Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNIC/OKtBWAvdx9lm-LhOl4z0qvJez5o.roa
File: OKtBWAvdx9lm-LhOl4z0qvJez5o.roa (raw, json)
Hash identifier: InOkW3zpZ91Ivnu5oRnjUAJ1GMTNjWYF7cvepEt5cbU=
Subject key identifier: 38:AB:41:58:0B:DD:C7:D9:66:F8:B8:4E:97:8C:F4:AA:F2:5E:CF:9A
Certificate issuer: /CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Certificate serial: 104C
Authority key identifier: DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/OKtBWAvdx9lm-LhOl4z0qvJez5o.roa
Signing time: Thu 15 Sep 2022 02:37:10 +0000
ROA not before: Thu 15 Sep 2022 02:37:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131621
IP address blocks: 101.101.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4172 (0x104c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA8C454815C3017456EA3B4A7D00213BB85C965
Validity
Not Before: Sep 15 02:37:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=38AB41580BDDC7D966F8B84E978CF4AAF25ECF9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:53:5c:ea:09:67:a5:6b:ca:cf:ac:a8:ea:
00:44:00:08:ea:aa:f1:18:88:ef:5d:ee:1f:a8:4e:
b6:39:e6:b0:17:b5:08:17:82:fb:65:b2:35:d9:0a:
73:0d:7e:5d:51:db:a6:c9:e0:f6:dd:0d:3c:21:b5:
38:cd:b8:20:ef:6f:6e:07:5c:e4:0a:5d:c7:3d:32:
62:96:86:df:b0:4b:65:57:2c:36:0d:e0:d9:06:1d:
ec:e5:4c:8f:2b:71:c2:05:72:bb:12:46:7b:0b:c2:
55:5a:d6:10:d0:e2:39:e9:c4:c9:67:20:86:ea:fd:
c3:51:63:1b:89:d9:e7:90:d4:9a:4c:09:92:60:56:
d0:32:23:5c:21:4d:f9:4e:00:af:82:51:e7:05:6f:
a0:4c:bc:20:06:37:92:6f:67:7e:17:dc:19:fd:45:
17:e7:ac:52:97:bc:86:d9:74:c3:c5:8b:54:52:7f:
a4:65:8a:e3:c9:e5:64:e3:cb:de:48:48:9f:ea:8b:
d3:74:bb:e0:e4:1e:ba:5e:1a:fd:0e:14:01:3c:88:
19:04:82:69:e9:06:bb:f7:3a:dd:97:2f:aa:b8:af:
93:f0:6d:17:8b:75:81:65:3b:d7:10:15:63:b9:95:
2a:99:dd:88:c4:1f:e9:ac:5f:3e:e1:4a:54:6b:68:
0f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AB:41:58:0B:DD:C7:D9:66:F8:B8:4E:97:8C:F4:AA:F2:5E:CF:9A
X509v3 Authority Key Identifier:
keyid:DF:A8:C4:54:81:5C:30:17:45:6E:A3:B4:A7:D0:02:13:BB:85:C9:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/36jEVIFcMBdFbqO0p9ACE7uFyWU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/36jEVIFcMBdFbqO0p9ACE7uFyWU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNIC/OKtBWAvdx9lm-LhOl4z0qvJez5o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
101.101.101.0/24
Signature Algorithm: sha256WithRSAEncryption
17:75:75:6f:11:cc:71:7c:c7:f0:b7:5b:e6:23:2d:87:8c:fc:
71:33:ce:91:3c:11:73:05:43:27:81:bc:ef:77:92:93:ed:cd:
af:32:2e:e4:c9:30:0b:be:14:f8:0c:94:31:11:7a:38:80:66:
95:e3:04:f5:9e:a7:ff:a0:1c:06:34:eb:20:85:3b:14:f3:50:
38:04:02:18:a9:f7:ce:27:f7:4c:26:36:19:b0:ec:fd:e2:50:
bb:1f:97:f2:94:68:0e:1a:3e:f3:00:87:69:f9:5a:59:07:bf:
48:4e:63:b2:0c:19:05:84:7a:34:de:78:49:82:20:c8:e6:ed:
86:03:12:9d:a9:db:8b:af:26:8c:7c:56:57:77:ed:ca:14:d0:
eb:d5:19:24:18:49:fb:4a:f3:10:11:92:61:0c:c4:b1:91:74:
a3:9b:98:98:86:10:07:f6:95:fe:65:0f:0e:78:1d:d2:d9:9e:
a1:2b:3f:e2:00:a0:68:8a:02:59:b8:31:80:16:10:25:00:a5:
b0:6b:68:80:99:57:8c:da:92:ba:05:66:ce:0a:04:36:37:f6:
e5:75:80:e7:5a:32:e7:ba:3d:98:53:5b:d3:c4:b0:00:4f:71:
b1:31:e5:20:8d:12:e1:b1:78:c2:4a:8e:06:77:ec:ca:33:6e:
ad:14:42:b3
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICEEwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREZB
OEM0NTQ4MTVDMzAxNzQ1NkVBM0I0QTdEMDAyMTNCQjg1Qzk2NTAeFw0yMjA5MTUw
MjM3MTBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDM4QUI0MTU4MEJEREM3
RDk2NkY4Qjg0RTk3OENGNEFBRjI1RUNGOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJ/lNc6glnpWvKz6yo6gBEAAjqqvEYiO9d7h+oTrY55rAXtQgX
gvtlsjXZCnMNfl1R26bJ4PbdDTwhtTjNuCDvb24HXOQKXcc9MmKWht+wS2VXLDYN
4NkGHezlTI8rccIFcrsSRnsLwlVa1hDQ4jnpxMlnIIbq/cNRYxuJ2eeQ1JpMCZJg
VtAyI1whTflOAK+CUecFb6BMvCAGN5JvZ34X3Bn9RRfnrFKXvIbZdMPFi1RSf6Rl
iuPJ5WTjy95ISJ/qi9N0u+DkHrpeGv0OFAE8iBkEgmnpBrv3Ot2XL6q4r5PwbReL
dYFlO9cQFWO5lSqZ3YjEH+msXz7hSlRraA+vAgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUOKtBWAvdx9lm+LhOl4z0qvJez5owHwYDVR0jBBgwFoAU36jEVIFcMBdFbqO0
p9ACE7uFyWUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOSUMv
MzZqRVZJRmNNQmRGYnFPMHA5QUNFN3VGeVdVLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS8zNmpFVklGY01CZEZicU8wcDlBQ0U3dUZ5V1UuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05JQy9PS3RCV0F2ZHg5bG0tTGhPbDR6
MHF2SmV6NW8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZWVl
MA0GCSqGSIb3DQEBCwUAA4IBAQAXdXVvEcxxfMfwt1vmIy2HjPxxM86RPBFzBUMn
gbzvd5KT7c2vMi7kyTALvhT4DJQxEXo4gGaV4wT1nqf/oBwGNOsghTsU81A4BAIY
qffOJ/dMJjYZsOz94lC7H5fylGgOGj7zAIdp+VpZB79ITmOyDBkFhHo03nhJgiDI
5u2GAxKdqduLryaMfFZXd+3KFNDr1RkkGEn7SvMQEZJhDMSxkXSjm5iYhhAH9pX+
ZQ8OeB3S2Z6hKz/iAKBoigJZuDGAFhAlAKWwa2iAmVeM2pK6BWbOCgQ2N/bldYDn
WjLnuj2YU1vTxLAAT3GxMeUgjRLhsXjCSo4Gd+zKM26tFEKz
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:32 2023 by rpki-client on console-ams.rpki-client.org