Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AfBuf3-nT4QsDnuvC9-8Ie3aYRM.roa
File: AfBuf3-nT4QsDnuvC9-8Ie3aYRM.roa (raw, json)
Hash identifier: hkxHusa/Z5mKkdGJLDaXBUHRB+ptA84C1LYOt6V1xIk=
Subject key identifier: 01:F0:6E:7F:7F:A7:4F:84:2C:0E:7B:AF:0B:DF:BC:21:ED:DA:61:13
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AfBuf3-nT4QsDnuvC9-8Ie3aYRM.roa
Signing time: Thu 15 Sep 2022 02:53:54 +0000
ROA not before: Thu 15 Sep 2022 02:53:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.248.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=01F06E7F7FA74F842C0E7BAF0BDFBC21EDDA6113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ed:b3:3b:f4:c6:4d:d4:78:bb:1d:d6:dc:61:
2d:56:dd:11:da:4c:b9:40:9f:68:40:24:99:8a:1d:
01:00:11:43:71:4e:30:46:cc:f9:a0:97:34:33:bf:
03:05:d1:e3:55:86:21:71:5c:aa:e3:40:30:39:fd:
88:5f:3f:ed:33:77:e4:28:c4:13:8a:03:2b:65:41:
35:4b:b7:f5:83:ea:de:65:00:4c:46:6a:74:b9:94:
5b:f4:08:8c:85:8e:9e:a7:e0:96:de:b4:54:f6:16:
14:a6:99:4d:fe:2f:fe:22:09:65:1d:da:7a:34:1b:
3d:37:71:b4:5d:44:05:c1:f5:db:8e:92:1e:c2:a6:
38:bb:1e:56:bc:41:66:77:ff:3a:cc:9c:ba:74:61:
74:a5:77:5e:de:24:c3:ee:da:f2:81:b1:64:27:d2:
be:c0:07:c8:6d:9a:4d:e6:97:33:1d:a2:0e:4d:51:
d0:38:1d:7d:e4:fb:f6:9b:83:41:93:04:c1:4e:06:
78:d1:b2:c7:f4:2e:2e:af:d0:09:fa:7f:57:d8:5e:
c8:73:21:22:0d:98:44:60:d0:cb:50:68:93:4e:f7:
20:34:76:68:3b:40:a1:b0:6b:a4:d6:71:75:92:cb:
56:ca:61:13:17:71:a7:2e:5e:93:05:06:f5:50:c8:
4f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F0:6E:7F:7F:A7:4F:84:2C:0E:7B:AF:0B:DF:BC:21:ED:DA:61:13
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AfBuf3-nT4QsDnuvC9-8Ie3aYRM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.248.0/22
Signature Algorithm: sha256WithRSAEncryption
88:fb:38:36:b7:ae:76:0b:4f:3e:8e:43:96:81:64:4e:42:45:
94:f9:c0:2f:c6:e5:55:28:62:09:bd:47:e5:52:75:72:1d:eb:
5f:82:26:8a:3a:6f:81:3e:78:ee:c3:d9:be:45:c8:eb:0a:57:
ce:81:84:fd:ef:8e:8c:04:9a:a7:df:f7:25:41:14:46:f5:0f:
d3:66:aa:6c:d7:16:3d:6a:c6:cd:77:62:d1:ce:f9:bb:18:aa:
1d:fa:a1:a7:cc:8b:b7:22:5e:86:5a:73:ce:d2:dc:17:c1:8f:
0c:e5:d7:79:33:cf:86:4e:c1:6a:2e:20:70:30:e5:33:09:0f:
2a:ac:85:7f:0c:66:f5:c3:26:48:62:1b:ed:b8:ba:59:b5:7a:
b2:c8:c1:34:4e:cb:d8:43:10:63:be:3c:0e:2e:91:e0:f3:08:
46:c5:3d:03:60:f7:9e:06:1d:75:77:06:fd:cb:f6:45:43:ca:
14:da:5b:97:05:81:e1:13:f9:a8:22:f6:89:59:2a:c3:3d:77:
5c:3b:52:8b:db:ae:66:f1:20:2a:0c:c2:9a:9e:af:68:96:9a:
d7:7f:93:f8:55:3c:a4:e1:0b:50:4b:11:f5:a5:a2:d8:c3:46:
02:32:98:cb:e4:b0:a2:06:04:e0:bc:0e:c1:f6:6a:fa:a9:16:
a9:6a:fb:e2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUzNTRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDAxRjA2RTdGN0ZBNzRG
ODQyQzBFN0JBRjBCREZCQzIxRUREQTYxMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDP7bM79MZN1Hi7HdbcYS1W3RHaTLlAn2hAJJmKHQEAEUNxTjBG
zPmglzQzvwMF0eNVhiFxXKrjQDA5/YhfP+0zd+QoxBOKAytlQTVLt/WD6t5lAExG
anS5lFv0CIyFjp6n4JbetFT2FhSmmU3+L/4iCWUd2no0Gz03cbRdRAXB9duOkh7C
pji7Hla8QWZ3/zrMnLp0YXSld17eJMPu2vKBsWQn0r7AB8htmk3mlzMdog5NUdA4
HX3k+/abg0GTBMFOBnjRssf0Li6v0An6f1fYXshzISINmERg0MtQaJNO9yA0dmg7
QKGwa6TWcXWSy1bKYRMXcacuXpMFBvVQyE8bAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUAfBuf3+nT4QsDnuvC9+8Ie3aYRMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0FmQnVmMy1uVDRRc0RudXZD
OS04SWUzYVlSTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wfgwDQYJKoZIhvcNAQELBQADggEBAIj7ODa3rnYLTz6OQ5aBZE5CRZT5wC/G5VUo
Ygm9R+VSdXId61+CJoo6b4E+eO7D2b5FyOsKV86BhP3vjowEmqff9yVBFEb1D9Nm
qmzXFj1qxs13YtHO+bsYqh36oafMi7ciXoZac87S3BfBjwzl13kzz4ZOwWouIHAw
5TMJDyqshX8MZvXDJkhiG+24ulm1erLIwTROy9hDEGO+PA4ukeDzCEbFPQNg954G
HXV3Bv3L9kVDyhTaW5cFgeET+agi9olZKsM9d1w7UovbrmbxICoMwpqer2iWmtd/
k/hVPKThC1BLEfWlotjDRgIymMvksKIGBOC8DsH2avqpFqlq++I=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:23 2023 by rpki-client on console-fra.rpki-client.org