCr6XQv6rIWYPHxdoVGVrHtnlMo.roa
File: pCr6XQv6rIWYPHxdoVGVrHtnlMo.roa (raw, json)
Hash identifier: w8BvukmxF8BoFxBslijLcjLDEmB+h5v7fMakhloLNCA=
Subject key identifier: A4:2A:FA:5D:0B:FA:AC:85:98:3C:7C:5D:A1:51:95:AC:7B:67:94:CA
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0A7E
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/pCr6XQv6rIWYPHxdoVGVrHtnlMo.roa
Signing time: Thu 15 Sep 2022 02:50:04 +0000
ROA not before: Thu 15 Sep 2022 02:50:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131596
IP address blocks: 61.58.80.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2686 (0xa7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Sep 15 02:50:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A42AFA5D0BFAAC85983C7C5DA15195AC7B6794CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7b:7b:af:9b:47:37:4b:af:13:ea:95:ee:a1:
d5:4d:15:26:04:6f:de:dd:95:95:bb:28:d3:37:53:
c3:bf:ab:b0:00:b1:58:87:ef:9b:aa:5c:5b:95:ed:
d8:fb:90:80:d0:77:79:0f:27:45:bc:ed:52:53:75:
5f:e6:aa:4a:37:ee:87:1d:06:6c:55:c6:9f:31:ea:
56:29:3b:aa:bc:00:94:19:d2:ad:71:81:11:4c:56:
12:74:5c:e9:4b:36:1c:0c:09:5d:fe:ef:5f:32:f9:
5d:ce:e0:b9:29:89:c9:90:ef:54:ae:99:1a:09:49:
78:dd:7e:ad:51:53:30:b3:6c:90:aa:55:1f:1f:56:
b8:e6:5b:52:73:39:57:37:4c:c3:77:b9:89:91:bc:
5c:4e:19:00:75:2b:c3:a3:61:b7:19:cb:03:db:04:
bb:e6:ac:87:02:14:a9:28:0d:5d:39:d5:fe:44:6c:
15:e5:ca:25:9a:10:82:84:a6:ec:f8:61:e7:d9:35:
d2:a0:31:8d:59:2b:ae:6a:95:6e:3f:de:6d:c7:65:
69:d5:10:e0:f9:e2:ed:e8:a4:df:a9:7a:2c:f5:73:
0e:f0:37:ea:bc:5c:63:89:de:3d:3a:a7:74:d4:ca:
88:15:5b:3a:a2:ec:2f:42:67:7b:1f:2c:28:91:e9:
89:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2A:FA:5D:0B:FA:AC:85:98:3C:7C:5D:A1:51:95:AC:7B:67:94:CA
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/pCr6XQv6rIWYPHxdoVGVrHtnlMo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.80.0/20
Signature Algorithm: sha256WithRSAEncryption
c8:13:97:3c:35:85:f7:ea:95:4c:a9:4c:ba:06:b8:9e:bd:5a:
e9:75:b3:9c:89:37:8c:00:f0:21:ba:bd:44:7b:a0:84:10:19:
af:06:0b:12:9f:67:20:fa:27:69:f3:b9:5e:2d:d1:8d:4b:f9:
ce:90:ad:41:9c:b7:98:47:e3:40:92:64:0b:f7:08:7e:2f:0d:
2f:f5:f5:d9:8e:16:75:3e:c3:c7:cf:af:49:f2:68:e2:2a:cc:
a3:ad:59:7f:96:50:d4:85:15:d5:66:05:38:c8:8f:10:df:db:
cd:4f:b7:bf:25:dd:c2:7a:61:10:19:23:0a:4e:98:37:84:19:
52:73:5b:3f:80:9e:05:e1:3a:39:cb:74:fe:24:cd:c4:1b:b0:
62:97:9d:f4:bc:da:11:7e:98:80:19:e4:e2:11:73:00:dc:71:
6d:27:2e:59:b9:4f:4d:dd:92:a6:53:5e:33:55:d0:19:fd:03:
8e:0f:1e:67:f9:50:61:92:54:89:59:f1:84:32:84:e1:33:5f:
f4:e7:c0:79:4b:39:58:25:a3:4e:ce:d9:41:52:9a:0f:31:91:
41:31:28:cb:04:a1:0a:9b:6e:42:5a:78:45:c7:a4:e8:cf:e2:
10:16:87:08:6b:68:8a:7a:31:0e:21:02:b0:9b:7f:5d:47:16:
d2:31:91:14
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCn4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoODMy
NzIwRUIwQkVBMDA1QzNFREU1NzRFMzFDMEFCNzU2M0ZBMENDNzAeFw0yMjA5MTUw
MjUwMDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEE0MkFGQTVEMEJGQUFD
ODU5ODNDN0M1REExNTE5NUFDN0I2Nzk0Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCje3uvm0c3S68T6pXuodVNFSYEb97dlZW7KNM3U8O/q7AAsViH
75uqXFuV7dj7kIDQd3kPJ0W87VJTdV/mqko37ocdBmxVxp8x6lYpO6q8AJQZ0q1x
gRFMVhJ0XOlLNhwMCV3+718y+V3O4LkpicmQ71SumRoJSXjdfq1RUzCzbJCqVR8f
VrjmW1JzOVc3TMN3uYmRvFxOGQB1K8OjYbcZywPbBLvmrIcCFKkoDV051f5EbBXl
yiWaEIKEpuz4YefZNdKgMY1ZK65qlW4/3m3HZWnVEOD54u3opN+peiz1cw7wN+q8
XGOJ3j06p3TUyogVWzqi7C9CZ3sfLCiR6YkVAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUpCr6XQv6rIWYPHxdoVGVrHtnlMowHwYDVR0jBBgwFoAUgycg6wvqAFw+3ldO
McCrdWP6DMcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVEJDT00v
Z3ljZzZ3dnFBRnctM2xkT01jQ3JkV1A2RE1jLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9neWNnNnd2cUFGdy0zbGRPTWNDcmRXUDZETWMuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UQkNPTS9wQ3I2WFF2NnJJV1lQSHhkb1ZH
VnJIdG5sTW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEPTpQ
MA0GCSqGSIb3DQEBCwUAA4IBAQDIE5c8NYX36pVMqUy6BrievVrpdbOciTeMAPAh
ur1Ee6CEEBmvBgsSn2cg+idp87leLdGNS/nOkK1BnLeYR+NAkmQL9wh+Lw0v9fXZ
jhZ1PsPHz69J8mjiKsyjrVl/llDUhRXVZgU4yI8Q39vNT7e/Jd3CemEQGSMKTpg3
hBlSc1s/gJ4F4To5y3T+JM3EG7Bil530vNoRfpiAGeTiEXMA3HFtJy5ZuU9N3ZKm
U14zVdAZ/QOODx5n+VBhklSJWfGEMoThM1/058B5SzlYJaNOztlBUpoPMZFBMSjL
BKEKm25CWnhFx6Toz+IQFocIa2iKejEOIQKwm39dRxbSMZEU
Generated at Fri Sep 1 10:21:51 2023 by rpki-client on console-ams.rpki-client.org