Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/FVM5TPUQDCIBZLOTwbaC1gtXBDo.roa
File: FVM5TPUQDCIBZLOTwbaC1gtXBDo.roa (raw, json)
Hash identifier: y59ptARD4yyukvW6C282WbfgQM/ZIc5HhrYofNDZy20=
Subject key identifier: 15:53:39:4C:F5:10:0C:22:01:64:B3:93:C1:B6:82:D6:0B:57:04:3A
Certificate issuer: /CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Certificate serial: 0B37
Authority key identifier: FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/FVM5TPUQDCIBZLOTwbaC1gtXBDo.roa
Signing time: Thu 15 Sep 2022 02:50:29 +0000
ROA not before: Thu 15 Sep 2022 02:50:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18424
IP address blocks: 121.50.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2871 (0xb37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF7ECDB6202FFC2C34DF7BCD71A1C08885382FB7
Validity
Not Before: Sep 15 02:50:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1553394CF5100C220164B393C1B682D60B57043A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fb:2d:b6:41:9a:94:e3:91:3f:77:83:3c:81:
94:cd:96:1e:e9:a1:b0:37:ae:38:07:38:f6:60:da:
ff:0e:18:cd:46:54:c7:bc:f0:cc:fb:c8:9c:df:90:
44:07:99:8a:c2:48:1d:81:62:73:99:8e:6a:f0:47:
c1:af:4a:07:dc:64:d3:18:1c:90:ef:fe:1e:f3:38:
b3:3e:fb:6c:d0:9a:61:06:e9:c5:36:10:64:38:cf:
3a:d6:7f:4c:a3:87:af:af:2f:8f:89:33:2e:91:ee:
64:00:92:ad:a9:2e:8e:3e:7d:24:64:99:8b:63:fa:
8f:25:44:c2:86:43:82:88:c0:84:26:f7:c3:36:2d:
fc:8c:e3:a6:b6:d7:62:a6:9b:fb:3a:1d:6b:4f:f1:
94:15:b2:63:ff:cf:31:54:ef:05:61:68:d8:17:fe:
82:9b:d2:52:7c:cb:fc:e0:50:49:54:9d:76:fa:b8:
94:a3:41:0b:a6:b6:b1:6c:07:73:fc:1e:26:bb:60:
b7:97:cc:61:bb:f9:07:69:2f:95:eb:8b:67:4d:b9:
1a:52:a7:45:61:e2:ee:26:7f:ab:5f:5a:41:62:9d:
bf:79:9e:20:2c:eb:fc:3b:18:21:b4:05:6b:9b:b1:
75:4c:b2:c0:3b:fb:c0:f0:57:fd:8c:09:72:bd:66:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:53:39:4C:F5:10:0C:22:01:64:B3:93:C1:B6:82:D6:0B:57:04:3A
X509v3 Authority Key Identifier:
keyid:FF:7E:CD:B6:20:2F:FC:2C:34:DF:7B:CD:71:A1:C0:88:85:38:2F:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/_37NtiAv_Cw033vNcaHAiIU4L7c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/_37NtiAv_Cw033vNcaHAiIU4L7c.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/WEBTAIWAN/FVM5TPUQDCIBZLOTwbaC1gtXBDo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.50.147.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a1:3e:8c:98:61:9d:1b:71:ab:e0:39:d7:c1:08:29:20:81:
12:b5:98:09:8c:54:52:0b:16:44:42:2e:92:c8:dd:e0:54:b6:
d2:51:10:c4:e1:ee:1c:50:fd:47:6f:1c:f3:1d:10:78:b1:73:
d1:ed:6f:d5:05:48:08:5f:92:cb:83:18:65:96:56:58:ca:5f:
11:9c:76:35:4c:c5:2d:9f:80:70:8b:7b:f1:d9:1e:6e:1b:4b:
a0:19:64:0d:85:5f:52:83:30:54:b8:20:12:36:5a:00:6e:29:
c8:19:b5:33:e6:1c:2f:f6:f8:e6:5d:18:2f:a0:c5:d1:22:7a:
5c:83:65:29:ea:ca:67:7b:15:54:e4:e8:3d:27:78:0b:07:57:
e8:a0:92:4c:a6:82:b8:44:57:19:d5:cc:b8:1c:32:e9:1c:96:
b9:11:2c:40:3e:62:cb:8c:d6:17:6a:38:dd:58:d1:d6:ce:77:
83:ba:05:90:86:6e:88:e2:2f:1f:b4:41:78:06:15:21:6b:9b:
ba:d8:7c:c6:52:b4:ec:18:69:d7:d6:49:78:5a:a1:1b:1a:09:
6a:5b:9f:bc:50:fc:4c:89:db:8c:de:87:55:ea:4b:f2:5a:3b:
a8:8c:6e:7a:90:4f:40:c4:2d:14:7f:3a:23:86:3b:ce:26:a3:
33:a9:cf:e5
-----BEGIN CERTIFICATE-----
MIIE2DCCA8CgAwIBAgICCzcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkY3
RUNEQjYyMDJGRkMyQzM0REY3QkNENzFBMUMwODg4NTM4MkZCNzAeFw0yMjA5MTUw
MjUwMjlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDE1NTMzOTRDRjUxMDBD
MjIwMTY0QjM5M0MxQjY4MkQ2MEI1NzA0M0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDS+y22QZqU45E/d4M8gZTNlh7pobA3rjgHOPZg2v8OGM1GVMe8
8Mz7yJzfkEQHmYrCSB2BYnOZjmrwR8GvSgfcZNMYHJDv/h7zOLM++2zQmmEG6cU2
EGQ4zzrWf0yjh6+vL4+JMy6R7mQAkq2pLo4+fSRkmYtj+o8lRMKGQ4KIwIQm98M2
LfyM46a212Kmm/s6HWtP8ZQVsmP/zzFU7wVhaNgX/oKb0lJ8y/zgUElUnXb6uJSj
QQumtrFsB3P8Hia7YLeXzGG7+QdpL5Xri2dNuRpSp0Vh4u4mf6tfWkFinb95niAs
6/w7GCG0BWubsXVMssA7+8DwV/2MCXK9ZjVnAgMBAAGjggH0MIIB8DAdBgNVHQ4E
FgQUFVM5TPUQDCIBZLOTwbaC1gtXBDowHwYDVR0jBBgwFoAU/37NtiAv/Cw033vN
caHAiIU4L7cwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBfBgNVHR8EWDBWMFSg
UqBQhk5yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJ
V0FOL18zN050aUF2X0N3MDMzdk5jYUhBaUlVNEw3Yy5jcmwwYAYIKwYBBQUHAQEE
VDBSMFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RX
TklDQ0EvXzM3TnRpQXZfQ3cwMzN2TmNhSEFpSVU0TDdjLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ8GCCsGAQUFBwELBIGSMIGPMFoGCCsGAQUFBzALhk5yc3luYzovL3Jw
a2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvV0VCVEFJV0FOL0ZWTTVUUFVRRENJ
QlpMT1R3YmFDMWd0WEJEby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50
d25pYy50dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAB5MpMwDQYJKoZIhvcNAQELBQADggEBAG+hPoyYYZ0bcavgOdfBCCkggRK1
mAmMVFILFkRCLpLI3eBUttJREMTh7hxQ/UdvHPMdEHixc9Htb9UFSAhfksuDGGWW
VljKXxGcdjVMxS2fgHCLe/HZHm4bS6AZZA2FX1KDMFS4IBI2WgBuKcgZtTPmHC/2
+OZdGC+gxdEielyDZSnqymd7FVTk6D0neAsHV+igkkymgrhEVxnVzLgcMukclrkR
LEA+YsuM1hdqON1Y0dbOd4O6BZCGbojiLx+0QXgGFSFrm7rYfMZStOwYadfWSXha
oRsaCWpbn7xQ/EyJ24zeh1XqS/JaO6iMbnqQT0DELRR/OiOGO84mozOpz+U=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:42 2023 by rpki-client on console-ams.rpki-client.org