Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8dXR0-wo6TBsJ_nv3UDiqzeGUrI.roa
File: 8dXR0-wo6TBsJ_nv3UDiqzeGUrI.roa (raw, json)
Hash identifier: da6S+U2LCmsw052KrBnZ9xVBqiYY8EWjgCwi/ELae38=
Subject key identifier: F1:D5:D1:D3:EC:28:E9:30:6C:27:F9:EF:DD:40:E2:AB:37:86:52:B2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8dXR0-wo6TBsJ_nv3UDiqzeGUrI.roa
Signing time: Thu 15 Sep 2022 02:46:35 +0000
ROA not before: Thu 15 Sep 2022 02:46:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.80.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F1D5D1D3EC28E9306C27F9EFDD40E2AB378652B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:5b:32:3d:14:03:fc:89:ca:c1:51:95:3a:82:
55:5d:11:8c:35:e4:1c:bb:d9:26:fd:b0:3d:a6:2a:
cb:c3:f4:d0:65:83:f2:1c:5d:5d:24:7e:c6:5b:f6:
7a:ce:d1:6c:e8:53:4c:b1:96:29:28:b4:07:10:fd:
be:0f:7b:bc:87:87:72:c2:1d:9c:12:89:26:91:7d:
c3:a9:2c:d3:36:82:ff:a3:9a:e0:15:6c:42:ee:c1:
78:1a:df:22:fd:3c:3b:ec:f4:c5:9f:8c:09:d8:85:
8a:7e:68:93:88:a3:4f:67:cf:99:49:71:fb:64:c4:
38:65:7b:ec:3d:b5:17:cc:39:d6:58:d7:a8:3d:b3:
43:c2:e0:fd:21:1e:a7:41:71:c1:44:a7:19:79:bb:
41:3e:d1:4a:45:3d:28:fd:e3:b1:c7:e7:72:a3:dc:
e1:d2:2c:9c:ca:95:19:6f:d9:31:6b:4d:9a:32:64:
cc:af:99:f9:fc:98:3d:f2:fb:2f:e2:39:52:13:01:
27:29:77:22:10:81:5a:a3:b5:51:d0:8c:3a:db:7e:
60:0b:2d:73:3e:ed:21:9e:03:fc:ae:1f:6f:75:f9:
0a:34:c4:f0:36:9a:4d:97:31:a4:dd:20:b9:c2:0a:
39:4e:6d:c8:50:65:76:71:da:cb:e3:cf:a1:6f:02:
ce:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D5:D1:D3:EC:28:E9:30:6C:27:F9:EF:DD:40:E2:AB:37:86:52:B2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8dXR0-wo6TBsJ_nv3UDiqzeGUrI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.80.0/21
Signature Algorithm: sha256WithRSAEncryption
b7:be:d8:96:02:9b:26:ea:79:c0:5c:ff:d1:87:5b:ea:92:c4:
e0:77:c0:69:d4:5a:79:6e:f1:7f:1f:36:d4:a1:b1:02:72:b9:
8b:7e:2b:a4:20:8c:ef:db:1e:3a:f5:c1:b2:b0:97:da:ff:75:
29:60:72:d5:3a:fe:bc:2c:77:2a:f8:1d:c1:72:bf:58:21:92:
0f:11:ad:31:08:42:06:d9:30:bd:a3:a7:48:3f:47:49:d8:60:
bb:38:bb:64:47:84:cf:85:72:17:c8:5e:7a:3c:6d:ce:59:6c:
ac:4d:68:7b:50:43:e4:f5:b0:4c:d2:58:a6:9a:4b:5d:2e:90:
bb:83:39:6a:42:bb:40:13:69:e4:8b:0d:be:b9:3b:72:d0:8b:
5b:56:28:bd:42:92:d5:68:ea:03:46:74:42:9b:e0:74:36:e9:
58:71:2e:dd:62:27:e7:4a:22:54:fe:1a:d8:56:e7:5b:a4:3f:
67:f2:a9:5f:d6:37:cd:36:4b:1e:c3:57:e5:f0:ee:f5:89:b9:
cd:65:a7:de:4b:d8:0f:f5:02:37:c6:51:b5:c3:b9:17:b2:44:
d3:c2:d6:f6:ee:c0:89:f6:09:64:05:29:49:9b:7e:09:cf:11:
42:40:5c:cf:e4:2e:e0:5c:f8:fd:af:16:8d:89:47:6a:19:db:
1d:84:6e:05
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ2MzVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEYxRDVEMUQzRUMyOEU5
MzA2QzI3RjlFRkRENDBFMkFCMzc4NjUyQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD5WzI9FAP8icrBUZU6glVdEYw15By72Sb9sD2mKsvD9NBlg/Ic
XV0kfsZb9nrO0WzoU0yxlikotAcQ/b4Pe7yHh3LCHZwSiSaRfcOpLNM2gv+jmuAV
bELuwXga3yL9PDvs9MWfjAnYhYp+aJOIo09nz5lJcftkxDhle+w9tRfMOdZY16g9
s0PC4P0hHqdBccFEpxl5u0E+0UpFPSj947HH53Kj3OHSLJzKlRlv2TFrTZoyZMyv
mfn8mD3y+y/iOVITAScpdyIQgVqjtVHQjDrbfmALLXM+7SGeA/yuH291+Qo0xPA2
mk2XMaTdILnCCjlObchQZXZx2svjz6FvAs7bAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8dXR0+wo6TBsJ/nv3UDiqzeGUrIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhkWFIwLXdvNlRCc0pfbnYz
VURpcXplR1VySS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wlAwDQYJKoZIhvcNAQELBQADggEBALe+2JYCmybqecBc/9GHW+qSxOB3wGnUWnlu
8X8fNtShsQJyuYt+K6QgjO/bHjr1wbKwl9r/dSlgctU6/rwsdyr4HcFyv1ghkg8R
rTEIQgbZML2jp0g/R0nYYLs4u2RHhM+FchfIXno8bc5ZbKxNaHtQQ+T1sEzSWKaa
S10ukLuDOWpCu0ATaeSLDb65O3LQi1tWKL1CktVo6gNGdEKb4HQ26VhxLt1iJ+dK
IlT+GthW51ukP2fyqV/WN802Sx7DV+Xw7vWJuc1lp95L2A/1AjfGUbXDuReyRNPC
1vbuwIn2CWQFKUmbfgnPEUJAXM/kLuBc+P2vFo2JR2oZ2x2EbgU=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:22 2023 by rpki-client on console-fra.rpki-client.org