Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/538MSeeatv8vNiMxhYGIpj0Ga9Y.roa
File: 538MSeeatv8vNiMxhYGIpj0Ga9Y.roa (raw, json)
Hash identifier: d+4qHWPu27rqB7QGdud/KgPUpgocD4Sh+tsL5+TRq9I=
Subject key identifier: E7:7F:0C:49:E7:9A:B6:FF:2F:36:23:31:85:81:88:A6:3D:06:6B:D6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2279
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/538MSeeatv8vNiMxhYGIpj0Ga9Y.roa
Signing time: Fri 25 Nov 2022 04:41:13 +0000
ROA not before: Fri 25 Nov 2022 04:41:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.4.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8825 (0x2279)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E77F0C49E79AB6FF2F362331858188A63D066BD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1b:2f:47:ea:fa:72:46:49:b5:94:fd:f4:d8:
b5:fc:c0:3b:be:1d:8c:4d:71:e3:d0:8b:43:19:41:
59:48:aa:4b:4d:6f:fd:03:06:3a:51:ab:19:70:8f:
d4:6f:1d:64:d8:12:9f:e8:fb:ea:c7:f5:da:26:7a:
6e:46:de:2c:7c:21:82:32:bb:70:51:7b:c5:64:af:
d3:0e:df:b1:75:1e:e8:99:e7:40:62:dc:76:dc:09:
65:67:4a:8f:a1:70:eb:f8:ea:34:e7:7e:ed:58:82:
52:32:45:56:49:ac:a0:11:00:07:e0:f6:cf:c8:f0:
fe:c4:81:8c:cf:cb:47:f4:a6:ad:f2:f2:4b:cb:09:
ac:92:7a:b1:13:02:f1:9b:d8:a0:f1:a8:cd:08:93:
aa:2f:2f:17:39:43:95:6e:3b:9d:d7:e2:ad:9e:d0:
9b:2b:ac:4c:d2:f0:e6:45:18:6f:c1:7b:b4:d8:c1:
86:dc:c8:5e:e9:68:62:32:c0:99:2a:97:ad:ca:af:
0d:ee:8a:43:12:32:93:07:27:dd:c4:65:b9:3f:b8:
e0:4a:2f:d5:22:44:11:3f:aa:f2:40:ef:e5:6d:66:
ef:42:a4:eb:a5:a1:89:25:35:55:a7:d6:ac:e5:51:
2c:91:d7:87:8e:e5:21:aa:49:4d:a3:c4:66:01:58:
6e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7F:0C:49:E7:9A:B6:FF:2F:36:23:31:85:81:88:A6:3D:06:6B:D6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/538MSeeatv8vNiMxhYGIpj0Ga9Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.4.0/22
Signature Algorithm: sha256WithRSAEncryption
86:61:e1:df:67:c4:9d:fd:28:ba:1e:3b:92:60:79:c3:f5:d4:
18:41:b7:87:4a:ce:e0:db:3d:c0:90:63:01:cf:04:4f:7d:16:
07:69:eb:eb:c3:9a:72:25:e5:b6:bd:cf:f8:dd:3e:2c:77:4d:
92:46:02:3f:54:c4:08:aa:48:db:21:75:63:09:44:e6:08:c5:
4e:4f:9f:f1:a0:70:0d:42:0c:3b:8f:bd:61:6b:c7:80:30:f8:
47:8b:a1:b2:50:2b:ce:eb:bc:f8:92:4a:40:61:f8:38:c6:1d:
79:f7:d7:b2:19:ea:2f:1c:e3:94:0c:2d:04:b3:b5:c6:a8:42:
8e:ed:66:b1:8f:48:f4:89:6c:d6:4c:93:0b:cd:ff:66:10:e2:
a5:e0:e5:9e:a0:3e:0a:b5:5f:3a:3a:15:b0:09:b7:0b:7c:6c:
3f:28:b0:fd:b1:85:a1:b9:f5:1d:69:22:78:dd:84:95:4c:da:
4f:a9:7d:19:eb:b1:df:8b:6d:0a:bd:b4:b3:0a:3d:92:52:be:
50:23:5a:ec:89:35:4c:d6:ec:d8:5c:04:ce:ef:ee:78:29:49:
4f:db:15:21:b4:4e:02:72:49:8f:a1:dd:9b:46:fb:3c:57:42:
e3:14:23:f2:93:7a:2f:89:dd:ad:71:3d:ae:97:a2:d9:20:5c:
ee:87:be:e6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICInkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQxMTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEU3N0YwQzQ5RTc5QUI2
RkYyRjM2MjMzMTg1ODE4OEE2M0QwNjZCRDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLGy9H6vpyRkm1lP302LX8wDu+HYxNcePQi0MZQVlIqktNb/0D
BjpRqxlwj9RvHWTYEp/o++rH9domem5G3ix8IYIyu3BRe8Vkr9MO37F1HuiZ50Bi
3HbcCWVnSo+hcOv46jTnfu1YglIyRVZJrKARAAfg9s/I8P7EgYzPy0f0pq3y8kvL
CaySerETAvGb2KDxqM0Ik6ovLxc5Q5VuO53X4q2e0JsrrEzS8OZFGG/Be7TYwYbc
yF7paGIywJkql63Krw3uikMSMpMHJ93EZbk/uOBKL9UiRBE/qvJA7+VtZu9CpOul
oYklNVWn1qzlUSyR14eO5SGqSU2jxGYBWG4rAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU538MSeeatv8vNiMxhYGIpj0Ga9YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzUzOE1TZWVhdHY4dk5pTXho
WUdJcGowR2E5WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wAQwDQYJKoZIhvcNAQELBQADggEBAIZh4d9nxJ39KLoeO5JgecP11BhBt4dKzuDb
PcCQYwHPBE99Fgdp6+vDmnIl5ba9z/jdPix3TZJGAj9UxAiqSNshdWMJROYIxU5P
n/GgcA1CDDuPvWFrx4Aw+EeLobJQK87rvPiSSkBh+DjGHXn317IZ6i8c45QMLQSz
tcaoQo7tZrGPSPSJbNZMkwvN/2YQ4qXg5Z6gPgq1Xzo6FbAJtwt8bD8osP2xhaG5
9R1pInjdhJVM2k+pfRnrsd+LbQq9tLMKPZJSvlAjWuyJNUzW7NhcBM7v7ngpSU/b
FSG0TgJySY+h3ZtG+zxXQuMUI/KTei+J3a1xPa6XotkgXO6HvuY=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:00 2023 by rpki-client on console-fra.rpki-client.org