Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TCB/tC1x02S5yvz3dMqJSdrXCtleVRs.roa
File: tC1x02S5yvz3dMqJSdrXCtleVRs.roa (raw, json)
Hash identifier: JeHYIesAhcxHT9A7xpELlXa3JC3xo36E1R26K31qYpI=
Subject key identifier: B4:2D:71:D3:64:B9:CA:FC:F7:74:CA:89:49:DA:D7:0A:D9:5E:55:1B
Certificate issuer: /CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28
Certificate serial: 0A61
Authority key identifier: BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/tC1x02S5yvz3dMqJSdrXCtleVRs.roa
Signing time: Thu 15 Sep 2022 02:38:34 +0000
ROA not before: Thu 15 Sep 2022 02:38:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131590
IP address blocks: 103.227.224.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2657 (0xa61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF82A3AC11455030743C0A743711F8A0D8EBAE28
Validity
Not Before: Sep 15 02:38:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B42D71D364B9CAFCF774CA8949DAD70AD95E551B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9e:35:15:68:70:64:da:39:d8:ca:fa:a3:11:
86:a4:96:f7:c0:22:89:d0:53:56:4f:4a:84:04:b8:
09:82:f1:e4:9f:a7:e0:5f:03:b9:03:fd:6a:58:97:
e2:1c:c8:fb:49:af:52:49:30:e7:0d:28:dc:5d:8e:
ea:ff:4f:5f:ae:d4:31:0b:d0:69:05:f6:be:92:d6:
a8:4d:ad:84:0a:0b:ed:e7:89:20:d4:86:f2:2b:bc:
04:4b:0f:61:6c:2a:db:35:df:3e:8f:d4:98:03:be:
cd:2a:1b:d2:4b:d0:3a:fe:ed:0c:db:a4:d6:24:72:
e4:78:b5:54:9c:b9:cb:db:9f:f4:ed:7c:e1:8a:55:
5e:13:80:4b:48:9d:ab:cd:41:b8:0b:4d:5c:4d:20:
87:41:93:fa:8d:2a:16:20:de:1b:aa:8f:2e:fb:ba:
b6:b5:0a:35:60:83:f9:5c:27:0a:5e:3b:cb:aa:f0:
16:3e:d8:f1:79:a9:56:b0:23:84:70:3d:8e:6f:53:
5e:04:68:8b:1c:76:ab:3d:64:5e:ea:a7:5f:08:a1:
6c:04:08:62:db:bc:63:2b:78:bd:d0:06:50:e2:8c:
1b:15:4f:04:20:42:bc:8e:78:47:35:66:d2:cc:2d:
46:90:4c:0f:d0:fb:d6:02:9f:d1:53:56:a7:f2:65:
6d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2D:71:D3:64:B9:CA:FC:F7:74:CA:89:49:DA:D7:0A:D9:5E:55:1B
X509v3 Authority Key Identifier:
keyid:BF:82:A3:AC:11:45:50:30:74:3C:0A:74:37:11:F8:A0:D8:EB:AE:28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/v4KjrBFFUDB0PAp0NxH4oNjrrig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/v4KjrBFFUDB0PAp0NxH4oNjrrig.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TCB/tC1x02S5yvz3dMqJSdrXCtleVRs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.227.224.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:68:6c:82:93:14:c5:b2:35:da:42:75:cb:8b:ce:be:f5:fd:
8a:51:6a:da:99:bf:b6:85:38:88:09:37:3d:4a:dc:77:7d:3e:
23:4c:97:c9:72:af:a7:51:f8:c9:8f:67:fa:db:4f:f4:1a:32:
1e:49:41:2c:ea:71:e8:bf:c6:2e:66:04:d4:2f:c1:90:de:fa:
40:a9:34:6d:48:61:1a:6a:ea:51:d8:e4:0c:89:53:bf:54:9f:
ea:e4:b6:89:50:53:52:ae:18:d8:72:c5:93:f8:eb:6d:e4:b1:
59:ce:95:43:ea:df:b5:be:bd:2e:88:e4:28:57:56:10:0a:53:
06:e1:de:05:ed:95:b1:77:d7:6e:8e:6f:af:49:92:50:a4:22:
48:87:5a:dc:25:57:8b:9f:74:81:22:43:77:78:aa:62:94:23:
56:f7:64:c7:82:2e:54:60:b3:d2:56:09:63:6c:01:dc:7d:f8:
fd:10:f0:36:91:c5:0f:39:16:ae:0b:66:10:a7:5f:7f:9f:41:
d0:21:bd:06:db:a1:08:9a:22:07:68:71:24:9c:43:2f:14:dc:
7f:ca:82:71:e4:20:1f:df:c5:0f:c9:28:8c:9a:df:52:f8:7a:
97:b9:31:7c:a1:9f:25:f7:2d:f3:b0:fa:d5:b0:60:3b:bd:b3:
91:87:a0:8b
-----BEGIN CERTIFICATE-----
MIIEzDCCA7SgAwIBAgICCmEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkY4
MkEzQUMxMTQ1NTAzMDc0M0MwQTc0MzcxMUY4QTBEOEVCQUUyODAeFw0yMjA5MTUw
MjM4MzRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEI0MkQ3MUQzNjRCOUNB
RkNGNzc0Q0E4OTQ5REFENzBBRDk1RTU1MUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDInjUVaHBk2jnYyvqjEYaklvfAIonQU1ZPSoQEuAmC8eSfp+Bf
A7kD/WpYl+IcyPtJr1JJMOcNKNxdjur/T1+u1DEL0GkF9r6S1qhNrYQKC+3niSDU
hvIrvARLD2FsKts13z6P1JgDvs0qG9JL0Dr+7QzbpNYkcuR4tVScucvbn/TtfOGK
VV4TgEtInavNQbgLTVxNIIdBk/qNKhYg3huqjy77ura1CjVgg/lcJwpeO8uq8BY+
2PF5qVawI4RwPY5vU14EaIscdqs9ZF7qp18IoWwECGLbvGMreL3QBlDijBsVTwQg
QryOeEc1ZtLMLUaQTA/Q+9YCn9FTVqfyZW1XAgMBAAGjggHoMIIB5DAdBgNVHQ4E
FgQUtC1x02S5yvz3dMqJSdrXCtleVRswHwYDVR0jBBgwFoAUv4KjrBFFUDB0PAp0
NxH4oNjrrigwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBZBgNVHR8EUjBQME6g
TKBKhkhyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVENCL3Y0
S2pyQkZGVURCMFBBcDBOeEg0b05qcnJpZy5jcmwwYAYIKwYBBQUHAQEEVDBSMFAG
CCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0Ev
djRLanJCRkZVREIwUEFwME54SDRvTmpycmlnLmNlcjAOBgNVHQ8BAf8EBAMCB4Aw
gZkGCCsGAQUFBwELBIGMMIGJMFQGCCsGAQUFBzALhkhyc3luYzovL3Jwa2ljYS50
d25pYy50dy9ycGtpL1RXTklDQ0EvVENCL3RDMXgwMlM1eXZ6M2RNcUpTZHJYQ3Rs
ZVZScy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50dy9ycmRw
L25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn4+AwDQYJ
KoZIhvcNAQELBQADggEBALpobIKTFMWyNdpCdcuLzr71/YpRatqZv7aFOIgJNz1K
3Hd9PiNMl8lyr6dR+MmPZ/rbT/QaMh5JQSzqcei/xi5mBNQvwZDe+kCpNG1IYRpq
6lHY5AyJU79Un+rktolQU1KuGNhyxZP4623ksVnOlUPq37W+vS6I5ChXVhAKUwbh
3gXtlbF3126Ob69JklCkIkiHWtwlV4ufdIEiQ3d4qmKUI1b3ZMeCLlRgs9JWCWNs
Adx9+P0Q8DaRxQ85Fq4LZhCnX3+fQdAhvQbboQiaIgdocSScQy8U3H/KgnHkIB/f
xQ/JKIya31L4epe5MXyhnyX3LfOw+tWwYDu9s5GHoIs=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:46:58 2023 by rpki-client on console-fra.rpki-client.org