Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2LWaKoTtuFNIAHsJSUBe7ltojvQ.roa
File: 2LWaKoTtuFNIAHsJSUBe7ltojvQ.roa (raw, json)
Hash identifier: xB5d8NAg6QztUC3vLoZGa1zfGyxkQ3VyEBztvnLeKKc=
Subject key identifier: D8:B5:9A:2A:84:ED:B8:53:48:00:7B:09:49:40:5E:EE:5B:68:8E:F4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2156
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2LWaKoTtuFNIAHsJSUBe7ltojvQ.roa
Signing time: Fri 25 Nov 2022 04:39:48 +0000
ROA not before: Fri 25 Nov 2022 04:39:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.230.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8534 (0x2156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D8B59A2A84EDB85348007B0949405EEE5B688EF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:65:7d:4c:4c:b4:5a:19:f0:99:a6:e4:ec:15:
17:8c:f9:41:30:d4:fe:38:96:74:f4:85:6c:be:6b:
8f:13:73:3a:64:ad:a8:3a:95:68:c0:d7:d7:2d:74:
dc:45:db:15:51:5a:b5:4f:1a:42:cc:3c:32:17:00:
63:eb:52:58:d1:74:dc:88:ba:b3:d1:7a:f9:30:a5:
d3:5b:8f:c2:1b:5a:df:b9:61:f8:c3:9c:f6:50:01:
0f:a6:a9:4c:33:38:f9:c1:cf:10:4c:03:0f:96:da:
e2:c5:1e:8a:08:0f:47:5b:cc:58:16:f2:70:76:93:
c0:08:ad:6b:2a:cd:62:1a:e3:0e:58:e6:5e:1e:0a:
5e:ae:e8:07:55:32:e7:26:3f:2e:a7:ab:d2:5c:d0:
d7:15:a4:87:32:65:ac:75:37:fc:72:82:59:94:bf:
29:6b:e4:e4:5e:a8:ae:bd:ba:76:a0:06:2e:93:1e:
e9:4b:1d:4d:f3:1c:e2:d3:21:50:56:8b:af:d0:37:
c9:3d:6c:5b:5b:f4:bc:9d:5b:85:fd:8c:97:89:dd:
a5:c1:d3:8c:d7:e8:80:d9:5e:dc:d1:a9:1f:fb:34:
2f:1f:29:26:56:07:33:b5:4d:8b:20:ed:cd:c3:64:
71:5a:b3:9d:4b:5e:f5:0c:32:6e:e2:79:f1:05:91:
79:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B5:9A:2A:84:ED:B8:53:48:00:7B:09:49:40:5E:EE:5B:68:8E:F4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2LWaKoTtuFNIAHsJSUBe7ltojvQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.230.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:ec:16:44:17:07:66:2e:6f:c2:12:52:7b:21:e0:32:89:84:
4e:52:7f:01:c4:a4:f8:9d:1d:6b:05:cd:00:36:b7:7c:74:cd:
5d:94:36:34:bc:6b:9f:1d:7f:b2:9f:44:5e:ab:7b:5d:8f:fb:
58:30:b2:c2:7f:b4:d4:98:75:7f:65:d0:0c:8d:d5:1f:8a:0e:
06:3a:b7:d3:52:3b:e1:0c:9d:0a:e3:11:04:76:77:ee:a8:b2:
77:7f:64:4e:d6:24:f7:d1:e2:8f:4c:21:ec:64:f9:0e:ae:ee:
d9:71:e8:28:61:81:04:6e:0b:0f:03:f7:ed:6d:bf:93:27:e3:
5f:d5:89:1c:57:d2:38:24:ad:d7:17:be:c6:06:d7:d3:3d:50:
10:ab:86:ad:bf:c8:8b:f5:b0:d0:c3:4e:54:39:73:ea:e5:37:
47:28:1d:40:c3:53:75:0e:c1:34:9f:fd:20:d7:39:b9:b0:02:
6a:dc:cb:ef:41:92:c7:4d:b1:cb:29:d7:48:9f:f9:c2:c5:08:
97:a5:d7:e3:63:d8:5a:b2:e5:e1:6c:32:e4:6d:01:b3:b9:1e:
5c:ea:be:26:d9:73:ca:6c:93:99:39:1e:1b:8a:4b:24:94:19:
c7:0b:dc:fd:ed:44:7e:85:e9:45:84:5d:78:85:6e:19:d6:87:
3e:ae:00:74
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIVYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5NDhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEQ4QjU5QTJBODRFREI4
NTM0ODAwN0IwOTQ5NDA1RUVFNUI2ODhFRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrZX1MTLRaGfCZpuTsFReM+UEw1P44lnT0hWy+a48Tczpkrag6
lWjA19ctdNxF2xVRWrVPGkLMPDIXAGPrUljRdNyIurPRevkwpdNbj8IbWt+5YfjD
nPZQAQ+mqUwzOPnBzxBMAw+W2uLFHooID0dbzFgW8nB2k8AIrWsqzWIa4w5Y5l4e
Cl6u6AdVMucmPy6nq9Jc0NcVpIcyZax1N/xyglmUvylr5OReqK69unagBi6THulL
HU3zHOLTIVBWi6/QN8k9bFtb9LydW4X9jJeJ3aXB04zX6IDZXtzRqR/7NC8fKSZW
BzO1TYsg7c3DZHFas51LXvUMMm7iefEFkXmNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU2LWaKoTtuFNIAHsJSUBe7ltojvQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJMV2FLb1R0dUZOSUFIc0pT
VUJlN2x0b2p2US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2
6eYwDQYJKoZIhvcNAQELBQADggEBAKvsFkQXB2Yub8ISUnsh4DKJhE5SfwHEpPid
HWsFzQA2t3x0zV2UNjS8a58df7KfRF6re12P+1gwssJ/tNSYdX9l0AyN1R+KDgY6
t9NSO+EMnQrjEQR2d+6osnd/ZE7WJPfR4o9MIexk+Q6u7tlx6ChhgQRuCw8D9+1t
v5Mn41/ViRxX0jgkrdcXvsYG19M9UBCrhq2/yIv1sNDDTlQ5c+rlN0coHUDDU3UO
wTSf/SDXObmwAmrcy+9BksdNscsp10if+cLFCJel1+Nj2Fqy5eFsMuRtAbO5Hlzq
vibZc8psk5k5HhuKSySUGccL3P3tRH6F6UWEXXiFbhnWhz6uAHQ=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:20 2023 by rpki-client on console-ams.rpki-client.org