Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0Dec6osOszACpePX3nfjC1yS3Xc.roa
File: 0Dec6osOszACpePX3nfjC1yS3Xc.roa (raw, json)
Hash identifier: iDUHHcub9R1keuyRavsz/4IMZ4u8x//Wq1rV5nbQT7E=
Subject key identifier: D0:37:9C:EA:8B:0E:B3:30:02:A5:E3:D7:DE:77:E3:0B:5C:92:DD:77
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2048
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0Dec6osOszACpePX3nfjC1yS3Xc.roa
Signing time: Fri 25 Nov 2022 04:38:32 +0000
ROA not before: Fri 25 Nov 2022 04:38:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.32.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8264 (0x2048)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D0379CEA8B0EB33002A5E3D7DE77E30B5C92DD77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:57:b5:a7:73:10:8d:90:27:39:3a:fa:1f:
2a:77:ab:5f:7e:12:be:cf:02:9f:38:21:04:91:f3:
4a:4a:78:e7:4f:61:f6:f8:4f:06:bc:e2:26:d7:c1:
18:a3:10:57:0a:ae:92:3d:b6:f0:b0:1c:e4:91:59:
dd:81:dc:94:3c:ce:65:fa:dd:16:85:21:6c:c4:1a:
8a:94:4c:47:97:25:50:73:5e:f9:7f:71:69:43:8a:
b4:d4:e9:6d:43:eb:5f:8b:c2:d7:e4:40:76:3b:71:
3a:b4:0f:77:dc:2e:f3:06:39:0b:83:83:a4:31:da:
2a:db:f7:4d:c5:da:ed:b8:51:0f:ab:3d:46:f8:7e:
66:55:81:fe:8d:39:f1:47:7e:68:9c:d5:47:b3:cc:
c2:3c:96:30:7f:e1:46:ef:cb:38:15:3e:64:6f:e7:
c8:05:8f:94:53:2a:72:37:07:d8:2c:c6:8d:d4:3e:
ac:9d:71:15:ea:6d:92:0a:4f:87:ef:d6:eb:8a:8c:
30:2a:59:01:ca:b7:a7:36:80:ee:e6:5a:50:b7:3c:
61:d8:d1:68:7c:b7:5d:5b:65:a4:8a:e8:62:df:d1:
da:f2:3b:e3:d7:de:30:e4:4e:3d:00:96:9e:0a:f3:
82:19:72:36:27:07:f4:48:36:61:fb:6b:89:e1:a5:
8f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:37:9C:EA:8B:0E:B3:30:02:A5:E3:D7:DE:77:E3:0B:5C:92:DD:77
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0Dec6osOszACpePX3nfjC1yS3Xc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.32.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:62:a0:f3:43:8b:93:11:4b:d2:4f:a2:e1:31:38:3b:73:c1:
32:50:ff:0d:30:f4:12:a1:ae:75:05:0d:ac:8f:57:ad:cd:30:
d0:5b:09:c8:16:83:41:0b:2b:2b:6e:8f:a2:dc:08:c1:d1:06:
bb:b2:b7:b9:41:14:a7:fc:35:cb:54:67:09:a2:3e:4b:19:4b:
0f:d2:49:a9:6e:0d:c6:82:83:31:34:08:13:b2:07:1e:40:88:
40:ed:a4:0e:54:43:74:43:5f:9a:44:6d:09:85:2a:71:dc:fb:
de:11:e7:ac:7b:12:f1:da:06:15:c4:b3:29:e0:a4:a4:ad:61:
f8:8a:38:61:56:21:51:6b:6c:5e:c0:39:91:b0:2d:e5:29:87:
95:64:3b:15:3e:62:09:d4:30:f7:d7:b3:ef:31:ff:ae:cf:df:
48:3d:af:37:7f:99:91:ff:3b:13:e3:b3:05:48:4f:75:d1:1e:
e6:bb:b3:39:7a:00:73:8f:06:65:39:d4:88:e8:d8:01:31:d4:
94:25:84:c0:7d:2c:fa:e8:e5:dc:5a:6f:24:60:5c:69:a7:d5:
48:a5:33:88:1e:17:76:b0:5a:d8:20:e5:28:c7:87:c1:8d:f7:
50:43:cb:d9:b3:e9:89:7e:31:92:93:2b:43:2f:c3:13:2a:6b:
4e:17:7c:8f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIEgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4MzJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEQwMzc5Q0VBOEIwRUIz
MzAwMkE1RTNEN0RFNzdFMzBCNUM5MkRENzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjjle1p3MQjZAnOTr6Hyp3q19+Er7PAp84IQSR80pKeOdPYfb4
Twa84ibXwRijEFcKrpI9tvCwHOSRWd2B3JQ8zmX63RaFIWzEGoqUTEeXJVBzXvl/
cWlDirTU6W1D61+LwtfkQHY7cTq0D3fcLvMGOQuDg6Qx2irb903F2u24UQ+rPUb4
fmZVgf6NOfFHfmic1UezzMI8ljB/4UbvyzgVPmRv58gFj5RTKnI3B9gsxo3UPqyd
cRXqbZIKT4fv1uuKjDAqWQHKt6c2gO7mWlC3PGHY0Wh8t11bZaSK6GLf0dryO+PX
3jDkTj0Alp4K84IZcjYnB/RINmH7a4nhpY91AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU0Dec6osOszACpePX3nfjC1yS3XcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzBEZWM2b3NPc3pBQ3BlUFgz
bmZqQzF5UzNYYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wyAwDQYJKoZIhvcNAQELBQADggEBADxioPNDi5MRS9JPouExODtzwTJQ/w0w9BKh
rnUFDayPV63NMNBbCcgWg0ELKytuj6LcCMHRBruyt7lBFKf8NctUZwmiPksZSw/S
SaluDcaCgzE0CBOyBx5AiEDtpA5UQ3RDX5pEbQmFKnHc+94R56x7EvHaBhXEsyng
pKStYfiKOGFWIVFrbF7AOZGwLeUph5VkOxU+YgnUMPfXs+8x/67P30g9rzd/mZH/
OxPjswVIT3XRHua7szl6AHOPBmU51Ijo2AEx1JQlhMB9LPro5dxabyRgXGmn1Uil
M4geF3awWtgg5SjHh8GN91BDy9mz6Yl+MZKTK0MvwxMqa04XfI8=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:46:59 2023 by rpki-client on console-fra.rpki-client.org