Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/39VnbZ5pNTbh_o72T7Ogq6F_G_k.roa
File: 39VnbZ5pNTbh_o72T7Ogq6F_G_k.roa (raw, json)
Hash identifier: TQZh2Tq/kIpYYA3x2VBELHhNVoo9amYaR2YnCs1eLsQ=
Subject key identifier: DF:D5:67:6D:9E:69:35:36:E1:FE:8E:F6:4F:B3:A0:AB:A1:7F:1B:F9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21A3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/39VnbZ5pNTbh_o72T7Ogq6F_G_k.roa
Signing time: Fri 25 Nov 2022 04:40:09 +0000
ROA not before: Fri 25 Nov 2022 04:40:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.248.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8611 (0x21a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DFD5676D9E693536E1FE8EF64FB3A0ABA17F1BF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:96:c9:48:51:69:66:aa:9e:1e:b7:fa:5a:
12:b8:d6:eb:7d:fc:cb:7d:4d:3b:1e:ef:f5:d1:e6:
a5:e1:56:14:da:32:c8:92:9d:e4:9a:7f:01:4b:ca:
52:95:c1:f4:fb:db:e8:8c:cd:a2:4d:27:14:94:7e:
57:1c:da:eb:83:ef:59:03:e4:df:73:f0:da:6c:36:
03:18:36:cd:45:b5:d5:4f:d5:4e:15:07:2e:9e:01:
24:57:ea:05:0a:26:bf:a9:02:17:00:01:20:76:36:
bc:ec:b1:90:55:d1:ad:de:5a:5d:2d:a2:3a:e1:3d:
1f:54:27:06:b4:9b:f1:b4:9e:31:8f:08:d3:35:21:
95:d1:ef:04:09:7e:1d:20:8b:59:c7:42:fb:a6:19:
2d:6b:dc:18:40:37:20:66:a6:a7:b7:af:6d:69:08:
86:0d:e2:dd:13:54:69:6e:a0:46:27:cd:c8:c2:6f:
d6:f4:08:56:a9:09:f9:43:ed:e9:02:c0:1c:b8:94:
2b:4e:bd:51:0a:5f:24:e8:f1:b8:01:93:1f:f4:79:
71:e0:a2:2d:06:9a:e1:c3:09:d3:99:4d:d4:10:26:
74:b1:d2:59:fe:18:9d:c7:89:da:b1:93:7e:e4:d8:
9a:74:ca:22:53:92:c9:b3:d5:b6:80:f4:7e:18:9b:
c4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D5:67:6D:9E:69:35:36:E1:FE:8E:F6:4F:B3:A0:AB:A1:7F:1B:F9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/39VnbZ5pNTbh_o72T7Ogq6F_G_k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.248.0/21
Signature Algorithm: sha256WithRSAEncryption
17:09:b8:8d:1f:2d:ed:a6:37:9f:51:08:73:7d:87:37:0e:49:
9f:e9:f8:f5:33:ce:4e:0e:22:2f:60:91:82:c6:48:bf:68:09:
c2:06:54:2e:55:07:4c:5d:7e:03:54:08:e1:8f:df:15:a4:3b:
ba:0c:16:16:25:40:c2:32:d6:00:d9:cc:dd:07:14:89:19:cb:
74:bd:18:9d:2f:64:93:b7:8a:9c:b6:b8:80:43:ac:f6:d9:27:
42:0e:5c:5b:5c:c8:3b:2c:40:8a:9f:3d:6f:de:10:9f:56:8a:
41:32:3f:5d:0b:3d:7f:e1:1e:a0:7b:18:65:de:b4:71:ad:1e:
32:99:dc:99:a7:8c:ee:bd:07:ca:20:f6:71:bb:70:78:30:de:
3c:ec:94:67:7f:62:a0:23:02:8f:a9:57:57:0a:e9:24:ab:57:
e2:21:29:54:22:e9:9a:f9:8a:2b:ab:30:45:30:d2:19:de:84:
66:ab:d2:9a:88:b1:74:d1:d9:2e:30:32:a8:7d:6b:44:88:72:
a1:4a:7c:f7:dc:a9:3f:e3:38:f6:d7:a2:a8:d6:9f:b2:d3:1f:
2b:ca:12:a1:19:eb:80:f5:50:18:c6:2f:4a:e1:53:fa:43:b7:
13:3b:cb:70:b0:9e:d4:9c:12:56:13:13:ba:c3:2a:7a:b1:ed:
30:6f:ce:4a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIaMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwMDlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKERGRDU2NzZEOUU2OTM1
MzZFMUZFOEVGNjRGQjNBMEFCQTE3RjFCRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCivZbJSFFpZqqeHrf6WhK41ut9/Mt9TTse7/XR5qXhVhTaMsiS
neSafwFLylKVwfT72+iMzaJNJxSUflcc2uuD71kD5N9z8NpsNgMYNs1FtdVP1U4V
By6eASRX6gUKJr+pAhcAASB2NrzssZBV0a3eWl0tojrhPR9UJwa0m/G0njGPCNM1
IZXR7wQJfh0gi1nHQvumGS1r3BhANyBmpqe3r21pCIYN4t0TVGluoEYnzcjCb9b0
CFapCflD7ekCwBy4lCtOvVEKXyTo8bgBkx/0eXHgoi0GmuHDCdOZTdQQJnSx0ln+
GJ3Hidqxk37k2Jp0yiJTksmz1baA9H4Ym8RjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU39VnbZ5pNTbh/o72T7Ogq6F/G/kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzM5Vm5iWjVwTlRiaF9vNzJU
N09ncTZGX0dfay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wvgwDQYJKoZIhvcNAQELBQADggEBABcJuI0fLe2mN59RCHN9hzcOSZ/p+PUzzk4O
Ii9gkYLGSL9oCcIGVC5VB0xdfgNUCOGP3xWkO7oMFhYlQMIy1gDZzN0HFIkZy3S9
GJ0vZJO3ipy2uIBDrPbZJ0IOXFtcyDssQIqfPW/eEJ9WikEyP10LPX/hHqB7GGXe
tHGtHjKZ3JmnjO69B8og9nG7cHgw3jzslGd/YqAjAo+pV1cK6SSrV+IhKVQi6Zr5
iiurMEUw0hnehGar0pqIsXTR2S4wMqh9a0SIcqFKfPfcqT/jOPbXoqjWn7LTHyvK
EqEZ64D1UBjGL0rhU/pDtxM7y3CwntScElYTE7rDKnqx7TBvzko=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:46:59 2023 by rpki-client on console-fra.rpki-client.org