Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5qOSSKC98TzzmWO5xBAySKjJ_Gs.roa
File: 5qOSSKC98TzzmWO5xBAySKjJ_Gs.roa (raw, json)
Hash identifier: o0csBWXw1blEk1fclfGz3ZpUJ0GfZMfyBeEjgeGD/sQ=
Subject key identifier: E6:A3:92:48:A0:BD:F1:3C:F3:99:63:B9:C4:10:32:48:A8:C9:FC:6B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2127
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5qOSSKC98TzzmWO5xBAySKjJ_Gs.roa
Signing time: Fri 25 Nov 2022 04:39:33 +0000
ROA not before: Fri 25 Nov 2022 04:39:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.126.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8487 (0x2127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E6A39248A0BDF13CF39963B9C4103248A8C9FC6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:26:a0:cd:31:2c:97:b9:23:0d:34:73:95:fd:
13:10:d1:66:8d:aa:ee:48:17:60:be:dc:89:2e:83:
62:6f:8a:ad:24:b3:a5:d1:05:3d:84:3e:b9:ac:0e:
14:32:c6:b5:6c:1a:85:59:78:1f:7a:66:00:0b:04:
94:79:03:a9:45:f4:4c:b4:18:24:60:1d:e8:c2:48:
29:99:49:48:fc:75:45:92:70:fe:0b:a5:8b:7f:d0:
4e:7f:3f:de:4f:b2:90:31:3d:6f:c3:db:94:ab:f9:
ab:19:1a:c3:54:72:7e:88:03:75:c0:ac:e1:29:2c:
05:0c:9a:cd:72:14:74:1b:04:c9:53:b9:1f:cf:1c:
1b:c3:c6:58:c9:0d:85:23:30:0d:42:2a:be:37:b5:
0d:b7:1d:e2:5c:6b:68:87:00:a4:24:76:47:a9:b6:
5e:d8:81:7d:02:53:4f:c0:43:2a:07:65:6a:3b:96:
0c:93:81:27:a2:92:4b:a9:2b:22:c8:a1:ac:d8:88:
29:50:cb:0a:93:92:f3:27:45:2a:5d:4f:f5:70:5b:
34:95:93:54:48:c9:41:47:12:f7:70:8f:b0:0a:96:
c0:9a:1d:8e:2b:c0:45:3f:0b:30:c7:0b:e4:32:20:
db:9a:b0:f0:6c:38:bb:96:05:90:2f:fa:f4:90:69:
9b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A3:92:48:A0:BD:F1:3C:F3:99:63:B9:C4:10:32:48:A8:C9:FC:6B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5qOSSKC98TzzmWO5xBAySKjJ_Gs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.126.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:10:dd:3b:c5:d5:ba:9b:5d:eb:f3:9a:95:cd:ff:e0:aa:10:
46:75:33:7b:f8:d4:2f:58:13:17:3b:d3:c3:92:79:7b:bf:15:
4c:62:a9:51:0f:92:02:01:b0:41:35:0b:3f:c8:79:8d:b6:e4:
bf:85:be:ab:30:70:d8:f3:e4:4a:c6:0d:97:52:45:fc:2e:ff:
27:cb:5d:8d:d9:4f:18:13:c4:b9:ea:40:f7:48:05:14:2f:cd:
b6:a0:9a:20:38:68:0f:23:37:5d:74:c9:e3:63:55:8a:fb:81:
30:b5:5f:42:dc:4e:2c:9f:57:95:4e:ff:11:e3:15:86:89:a0:
b9:dc:6d:e8:2d:34:b1:c3:cf:7a:b5:6b:bb:d9:28:ce:3a:cf:
97:b8:22:51:2b:87:c4:2f:ed:70:6b:27:ec:13:f3:84:41:da:
2c:74:ea:b2:c5:7b:c6:bc:72:8a:cc:1f:23:95:52:89:12:7f:
91:62:6e:ff:51:5c:55:4a:bf:a6:b4:f0:b6:e8:51:06:02:c8:
43:c9:76:4b:69:15:b8:a6:77:80:ca:e1:9f:7e:1f:da:50:fc:
72:9e:bb:f9:78:b6:ba:d1:62:3b:87:e6:e4:73:31:ab:66:54:
6a:2c:15:7d:af:d9:74:93:72:e6:41:15:ca:28:f5:d7:01:14:
8b:2f:0e:1b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIScwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MzNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEU2QTM5MjQ4QTBCREYx
M0NGMzk5NjNCOUM0MTAzMjQ4QThDOUZDNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFJqDNMSyXuSMNNHOV/RMQ0WaNqu5IF2C+3Ikug2Jviq0ks6XR
BT2EPrmsDhQyxrVsGoVZeB96ZgALBJR5A6lF9Ey0GCRgHejCSCmZSUj8dUWScP4L
pYt/0E5/P95PspAxPW/D25Sr+asZGsNUcn6IA3XArOEpLAUMms1yFHQbBMlTuR/P
HBvDxljJDYUjMA1CKr43tQ23HeJca2iHAKQkdkeptl7YgX0CU0/AQyoHZWo7lgyT
gSeikkupKyLIoazYiClQywqTkvMnRSpdT/VwWzSVk1RIyUFHEvdwj7AKlsCaHY4r
wEU/CzDHC+QyINuasPBsOLuWBZAv+vSQaZuTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU5qOSSKC98TzzmWO5xBAySKjJ/GswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzVxT1NTS0M5OFR6em1XTzV4
QkF5U0tqSl9Hcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHT
TH4wDQYJKoZIhvcNAQELBQADggEBAC0Q3TvF1bqbXevzmpXN/+CqEEZ1M3v41C9Y
Exc708OSeXu/FUxiqVEPkgIBsEE1Cz/IeY225L+FvqswcNjz5ErGDZdSRfwu/yfL
XY3ZTxgTxLnqQPdIBRQvzbagmiA4aA8jN110yeNjVYr7gTC1X0LcTiyfV5VO/xHj
FYaJoLncbegtNLHDz3q1a7vZKM46z5e4IlErh8Qv7XBrJ+wT84RB2ix06rLFe8a8
corMHyOVUokSf5Fibv9RXFVKv6a08LboUQYCyEPJdktpFbimd4DK4Z9+H9pQ/HKe
u/l4trrRYjuH5uRzMatmVGosFX2v2XSTcuZBFcoo9dcBFIsvDhs=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:00 2023 by rpki-client on console-fra.rpki-client.org