Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-7nGslLSL-CYWoaTKrWBhI5lMJM.roa
File: -7nGslLSL-CYWoaTKrWBhI5lMJM.roa (raw, json)
Hash identifier: 4UFPotee2xfKiAs5jTiuoOdVL/25XERXi0a9eR7n0r0=
Subject key identifier: FB:B9:C6:B2:52:D2:2F:E0:98:5A:86:93:2A:B5:81:84:8E:65:30:93
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-7nGslLSL-CYWoaTKrWBhI5lMJM.roa
Signing time: Thu 15 Sep 2022 02:44:44 +0000
ROA not before: Thu 15 Sep 2022 02:44:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.152.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FBB9C6B252D22FE0985A86932AB581848E653093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:03:7c:85:b1:0e:5f:27:d3:3d:f8:ab:ed:e5:
e9:77:1d:d2:b6:b8:e7:cb:b9:f9:d6:7f:cf:f6:8a:
c3:a0:03:fd:db:59:27:77:cd:e5:35:84:c4:bb:5b:
7e:11:b5:dc:e6:5d:f2:91:67:bd:0a:80:ef:eb:50:
71:7c:49:a7:cc:7b:a2:a0:e1:1c:38:3f:3c:84:fb:
08:66:78:f2:3b:ae:b5:af:9f:ea:9c:74:5d:f6:c0:
47:94:30:97:e3:a9:fe:66:8b:f3:dc:76:72:1d:53:
5b:2b:c4:f0:58:37:e4:f1:71:02:42:b3:b8:b0:01:
6d:a4:23:68:f7:ff:a6:cc:7c:b1:da:81:87:03:19:
9c:1c:b6:4c:75:c6:b2:4a:9a:f8:2b:8f:d2:2b:88:
a2:9c:03:c1:65:d9:8f:5c:dc:94:70:53:a1:9e:65:
0e:14:6e:12:47:5a:eb:78:85:ef:1a:37:a4:32:c1:
74:f7:cb:8f:01:db:1f:36:3c:08:7f:08:af:03:98:
83:72:06:98:92:84:73:4a:07:10:c9:32:21:8a:6a:
bc:b2:3b:36:19:4f:cb:bb:a4:8f:80:c7:15:42:15:
ad:8d:e3:78:77:80:f2:6f:5c:2f:3c:fb:17:8d:a8:
8f:a8:2b:a8:c4:38:6c:e4:2d:4d:9f:c5:e3:3c:90:
22:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B9:C6:B2:52:D2:2F:E0:98:5A:86:93:2A:B5:81:84:8E:65:30:93
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-7nGslLSL-CYWoaTKrWBhI5lMJM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.152.0/21
Signature Algorithm: sha256WithRSAEncryption
34:7c:d1:39:c7:c7:4b:27:b9:96:9b:d2:50:5a:d5:21:2a:11:
c4:8d:3c:a5:07:c5:14:2e:b7:e5:be:44:10:99:6c:e8:3b:10:
86:a1:50:80:8b:4d:17:d2:9c:6f:af:ca:f3:47:ad:64:18:36:
e9:a3:8f:54:4c:88:dd:f0:fb:4c:e4:b0:cb:46:45:af:1a:e2:
cf:d2:3e:69:ad:d8:86:31:d7:90:56:64:ef:d3:9b:15:b0:45:
06:f1:f0:aa:a6:8c:66:27:2b:ab:ae:42:8e:0f:07:a2:40:27:
4f:2c:5e:0f:12:3e:3a:52:63:fc:33:4d:1d:df:e4:3b:83:32:
aa:65:da:4e:5d:54:bf:15:7b:e2:d5:83:c3:d2:a0:18:da:cf:
a2:b0:53:d8:4e:ce:2b:9e:6e:75:e9:36:53:2f:00:b5:74:77:
07:cf:38:40:75:c0:ca:94:83:cf:29:8e:e2:ce:ab:19:f1:f1:
59:57:1f:10:40:78:74:2b:7c:1a:2e:be:de:05:8f:fb:0c:14:
64:ea:f8:f1:8d:75:10:70:39:c6:c8:52:56:bd:7d:f9:87:78:
17:80:f3:84:d9:28:41:4d:7e:b6:81:60:53:fa:35:da:ee:d2:
de:00:8d:82:99:e9:9c:a4:f6:1f:58:da:e6:51:de:5c:92:38:
73:35:81:3d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ0NDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEZCQjlDNkIyNTJEMjJG
RTA5ODVBODY5MzJBQjU4MTg0OEU2NTMwOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDtA3yFsQ5fJ9M9+Kvt5el3HdK2uOfLufnWf8/2isOgA/3bWSd3
zeU1hMS7W34RtdzmXfKRZ70KgO/rUHF8SafMe6Kg4Rw4PzyE+whmePI7rrWvn+qc
dF32wEeUMJfjqf5mi/PcdnIdU1srxPBYN+TxcQJCs7iwAW2kI2j3/6bMfLHagYcD
GZwctkx1xrJKmvgrj9IriKKcA8Fl2Y9c3JRwU6GeZQ4UbhJHWut4he8aN6QywXT3
y48B2x82PAh/CK8DmINyBpiShHNKBxDJMiGKaryyOzYZT8u7pI+AxxVCFa2N43h3
gPJvXC88+xeNqI+oK6jEOGzkLU2fxeM8kCI7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU+7nGslLSL+CYWoaTKrWBhI5lMJMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLy03bkdzbExTTC1DWVdvYVRL
cldCaEk1bE1KTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wZgwDQYJKoZIhvcNAQELBQADggEBADR80TnHx0snuZab0lBa1SEqEcSNPKUHxRQu
t+W+RBCZbOg7EIahUICLTRfSnG+vyvNHrWQYNumjj1RMiN3w+0zksMtGRa8a4s/S
Pmmt2IYx15BWZO/TmxWwRQbx8KqmjGYnK6uuQo4PB6JAJ08sXg8SPjpSY/wzTR3f
5DuDMqpl2k5dVL8Ve+LVg8PSoBjaz6KwU9hOziuebnXpNlMvALV0dwfPOEB1wMqU
g88pjuLOqxnx8VlXHxBAeHQrfBouvt4Fj/sMFGTq+PGNdRBwOcbIUla9ffmHeBeA
84TZKEFNfraBYFP6Ndru0t4AjYKZ6Zyk9h9Y2uZR3lySOHM1gT0=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:19 2023 by rpki-client on console-fra.rpki-client.org