Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-276HQxR1ZQ7guf9VTx6JWQflas.roa
File: -276HQxR1ZQ7guf9VTx6JWQflas.roa (raw, json)
Hash identifier: sKV7WIlMvP2ZVvaNPriP3AMsJBnef+cG8qWttbIwwnc=
Subject key identifier: FB:6E:FA:1D:0C:51:D5:94:3B:82:E7:FD:55:3C:7A:25:64:1F:95:AB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2273
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-276HQxR1ZQ7guf9VTx6JWQflas.roa
Signing time: Fri 25 Nov 2022 04:41:11 +0000
ROA not before: Fri 25 Nov 2022 04:41:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.212.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8819 (0x2273)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FB6EFA1D0C51D5943B82E7FD553C7A25641F95AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1e:ec:8b:84:42:22:e1:3b:05:e6:6d:ee:b6:
1b:e2:f8:5f:07:ca:40:1b:3d:14:00:9d:25:7f:ac:
45:f4:6f:2b:1b:62:bc:3c:6d:17:82:19:a6:ad:74:
fc:7e:f0:29:bd:0b:f2:07:a3:bd:e5:22:2d:1a:24:
87:a8:ec:12:e6:6d:ca:05:84:74:b3:e5:6b:90:d5:
c3:03:58:8c:a3:5d:4d:e7:20:d7:81:1b:87:9b:d6:
0a:5b:1d:60:ff:e5:f3:05:42:bd:72:c3:95:70:ab:
dc:24:e9:9c:56:20:98:dc:6a:e8:80:b7:c8:59:d8:
a0:03:79:e7:8e:d2:f1:31:09:db:17:e6:d3:fa:7b:
39:d0:c0:03:f2:6c:0e:41:aa:55:47:21:ac:49:4f:
44:2f:4d:81:17:51:00:99:86:88:af:cb:18:49:d8:
70:5c:8b:69:cf:77:b0:a1:68:b7:82:32:76:a6:a4:
1a:5f:7c:58:3d:fd:18:80:ad:8d:a4:2d:7c:74:84:
64:cc:82:be:cd:b6:46:4c:62:ae:96:cd:c9:71:db:
e6:65:2f:5f:70:0e:6c:8c:a9:00:ac:ac:0c:8f:dd:
3e:6e:82:ad:d4:bd:ad:73:c8:7a:20:b6:d3:82:c2:
1f:bd:03:79:d6:93:38:1f:43:07:2e:cd:0f:a6:ce:
41:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6E:FA:1D:0C:51:D5:94:3B:82:E7:FD:55:3C:7A:25:64:1F:95:AB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-276HQxR1ZQ7guf9VTx6JWQflas.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.212.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:e8:63:2e:6f:fb:85:ac:ba:c3:f6:aa:61:f5:f2:c9:8e:5c:
ca:1b:f0:91:38:a6:13:3a:26:b7:83:4b:ae:47:e1:9f:1f:62:
6a:df:66:38:6f:72:7b:c0:75:ad:10:a2:0f:a9:74:53:d3:e4:
22:be:a1:9d:c0:8f:94:06:a6:79:80:ed:bc:a6:9e:46:67:3b:
86:b5:30:3e:f1:74:ed:5f:6b:30:2d:12:8a:82:bf:e8:92:84:
15:7e:4e:cc:18:55:cb:c5:87:0b:6f:15:04:f8:53:65:38:61:
c5:f8:3d:34:8a:f3:e1:31:cf:8c:f6:d5:47:4d:29:ec:17:a6:
1b:f5:41:e6:25:fe:50:c0:55:68:ff:7a:20:70:a3:c0:05:a8:
d7:f6:1f:62:a5:4e:7d:8a:6d:4e:c5:db:89:92:b6:5d:e1:23:
bc:1e:7f:37:d1:70:94:ec:8f:e6:61:d0:d9:89:9a:f1:1b:ef:
a6:41:4e:65:76:cf:7a:d3:70:e9:7d:89:19:a0:45:1c:da:69:
06:ac:a7:c8:89:be:2f:a4:e9:f8:6b:f4:8d:35:49:56:fc:35:
2f:25:44:27:b0:63:d0:61:2f:42:cb:f0:1c:18:50:ad:64:44:
9a:c0:e1:16:3f:ac:69:9c:a2:02:5e:07:8b:2c:3e:5b:3b:6c:
a7:43:ca:1e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICInMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQxMTFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEZCNkVGQTFEMEM1MUQ1
OTQzQjgyRTdGRDU1M0M3QTI1NjQxRjk1QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQHuyLhEIi4TsF5m3uthvi+F8HykAbPRQAnSV/rEX0bysbYrw8
bReCGaatdPx+8Cm9C/IHo73lIi0aJIeo7BLmbcoFhHSz5WuQ1cMDWIyjXU3nINeB
G4eb1gpbHWD/5fMFQr1yw5Vwq9wk6ZxWIJjcauiAt8hZ2KADeeeO0vExCdsX5tP6
eznQwAPybA5BqlVHIaxJT0QvTYEXUQCZhoivyxhJ2HBci2nPd7ChaLeCMnampBpf
fFg9/RiArY2kLXx0hGTMgr7NtkZMYq6Wzclx2+ZlL19wDmyMqQCsrAyP3T5ugq3U
va1zyHogttOCwh+9A3nWkzgfQwcuzQ+mzkEXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+276HQxR1ZQ7guf9VTx6JWQflaswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy0yNzZIUXhSMVpRN2d1ZjlW
VHg2SldRZmxhcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq
AdQwDQYJKoZIhvcNAQELBQADggEBAC7oYy5v+4WsusP2qmH18smOXMob8JE4phM6
JreDS65H4Z8fYmrfZjhvcnvAda0Qog+pdFPT5CK+oZ3Aj5QGpnmA7bymnkZnO4a1
MD7xdO1fazAtEoqCv+iShBV+TswYVcvFhwtvFQT4U2U4YcX4PTSK8+Exz4z21UdN
KewXphv1QeYl/lDAVWj/eiBwo8AFqNf2H2KlTn2KbU7F24mStl3hI7wefzfRcJTs
j+Zh0NmJmvEb76ZBTmV2z3rTcOl9iRmgRRzaaQasp8iJvi+k6fhr9I01SVb8NS8l
RCewY9BhL0LL8BwYUK1kRJrA4RY/rGmcogJeB4ssPls7bKdDyh4=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:46:58 2023 by rpki-client on console-fra.rpki-client.org