Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8qYLOh08ecsSMmldPBuzUJR7XhU.roa
File: 8qYLOh08ecsSMmldPBuzUJR7XhU.roa (raw, json)
Hash identifier: uq8gdn17wy5IuDcjtikui38WVlNmGe4gqZyniZluYGQ=
Subject key identifier: F2:A6:0B:3A:1D:3C:79:CB:12:32:69:5D:3C:1B:B3:50:94:7B:5E:15
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22DD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8qYLOh08ecsSMmldPBuzUJR7XhU.roa
Signing time: Fri 25 Nov 2022 04:41:45 +0000
ROA not before: Fri 25 Nov 2022 04:41:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.144.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8925 (0x22dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F2A60B3A1D3C79CB1232695D3C1BB350947B5E15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c5:f1:e4:c3:82:7e:6b:66:d3:5a:ac:b0:7e:
97:90:2b:ab:db:10:14:84:13:32:d7:56:3f:0c:e2:
30:8d:31:41:b3:1b:43:99:70:73:36:77:bd:6c:65:
67:42:3e:dd:46:df:27:86:0c:90:7a:31:36:3f:bd:
de:27:d5:66:18:70:0e:31:49:8d:ff:1d:2a:1e:e6:
f4:29:e2:27:21:d1:2a:c9:22:a8:95:b8:88:0a:97:
d5:62:18:f3:ca:52:b0:17:40:62:55:a6:60:3c:2e:
35:11:f7:da:cb:d6:ba:7d:26:ca:29:85:19:78:09:
7a:23:4f:0d:2a:62:c6:39:41:23:7a:28:57:60:3d:
a1:71:f5:68:d4:ba:3a:fd:b0:81:50:c9:5e:fb:f0:
b6:4e:f8:6f:8d:6e:ae:23:fe:c3:6b:93:1c:97:f3:
3a:c7:7e:80:e1:f9:b2:2b:a2:dc:d4:50:6d:2a:87:
ab:a9:64:88:7c:54:80:30:82:17:44:b9:86:68:1f:
5b:c2:64:24:de:e5:5e:2d:04:c2:b1:4e:29:f7:20:
5f:5d:b8:65:4a:af:28:5f:bc:18:5a:30:84:61:c3:
86:d7:03:9d:38:8f:1a:cc:2f:6e:84:94:bc:47:71:
aa:05:9f:9c:0b:95:7e:db:54:c5:19:4f:74:c3:ef:
88:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A6:0B:3A:1D:3C:79:CB:12:32:69:5D:3C:1B:B3:50:94:7B:5E:15
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8qYLOh08ecsSMmldPBuzUJR7XhU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.144.0/22
Signature Algorithm: sha256WithRSAEncryption
78:b9:7f:1f:f5:dd:da:6b:08:e9:90:b5:f8:c1:e0:42:9d:95:
ed:97:08:b5:88:4f:d5:b0:81:5f:0f:08:e7:a1:1b:b2:d0:5f:
44:20:be:5c:0a:15:ca:65:f0:9c:7f:07:1a:05:72:92:46:74:
30:41:0a:f8:eb:8c:36:8b:4e:b8:eb:d4:6e:14:9e:67:56:65:
d2:8a:e2:b9:49:b7:14:c8:aa:68:03:8e:ab:85:d5:2f:ee:70:
46:72:ed:75:77:96:06:86:dc:3a:9f:eb:e6:b3:e1:ac:cf:d2:
d0:02:90:f5:65:5f:11:c9:53:a6:a5:1d:55:49:e1:ba:b2:8c:
b4:8a:e2:af:a0:b3:d4:5f:32:16:1e:5a:89:6b:00:63:1b:7f:
4e:26:08:82:56:8d:71:f5:11:de:04:1d:58:10:c9:7f:c6:5a:
13:05:41:24:ba:13:b6:b5:1d:d0:8d:7d:a6:50:d0:b5:1f:22:
bc:0e:64:b7:c2:8f:87:93:0e:62:1a:a1:c5:5f:5d:5e:38:51:
57:89:54:7f:1f:4e:30:de:25:00:0c:43:7a:9d:e7:f4:f6:bd:
44:8d:1e:e8:77:0f:9b:02:a3:d0:35:de:56:c0:ec:2a:8e:5a:
ee:c2:31:dd:17:f0:ac:c9:f1:cb:e9:5b:df:57:dc:bf:f2:a9:
49:2c:7f:6c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIt0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQxNDVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEYyQTYwQjNBMUQzQzc5
Q0IxMjMyNjk1RDNDMUJCMzUwOTQ3QjVFMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUxfHkw4J+a2bTWqywfpeQK6vbEBSEEzLXVj8M4jCNMUGzG0OZ
cHM2d71sZWdCPt1G3yeGDJB6MTY/vd4n1WYYcA4xSY3/HSoe5vQp4ich0SrJIqiV
uIgKl9ViGPPKUrAXQGJVpmA8LjUR99rL1rp9JsophRl4CXojTw0qYsY5QSN6KFdg
PaFx9WjUujr9sIFQyV778LZO+G+Nbq4j/sNrkxyX8zrHfoDh+bIrotzUUG0qh6up
ZIh8VIAwghdEuYZoH1vCZCTe5V4tBMKxTin3IF9duGVKryhfvBhaMIRhw4bXA504
jxrML26ElLxHcaoFn5wLlX7bVMUZT3TD74ghAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU8qYLOh08ecsSMmldPBuzUJR7XhUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzhxWUxPaDA4ZWNzU01tbGRQ
QnV6VUpSN1hoVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AZAwDQYJKoZIhvcNAQELBQADggEBAHi5fx/13dprCOmQtfjB4EKdle2XCLWIT9Ww
gV8PCOehG7LQX0QgvlwKFcpl8Jx/BxoFcpJGdDBBCvjrjDaLTrjr1G4UnmdWZdKK
4rlJtxTIqmgDjquF1S/ucEZy7XV3lgaG3Dqf6+az4azP0tACkPVlXxHJU6alHVVJ
4bqyjLSK4q+gs9RfMhYeWolrAGMbf04mCIJWjXH1Ed4EHVgQyX/GWhMFQSS6E7a1
HdCNfaZQ0LUfIrwOZLfCj4eTDmIaocVfXV44UVeJVH8fTjDeJQAMQ3qd5/T2vUSN
Huh3D5sCo9A13lbA7CqOWu7CMd0X8KzJ8cvpW99X3L/yqUksf2w=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:21 2023 by rpki-client on console-ams.rpki-client.org