Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TWNTT/SxRkk7TjOoGUBrIWf0T3QIe7mSM.roa
File: SxRkk7TjOoGUBrIWf0T3QIe7mSM.roa (raw, json)
Hash identifier: 5NoUI5S471cAq0WO9IPYmsg02hvqgGsiKy2VnSIyGfs=
Subject key identifier: 4B:14:64:93:B4:E3:3A:81:94:06:B2:16:7F:44:F7:40:87:BB:99:23
Certificate issuer: /CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Certificate serial: 0A6D
Authority key identifier: 9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/SxRkk7TjOoGUBrIWf0T3QIe7mSM.roa
Signing time: Thu 15 Sep 2022 02:50:47 +0000
ROA not before: Thu 15 Sep 2022 02:50:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 132819
IP address blocks: 61.58.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2669 (0xa6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E2697FA70252F83F41D121EC0B5CB458B6FF214
Validity
Not Before: Sep 15 02:50:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4B146493B4E33A819406B2167F44F74087BB9923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:ec:3e:b5:57:e7:00:e0:0a:3e:c4:1a:4a:
27:ee:67:0c:90:a1:04:39:48:94:25:cf:46:f9:c3:
32:a8:d0:81:34:6c:ab:82:c2:df:a4:4b:29:b1:b9:
52:2c:59:bb:6a:0d:0b:0e:a6:38:3d:46:ba:a0:a0:
32:50:30:a8:0f:4c:34:2e:25:ac:1a:1b:37:1b:de:
a9:83:2a:1c:09:6e:92:d9:a1:a5:f1:ad:f2:1b:d5:
66:76:20:de:23:68:32:ae:c5:f5:63:c7:99:a1:57:
cb:f0:d3:83:bc:92:5b:12:cd:e4:16:87:de:f9:bc:
78:cc:44:90:7c:f9:1d:e7:67:c0:f1:ea:cf:f3:b8:
67:bd:b7:c3:b3:2e:ea:ae:56:cb:a9:31:ca:46:26:
c9:83:3b:a9:0d:f3:26:ed:18:ad:11:47:6a:a6:e1:
d3:5a:58:03:d1:39:00:2a:a4:0a:96:71:e0:0c:5a:
07:c9:22:31:8a:1c:34:4e:e4:44:33:47:40:99:9a:
c3:29:9d:4b:f7:ff:e6:e8:9b:a8:9f:78:83:5d:f0:
b0:77:4d:92:0e:87:57:ce:fa:b4:7c:f8:ff:86:34:
07:43:da:22:c4:ca:7f:8d:c4:b7:0d:4b:60:aa:4d:
02:13:45:a7:35:38:ab:62:52:fa:22:03:82:9d:d0:
90:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:14:64:93:B4:E3:3A:81:94:06:B2:16:7F:44:F7:40:87:BB:99:23
X509v3 Authority Key Identifier:
keyid:9E:26:97:FA:70:25:2F:83:F4:1D:12:1E:C0:B5:CB:45:8B:6F:F2:14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/niaX-nAlL4P0HRIewLXLRYtv8hQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/niaX-nAlL4P0HRIewLXLRYtv8hQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TWNTT/SxRkk7TjOoGUBrIWf0T3QIe7mSM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.58.38.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:41:56:5c:7e:c1:9c:c2:e0:d4:09:82:6e:4a:c7:ab:a5:42:
9c:3c:81:fe:94:48:d6:5c:53:fc:27:f5:28:b4:48:58:86:4e:
82:4c:6e:60:40:06:f2:9d:67:aa:45:1d:6f:b6:f5:97:c2:7f:
65:da:d8:a6:2e:58:ac:fb:29:b5:cd:c8:8b:35:7e:6b:de:fd:
3f:11:18:c6:ed:7b:90:c5:6a:bf:07:37:41:ee:7a:6d:04:e9:
e9:0e:ba:5e:ee:3b:0f:fd:23:5e:75:3f:9e:ca:c7:ed:e5:61:
40:b8:7b:b6:32:9c:1f:fc:93:69:e4:df:87:9d:9f:1e:39:e0:
19:01:31:e4:fe:cc:a2:84:c3:5c:b2:ee:db:78:ac:95:6b:f4:
c0:af:71:1e:c6:a0:22:16:c0:8d:08:4c:cd:85:84:f2:b8:15:
fd:9e:7a:fc:61:f3:81:36:5c:db:ba:ec:3d:10:4b:00:7d:ca:
af:e7:59:79:a1:5f:98:cf:e7:f8:ca:d9:de:19:10:3e:6a:08:
81:7d:ca:52:b1:98:32:20:3f:43:61:3b:dc:c5:27:47:03:a3:
00:0a:4d:09:f3:19:2a:31:cf:67:ca:ec:52:ec:fa:55:ae:7c:
26:6d:7b:07:10:b2:1b:80:64:8a:5d:6a:fd:66:fc:bd:38:d4:
81:f2:b1:62
-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgICCm0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUUy
Njk3RkE3MDI1MkY4M0Y0MUQxMjFFQzBCNUNCNDU4QjZGRjIxNDAeFw0yMjA5MTUw
MjUwNDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDRCMTQ2NDkzQjRFMzNB
ODE5NDA2QjIxNjdGNDRGNzQwODdCQjk5MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxc+w+tVfnAOAKPsQaSifuZwyQoQQ5SJQlz0b5wzKo0IE0bKuC
wt+kSymxuVIsWbtqDQsOpjg9RrqgoDJQMKgPTDQuJawaGzcb3qmDKhwJbpLZoaXx
rfIb1WZ2IN4jaDKuxfVjx5mhV8vw04O8klsSzeQWh975vHjMRJB8+R3nZ8Dx6s/z
uGe9t8OzLuquVsupMcpGJsmDO6kN8ybtGK0RR2qm4dNaWAPROQAqpAqWceAMWgfJ
IjGKHDRO5EQzR0CZmsMpnUv3/+bom6ifeINd8LB3TZIOh1fO+rR8+P+GNAdD2iLE
yn+NxLcNS2CqTQITRac1OKtiUvoiA4Kd0JD7AgMBAAGjggHsMIIB6DAdBgNVHQ4E
FgQUSxRkk7TjOoGUBrIWf0T3QIe7mSMwHwYDVR0jBBgwFoAUniaX+nAlL4P0HRIe
wLXLRYtv8hQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFdOVFQv
bmlhWC1uQWxMNFAwSFJJZXdMWExSWXR2OGhRLmNybDBgBggrBgEFBQcBAQRUMFIw
UAYIKwYBBQUHMAKGRHJzeW5jOi8vcnBraWNhLnR3bmljLnR3L3Jwa2kvVFdOSUND
QS9uaWFYLW5BbEw0UDBIUklld0xYTFJZdHY4aFEuY2VyMA4GA1UdDwEB/wQEAwIH
gDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBraWNh
LnR3bmljLnR3L3Jwa2kvVFdOSUNDQS9UV05UVC9TeFJrazdUak9vR1VCcklXZjBU
M1FJZTdtU00ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3JyZHAudHduaWMudHcv
cnJkcC9ub3RpZnkueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPTom
MA0GCSqGSIb3DQEBCwUAA4IBAQCbQVZcfsGcwuDUCYJuSserpUKcPIH+lEjWXFP8
J/UotEhYhk6CTG5gQAbynWeqRR1vtvWXwn9l2timLlis+ym1zciLNX5r3v0/ERjG
7XuQxWq/BzdB7nptBOnpDrpe7jsP/SNedT+eysft5WFAuHu2Mpwf/JNp5N+HnZ8e
OeAZATHk/syihMNcsu7beKyVa/TAr3EexqAiFsCNCEzNhYTyuBX9nnr8YfOBNlzb
uuw9EEsAfcqv51l5oV+Yz+f4ytneGRA+agiBfcpSsZgyID9DYTvcxSdHA6MACk0J
8xkqMc9nyuxS7PpVrnwmbXsHELIbgGSKXWr9Zvy9ONSB8rFi
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:37 2023 by rpki-client on console-ams.rpki-client.org