Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8AddFTCHMHxqbLnbRG0lSlQnjw8.roa
File: 8AddFTCHMHxqbLnbRG0lSlQnjw8.roa (raw, json)
Hash identifier: 4OTmrajGjSFIZxz+G9Lar9jdzdA1hQ7rvf2dGj3EUH8=
Subject key identifier: F0:07:5D:15:30:87:30:7C:6A:6C:B9:DB:44:6D:25:4A:54:27:8F:0F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8AddFTCHMHxqbLnbRG0lSlQnjw8.roa
Signing time: Thu 15 Sep 2022 02:53:07 +0000
ROA not before: Thu 15 Sep 2022 02:53:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.172.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F0075D153087307C6A6CB9DB446D254A54278F0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:c6:ad:98:15:92:9f:94:6b:c1:f5:06:53:
f7:1b:05:ce:f4:f3:58:01:16:47:50:f2:b9:ff:1f:
34:3b:2b:e5:f0:3e:fd:3f:db:81:99:ce:f0:93:3b:
1e:64:96:6a:a9:04:36:5f:4e:38:82:2a:ac:35:c3:
b2:a3:9f:48:e7:d0:81:ff:f7:ac:76:ef:74:5c:f8:
2b:02:25:5d:d7:3e:c3:35:37:87:74:f2:5f:cf:82:
16:6c:14:41:a5:e6:5f:a0:0e:e5:3d:47:34:ff:c2:
fa:7a:d9:d0:4b:c3:c9:df:7e:e9:d5:b2:81:15:dc:
53:11:3e:55:f6:99:bd:50:81:64:3e:a3:55:5c:32:
16:2a:6e:9a:57:b6:bc:54:ee:68:25:e3:36:88:44:
04:71:d6:9e:e9:9e:0f:13:bc:eb:c7:1e:12:60:f5:
94:7d:4e:3a:29:ad:9b:0d:7f:a0:08:f5:68:38:07:
c3:28:1a:34:dc:d2:41:6d:dc:85:28:d8:24:d4:a9:
71:ca:cd:a1:e1:b5:e6:4c:0f:55:77:ea:16:95:7a:
28:f8:82:41:75:d1:30:91:8a:a9:3d:e5:33:0a:bf:
65:da:a5:01:56:24:8d:b2:59:86:78:1d:ca:f7:40:
cf:02:fc:91:57:76:5c:66:bc:ee:6b:ee:ef:a4:a0:
65:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:07:5D:15:30:87:30:7C:6A:6C:B9:DB:44:6D:25:4A:54:27:8F:0F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8AddFTCHMHxqbLnbRG0lSlQnjw8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.172.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:a9:96:ac:c3:78:6f:7c:98:3b:ad:99:83:95:8a:43:2c:ac:
7c:01:a5:61:6c:35:55:14:ba:79:39:83:ff:5d:2d:9d:ae:99:
26:e4:f8:af:ab:4a:e1:45:25:7d:5f:59:cf:8e:9f:81:ff:99:
b3:02:3b:80:7a:e2:02:68:79:ee:7d:b6:9f:ea:ca:9d:71:89:
21:62:af:af:80:b6:8a:1b:2c:00:9a:cc:c2:10:b8:40:3f:4e:
57:04:cc:64:44:6f:c4:63:9f:77:24:c4:f7:2b:3f:99:1f:62:
29:3d:2c:97:72:8e:d8:a7:5b:e2:9d:fb:b2:1f:b5:11:76:0d:
a9:ac:39:c4:3f:94:b4:85:f4:86:4b:bd:aa:f0:64:b7:10:cb:
85:af:14:5a:b7:f8:1a:1a:63:45:a6:60:24:7e:68:5e:b7:79:
f2:0c:68:6f:76:1e:1f:c7:46:db:28:68:04:ec:1d:ad:4f:be:
29:7e:52:9f:21:7a:d2:88:45:cc:c3:99:21:95:79:ca:67:91:
e1:a3:c1:7e:65:fa:c5:e2:12:64:86:0f:01:9c:f1:0f:fc:63:
00:fd:7f:2a:7b:10:3f:09:f7:e9:fc:a7:88:b8:01:0c:98:9c:
06:b6:72:dc:74:42:13:0d:82:cb:9a:84:c1:ef:3f:3c:b6:47:
63:06:d1:74
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUzMDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEYwMDc1RDE1MzA4NzMw
N0M2QTZDQjlEQjQ0NkQyNTRBNTQyNzhGMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtL8atmBWSn5RrwfUGU/cbBc7081gBFkdQ8rn/HzQ7K+XwPv0/
24GZzvCTOx5klmqpBDZfTjiCKqw1w7Kjn0jn0IH/96x273Rc+CsCJV3XPsM1N4d0
8l/PghZsFEGl5l+gDuU9RzT/wvp62dBLw8nffunVsoEV3FMRPlX2mb1QgWQ+o1Vc
MhYqbppXtrxU7mgl4zaIRARx1p7png8TvOvHHhJg9ZR9TjoprZsNf6AI9Wg4B8Mo
GjTc0kFt3IUo2CTUqXHKzaHhteZMD1V36haVeij4gkF10TCRiqk95TMKv2XapQFW
JI2yWYZ4Hcr3QM8C/JFXdlxmvO5r7u+koGVxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8AddFTCHMHxqbLnbRG0lSlQnjw8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhBZGRGVENITUh4cWJMbmJS
RzBsU2xRbmp3OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wKwwDQYJKoZIhvcNAQELBQADggEBAAqplqzDeG98mDutmYOVikMsrHwBpWFsNVUU
unk5g/9dLZ2umSbk+K+rSuFFJX1fWc+On4H/mbMCO4B64gJoee59tp/qyp1xiSFi
r6+AtoobLACazMIQuEA/TlcEzGREb8Rjn3ckxPcrP5kfYik9LJdyjtinW+Kd+7If
tRF2DamsOcQ/lLSF9IZLvarwZLcQy4WvFFq3+BoaY0WmYCR+aF63efIMaG92Hh/H
RtsoaATsHa1Pvil+Up8hetKIRczDmSGVecpnkeGjwX5l+sXiEmSGDwGc8Q/8YwD9
fyp7ED8J9+n8p4i4AQyYnAa2ctx0QhMNgsuahMHvPzy2R2MG0XQ=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:22 2023 by rpki-client on console-fra.rpki-client.org