Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6vBT00oJHEDDIseUq1WCX57Y278.roa
File: 6vBT00oJHEDDIseUq1WCX57Y278.roa (raw, json)
Hash identifier: twkfaXMJwt8lMZl5L2CpGYYmY31MH0f/w7/lPjh9250=
Subject key identifier: EA:F0:53:D3:4A:09:1C:40:C3:22:C7:94:AB:55:82:5F:9E:D8:DB:BF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2404
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6vBT00oJHEDDIseUq1WCX57Y278.roa
Signing time: Tue 06 Jun 2023 08:08:45 +0000
ROA not before: Tue 06 Jun 2023 08:08:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 103.224.192.0/22 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9220 (0x2404)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Jun 6 08:08:45 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EAF053D34A091C40C322C794AB55825F9ED8DBBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:01:cb:9b:10:bc:ef:47:96:3d:8d:77:d9:
48:30:16:b3:76:7f:70:24:d5:d9:6f:68:65:ac:81:
0d:68:b4:cc:80:cb:ca:93:04:70:33:13:1d:7b:f1:
e1:ed:62:49:72:1c:84:c3:1b:62:83:28:78:81:d3:
23:3e:54:e5:ef:46:b1:9e:49:ac:b8:b1:74:0a:bc:
aa:75:2b:1b:5c:0b:c8:ae:47:00:1c:b7:d7:d9:74:
a3:a4:db:bb:42:1a:f6:46:77:63:07:6a:63:08:a5:
6d:1d:11:7c:b3:54:f0:a4:9e:33:00:33:e6:f1:da:
49:71:26:3f:23:82:be:2f:37:a1:26:04:86:cc:0f:
db:ba:3f:6e:93:27:ff:24:c3:0d:ec:e9:d7:c6:45:
24:13:b7:db:cc:57:a2:fb:a7:c7:59:f9:d1:e6:76:
e7:bb:6a:99:7f:20:bd:fa:44:7b:1f:c3:1b:ae:da:
b2:7d:32:9c:d8:08:2e:9e:3b:af:7d:f7:f5:73:64:
85:a3:7d:af:a6:40:04:06:e0:98:97:78:dc:47:bc:
53:a0:3b:a6:cb:8a:27:2c:00:0d:5f:ec:c8:58:56:
63:fd:85:f5:e3:27:3a:91:6f:3c:b7:cf:f6:58:bd:
49:de:64:a7:ba:77:f7:00:c3:8a:05:36:e6:4e:62:
2e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F0:53:D3:4A:09:1C:40:C3:22:C7:94:AB:55:82:5F:9E:D8:DB:BF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6vBT00oJHEDDIseUq1WCX57Y278.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.192.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:5a:65:4b:4e:7f:13:5b:98:13:8d:2b:a1:eb:f7:c8:61:43:
b7:12:b9:90:f8:43:f1:7e:a3:32:c2:18:a0:3d:f6:fc:db:34:
65:e9:e6:bc:b4:24:67:e0:44:95:be:2c:4f:3e:2b:3f:db:f2:
80:cf:87:c9:d4:ab:7f:f1:f7:50:e4:64:d7:0f:67:20:7d:17:
89:8d:f4:8e:fc:00:77:57:95:3c:e5:7c:c5:14:be:02:c7:fa:
20:e9:d6:57:6d:26:1a:17:ff:d8:88:bb:16:1e:dc:2c:88:e5:
0f:b5:81:5e:a8:05:0b:02:7b:49:be:1a:05:91:ad:99:00:3a:
78:5b:02:81:40:f0:69:86:7c:01:a9:21:67:dc:16:ec:74:bc:
bc:df:ef:24:7f:0d:3f:94:a9:97:29:31:49:dc:36:c3:97:8a:
3a:b2:2c:c5:a9:ad:62:a6:4a:f2:0a:3f:92:b7:39:47:ea:e7:
37:e8:b9:29:5e:2c:3b:b4:fd:f5:dd:6b:67:4e:70:8d:1e:ea:
d3:56:47:6c:37:d9:96:51:78:00:b3:df:89:dc:39:35:9f:4c:
b0:ed:d3:3a:4a:bf:db:56:a1:d7:56:d4:c0:42:dd:46:e6:f9:
74:fd:cf:ed:ea:b3:f5:f8:bc:bb:ae:bd:74:17:80:0f:cd:0d:
90:d7:0b:ec
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJAQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA2MDYw
ODA4NDVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEVBRjA1M0QzNEEwOTFD
NDBDMzIyQzc5NEFCNTU4MjVGOUVEOERCQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8iAHLmxC870eWPY132UgwFrN2f3Ak1dlvaGWsgQ1otMyAy8qT
BHAzEx178eHtYklyHITDG2KDKHiB0yM+VOXvRrGeSay4sXQKvKp1KxtcC8iuRwAc
t9fZdKOk27tCGvZGd2MHamMIpW0dEXyzVPCknjMAM+bx2klxJj8jgr4vN6EmBIbM
D9u6P26TJ/8kww3s6dfGRSQTt9vMV6L7p8dZ+dHmdue7apl/IL36RHsfwxuu2rJ9
MpzYCC6eO6999/VzZIWjfa+mQAQG4JiXeNxHvFOgO6bLiicsAA1f7MhYVmP9hfXj
JzqRbzy3z/ZYvUneZKe6d/cAw4oFNuZOYi6xAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU6vBT00oJHEDDIseUq1WCX57Y278wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzZ2QlQwMG9KSEVERElzZVVx
MVdDWDU3WTI3OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn
4MAwDQYJKoZIhvcNAQELBQADggEBALZaZUtOfxNbmBONK6Hr98hhQ7cSuZD4Q/F+
ozLCGKA99vzbNGXp5ry0JGfgRJW+LE8+Kz/b8oDPh8nUq3/x91DkZNcPZyB9F4mN
9I78AHdXlTzlfMUUvgLH+iDp1ldtJhoX/9iIuxYe3CyI5Q+1gV6oBQsCe0m+GgWR
rZkAOnhbAoFA8GmGfAGpIWfcFux0vLzf7yR/DT+UqZcpMUncNsOXijqyLMWprWKm
SvIKP5K3OUfq5zfouSleLDu0/fXda2dOcI0e6tNWR2w32ZZReACz34ncOTWfTLDt
0zpKv9tWoddW1MBC3Ubm+XT9z+3qs/X4vLuuvXQXgA/NDZDXC+w=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:21 2023 by rpki-client on console-ams.rpki-client.org