Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6108KlJhy-SlY4aPhXuDUN8AjAI.roa
File: 6108KlJhy-SlY4aPhXuDUN8AjAI.roa (raw, json)
Hash identifier: kyAMmFIBM7ehcHcwV8iGh/imhET7/qcGlQ4GiVLFhyU=
Subject key identifier: EB:5D:3C:2A:52:61:CB:E4:A5:63:86:8F:85:7B:83:50:DF:00:8C:02
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 230D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6108KlJhy-SlY4aPhXuDUN8AjAI.roa
Signing time: Fri 25 Nov 2022 04:41:59 +0000
ROA not before: Fri 25 Nov 2022 04:41:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.193.218.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8973 (0x230d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EB5D3C2A5261CBE4A563868F857B8350DF008C02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:0c:67:01:7d:46:e6:7b:a2:c8:36:d1:e8:
d2:d1:57:06:f1:63:9f:0d:74:d4:df:e2:e0:e7:85:
8d:e8:bc:dd:2e:72:00:d6:6b:9c:b8:cd:6a:35:f0:
3d:f4:91:27:b8:82:21:03:b4:34:b8:d2:10:21:52:
0b:6b:f4:ba:ec:1a:fd:ec:ec:86:fe:f1:62:40:c8:
2c:ba:1d:84:a9:db:a7:36:fd:5a:01:0b:96:db:2e:
00:05:f2:36:d8:18:14:c3:ea:77:a9:39:24:bf:ca:
a4:2a:d4:de:81:32:f9:81:9a:bb:9b:73:42:ef:d4:
4f:58:40:5e:c0:70:59:18:22:7f:07:3c:89:bc:5f:
66:f2:28:64:66:09:c9:42:57:aa:a3:87:93:33:94:
aa:51:35:a3:38:89:3d:aa:68:4b:67:ed:f1:17:96:
a6:b8:31:9f:4d:c6:e4:64:69:f3:90:8e:7a:59:1b:
e0:ac:e8:d6:9c:8e:ba:0c:2c:42:a0:5c:bf:18:7e:
53:ea:62:8e:1f:fd:03:c1:4b:de:62:30:94:52:2e:
73:00:de:bd:7a:a1:1f:55:ac:c4:66:56:a4:15:6d:
4d:4d:35:52:fb:8b:ea:f3:1f:08:5f:37:b3:05:fc:
cc:91:17:f6:60:7a:13:0a:fc:bf:57:d8:d5:8c:2a:
80:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5D:3C:2A:52:61:CB:E4:A5:63:86:8F:85:7B:83:50:DF:00:8C:02
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6108KlJhy-SlY4aPhXuDUN8AjAI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.218.0/23
Signature Algorithm: sha256WithRSAEncryption
96:41:f3:59:6c:40:40:c8:c5:fa:f3:3c:19:32:fe:7b:47:98:
0c:5d:1c:1f:6d:39:e3:b0:b9:76:07:83:ad:dd:da:75:4e:a7:
bd:31:38:4d:a0:8f:14:c9:fb:f0:fe:de:d5:3f:1c:33:b5:03:
c2:61:41:fe:10:3c:73:0f:11:23:d9:fa:6c:9d:2a:28:34:2f:
8b:29:79:b5:7f:18:ce:95:fe:46:9f:0b:44:80:ae:05:8e:77:
83:8f:9d:06:6e:4a:1a:c8:4d:e1:60:9b:8e:8f:71:5c:2d:6d:
42:b5:42:e2:58:c6:99:b7:2f:61:1e:72:d3:96:d5:d0:50:75:
89:9b:35:45:41:8d:fc:8c:b5:5d:40:fd:d7:aa:b5:f0:aa:fd:
e1:b6:3d:d9:16:e0:f3:e0:e8:5e:dc:82:21:78:6c:ed:dc:ec:
46:07:1c:c9:41:22:1c:d6:41:60:20:16:d6:60:4f:67:40:1e:
46:d9:b6:5c:61:3b:ee:40:09:fd:a2:68:2e:b9:3d:5e:55:c7:
5b:b8:c4:07:7e:e3:1f:38:6c:45:88:89:fc:0b:99:07:bb:a3:
1f:97:10:aa:63:a7:fb:93:ae:df:5e:0c:37:1e:19:ee:bc:15:
68:b4:72:d4:5f:07:97:26:02:81:d7:4e:85:35:c5:f9:d0:a1:
2b:a6:82:28
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIw0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQxNTlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEVCNUQzQzJBNTI2MUNC
RTRBNTYzODY4Rjg1N0I4MzUwREYwMDhDMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9DwxnAX1G5nuiyDbR6NLRVwbxY58NdNTf4uDnhY3ovN0ucgDW
a5y4zWo18D30kSe4giEDtDS40hAhUgtr9LrsGv3s7Ib+8WJAyCy6HYSp26c2/VoB
C5bbLgAF8jbYGBTD6nepOSS/yqQq1N6BMvmBmrubc0Lv1E9YQF7AcFkYIn8HPIm8
X2byKGRmCclCV6qjh5MzlKpRNaM4iT2qaEtn7fEXlqa4MZ9NxuRkafOQjnpZG+Cs
6NacjroMLEKgXL8YflPqYo4f/QPBS95iMJRSLnMA3r16oR9VrMRmVqQVbU1NNVL7
i+rzHwhfN7MF/MyRF/ZgehMK/L9X2NWMKoD3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU6108KlJhy+SlY4aPhXuDUN8AjAIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzYxMDhLbEpoeS1TbFk0YVBo
WHVEVU44QWpBSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7
wdowDQYJKoZIhvcNAQELBQADggEBAJZB81lsQEDIxfrzPBky/ntHmAxdHB9tOeOw
uXYHg63d2nVOp70xOE2gjxTJ+/D+3tU/HDO1A8JhQf4QPHMPESPZ+mydKig0L4sp
ebV/GM6V/kafC0SArgWOd4OPnQZuShrITeFgm46PcVwtbUK1QuJYxpm3L2EectOW
1dBQdYmbNUVBjfyMtV1A/deqtfCq/eG2PdkW4PPg6F7cgiF4bO3c7EYHHMlBIhzW
QWAgFtZgT2dAHkbZtlxhO+5ACf2iaC65PV5Vx1u4xAd+4x84bEWIifwLmQe7ox+X
EKpjp/uTrt9eDDceGe68FWi0ctRfB5cmAoHXToU1xfnQoSumgig=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:00 2023 by rpki-client on console-fra.rpki-client.org