Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/nXSsaM57cnaXcnZYSjgRVHt4SvQ.roa
File: nXSsaM57cnaXcnZYSjgRVHt4SvQ.roa (raw, json)
Hash identifier: pL2VG5b44eqC6gkPMEW6zMeSsi/lEsjtvaNbemEHfMI=
Subject key identifier: 9D:74:AC:68:CE:7B:72:76:97:72:76:58:4A:38:11:54:7B:78:4A:F4
Certificate issuer: /CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Certificate serial: A5
Authority key identifier: EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/nXSsaM57cnaXcnZYSjgRVHt4SvQ.roa
Signing time: Wed 29 May 2024 08:54:26 +0000
ROA not before: Wed 29 May 2024 08:54:26 +0000
ROA not after: Fri 04 Oct 2024 07:31:42 +0000
asID: 139076
IP address blocks: 202.160.64.0/19 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 08:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ECD2FDC38522A74A422DE7BD1C026D55E08D9E9A
Validity
Not Before: May 29 08:54:26 2024 GMT
Not After : Oct 4 07:31:42 2024 GMT
Subject: CN=9D74AC68CE7B7276977276584A3811547B784AF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:63:87:1c:35:ec:1a:ae:68:9c:23:f4:6f:a9:
28:a0:86:fd:f0:0c:97:7f:f3:4a:37:72:7e:50:2b:
eb:6b:e0:65:1c:d2:0c:2a:60:3c:1b:0c:1d:9d:0b:
28:f9:e0:1d:89:89:94:ab:64:10:f8:c0:ba:09:f4:
c8:02:63:db:1c:8c:e7:06:f9:15:03:16:5a:63:92:
31:c7:c4:9b:06:7a:fe:96:b7:e9:97:aa:64:03:49:
6c:90:e3:b0:c5:7b:f5:1d:01:3e:7d:69:a6:c8:13:
3c:48:78:38:ca:12:f5:c5:c2:c5:ec:f9:28:29:f7:
50:e0:61:0f:05:0a:4b:d3:b1:e6:4c:0a:3c:2a:54:
54:ad:24:2c:1a:08:33:d7:42:68:c0:eb:c0:85:3e:
83:a3:44:af:cc:0a:54:d6:4d:1a:b0:d6:8d:5b:26:
c2:e3:3f:98:e8:bb:b8:a8:ef:07:6c:53:6a:8a:2f:
ed:92:79:98:f2:a6:2a:a3:20:b0:7f:0d:f0:db:75:
c9:97:5f:67:81:9b:88:38:b7:b5:6f:c6:60:1f:ec:
b3:52:b9:24:23:18:c7:a9:3e:1d:d3:ae:40:cb:9e:
aa:ff:a6:f3:b0:b7:8f:29:82:f8:9f:88:2a:b7:29:
30:4d:da:12:95:bc:39:42:83:11:37:9c:53:4f:56:
20:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:74:AC:68:CE:7B:72:76:97:72:76:58:4A:38:11:54:7B:78:4A:F4
X509v3 Authority Key Identifier:
keyid:EC:D2:FD:C3:85:22:A7:4A:42:2D:E7:BD:1C:02:6D:55:E0:8D:9E:9A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/7NL9w4Uip0pCLee9HAJtVeCNnpo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/7NL9w4Uip0pCLee9HAJtVeCNnpo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TPSILKERA/nXSsaM57cnaXcnZYSjgRVHt4SvQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
202.160.64.0/19
Signature Algorithm: sha256WithRSAEncryption
8c:01:03:80:29:b0:5e:96:a1:56:1b:45:4b:a5:5b:92:e2:12:
db:c2:bc:44:fb:64:19:f5:c6:c7:3c:58:1d:47:48:db:1d:8e:
65:e0:2d:5f:aa:d1:a3:8c:32:7d:fc:81:4a:4e:85:ea:53:d1:
d6:51:96:50:ee:e9:a0:6a:3b:7e:de:d4:47:66:d0:55:2c:38:
01:ec:3f:5a:cf:1f:84:aa:0d:24:12:c7:d2:0c:36:87:98:ea:
6f:df:81:b1:7f:63:0a:5c:44:58:9a:be:45:3f:b0:fd:69:55:
de:44:d5:8b:e6:aa:c5:6d:2c:74:18:60:39:d3:74:ad:76:b8:
ce:d7:70:30:0c:a3:c3:7e:33:2a:45:ac:ef:07:6e:c2:3d:8c:
a3:c2:ea:f8:26:69:9b:57:ad:71:c7:d2:c1:95:d6:cd:e8:99:
ac:f3:80:7d:14:67:4f:52:c5:c3:18:58:8a:14:25:11:0f:8e:
eb:08:ed:15:32:00:ab:8f:a8:1f:f0:c5:f1:6e:40:30:cd:38:
3f:61:d1:20:b6:bf:3e:9f:68:b3:54:9f:9d:b8:75:10:3e:8a:
8e:4f:a0:5a:3e:07:8c:e2:31:ba:2f:45:f5:42:c4:26:39:2f:
bc:60:ed:bc:74:1b:74:b2:bf:6e:59:7b:e5:2f:10:e1:ae:64:
0d:b6:c5:98
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUNE
MkZEQzM4NTIyQTc0QTQyMkRFN0JEMUMwMjZENTVFMDhEOUU5QTAeFw0yNDA1Mjkw
ODU0MjZaFw0yNDEwMDQwNzMxNDJaMDMxMTAvBgNVBAMTKDlENzRBQzY4Q0U3Qjcy
NzY5NzcyNzY1ODRBMzgxMTU0N0I3ODRBRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDY4ccNewarmicI/RvqSighv3wDJd/80o3cn5QK+tr4GUc0gwq
YDwbDB2dCyj54B2JiZSrZBD4wLoJ9MgCY9scjOcG+RUDFlpjkjHHxJsGev6Wt+mX
qmQDSWyQ47DFe/UdAT59aabIEzxIeDjKEvXFwsXs+Sgp91DgYQ8FCkvTseZMCjwq
VFStJCwaCDPXQmjA68CFPoOjRK/MClTWTRqw1o1bJsLjP5jou7io7wdsU2qKL+2S
eZjypiqjILB/DfDbdcmXX2eBm4g4t7VvxmAf7LNSuSQjGMepPh3TrkDLnqr/pvOw
t48pgvifiCq3KTBN2hKVvDlCgxE3nFNPViDzAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUnXSsaM57cnaXcnZYSjgRVHt4SvQwHwYDVR0jBBgwFoAU7NL9w4Uip0pCLee9
HAJtVeCNnpowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxL
RVJBLzdOTDl3NFVpcDBwQ0xlZTlIQUp0VmVDTm5wby5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvN05MOXc0VWlwMHBDTGVlOUhBSnRWZUNObnBvLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFBTSUxLRVJBL25YU3NhTTU3Y25h
WGNuWllTamdSVkh0NFN2US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXKoEAwDQYJKoZIhvcNAQELBQADggEBAIwBA4ApsF6WoVYbRUulW5LiEtvC
vET7ZBn1xsc8WB1HSNsdjmXgLV+q0aOMMn38gUpOhepT0dZRllDu6aBqO37e1Edm
0FUsOAHsP1rPH4SqDSQSx9IMNoeY6m/fgbF/YwpcRFiavkU/sP1pVd5E1YvmqsVt
LHQYYDnTdK12uM7XcDAMo8N+MypFrO8HbsI9jKPC6vgmaZtXrXHH0sGV1s3omazz
gH0UZ09SxcMYWIoUJREPjusI7RUyAKuPqB/wxfFuQDDNOD9h0SC2vz6faLNUn524
dRA+io5PoFo+B4ziMbovRfVCxCY5L7xg7bx0G3Syv25Ze+UvEOGuZA22xZg=
Generated at Fri Jul 5 10:24:40 2024 by rpki-client on console-fra.rpki-client.org