Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BoqyJozufEd2ZinVa1Zcl-4orCQ.roa
File: BoqyJozufEd2ZinVa1Zcl-4orCQ.roa (raw, json)
Hash identifier: HjPf9JyLddKgdUuH87CU3wMolSUqvvm+BpbOeBu6ye8=
Subject key identifier: 06:8A:B2:26:8C:EE:7C:47:76:66:29:D5:6B:56:5C:97:EE:28:AC:24
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2145
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BoqyJozufEd2ZinVa1Zcl-4orCQ.roa
Signing time: Fri 25 Nov 2022 04:39:43 +0000
ROA not before: Fri 25 Nov 2022 04:39:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.119.128/25 maxlen: 25
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8517 (0x2145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=068AB2268CEE7C47766629D56B565C97EE28AC24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c2:cb:c6:bc:bc:eb:72:ba:1f:05:37:cf:05:
82:8c:bb:73:ae:78:f6:e5:c2:43:ad:9d:f8:8b:62:
ca:de:97:de:a5:2f:83:d0:41:95:a5:1c:89:14:24:
0d:c2:3e:d6:40:d7:e3:94:db:83:72:de:65:13:e7:
20:f9:0a:f7:b7:de:28:df:48:e7:f8:43:61:3b:b6:
6d:d5:d3:1a:7a:bc:2a:7e:18:ea:78:79:9d:34:43:
c5:26:20:27:b7:9a:5b:70:31:9c:b7:3d:2b:5a:ae:
d7:25:4a:79:42:8a:8d:95:3b:ee:0a:4b:eb:7b:40:
c8:9a:53:24:69:e9:7f:23:67:e3:24:cd:0f:39:50:
75:1c:29:41:f7:69:bf:d0:fd:7a:2a:ce:23:99:8b:
4b:e0:11:39:fc:0b:eb:cf:44:1a:87:00:42:86:88:
7f:d0:7b:96:43:a6:83:58:80:7b:9b:85:47:9a:bb:
2f:1c:db:7a:f2:35:4e:65:ef:80:6e:ea:84:a8:56:
dc:3e:7a:f7:2d:e1:42:84:88:a9:3f:6d:ab:a8:39:
78:01:f7:35:d1:e9:d0:88:fc:45:43:6a:b2:c5:56:
89:ea:a3:74:0f:6d:40:f6:3c:63:3a:f2:30:8a:7a:
94:51:55:7a:93:dc:3e:1a:e6:d3:3a:e7:92:a7:df:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8A:B2:26:8C:EE:7C:47:76:66:29:D5:6B:56:5C:97:EE:28:AC:24
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BoqyJozufEd2ZinVa1Zcl-4orCQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.119.128/25
Signature Algorithm: sha256WithRSAEncryption
61:bc:a2:35:22:bc:ef:02:0c:6e:f1:b6:78:ce:c5:85:40:0f:
68:5c:ee:4e:26:1e:85:f9:fb:16:0b:e4:73:f2:43:ff:a3:83:
e3:82:b4:13:a5:3a:ef:56:be:80:96:db:90:a6:04:ce:49:5d:
96:2f:7c:7b:55:89:53:df:73:75:50:f0:30:45:ef:b3:b4:68:
41:2c:a1:f3:5e:b5:1e:e4:8f:8e:8c:b8:4e:da:2b:aa:77:4a:
34:21:a1:83:98:cd:09:9c:af:d1:de:da:ae:91:ee:47:ec:d3:
bb:cc:04:cf:b9:8f:6a:b7:58:1d:8e:d2:fc:7b:ad:1a:27:de:
c1:41:7e:61:c5:6d:25:fa:6d:7e:55:2d:1e:4c:4d:a1:11:d0:
ae:5d:86:48:8e:9e:25:f3:87:5e:96:d7:33:c9:02:ba:47:6c:
75:68:b3:c7:73:10:0f:79:76:98:0f:71:dc:22:d3:8f:26:24:
7e:5c:8f:d3:c9:4a:db:b2:74:fc:b4:45:b2:bb:0c:c7:ef:1f:
ee:5f:a8:2b:13:ba:1b:9c:b8:ff:bd:ba:91:46:43:1b:ff:47:
ed:7e:b3:e5:43:c0:c8:1e:eb:01:3e:f9:83:9f:f2:6c:a5:2d:
bf:a2:63:2b:7b:cc:03:3c:93:18:8a:1c:53:4e:cd:ab:49:cb:
02:e4:b8:5c
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICIUUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5NDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDA2OEFCMjI2OENFRTdD
NDc3NjY2MjlENTZCNTY1Qzk3RUUyOEFDMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnwsvGvLzrcrofBTfPBYKMu3OuePblwkOtnfiLYsrel96lL4PQ
QZWlHIkUJA3CPtZA1+OU24Ny3mUT5yD5Cve33ijfSOf4Q2E7tm3V0xp6vCp+GOp4
eZ00Q8UmICe3mltwMZy3PStartclSnlCio2VO+4KS+t7QMiaUyRp6X8jZ+MkzQ85
UHUcKUH3ab/Q/XoqziOZi0vgETn8C+vPRBqHAEKGiH/Qe5ZDpoNYgHubhUeauy8c
23ryNU5l74Bu6oSoVtw+evct4UKEiKk/bauoOXgB9zXR6dCI/EVDarLFVonqo3QP
bUD2PGM68jCKepRRVXqT3D4a5tM655Kn3+lZAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUBoqyJozufEd2ZinVa1Zcl+4orCQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0JvcXlKb3p1ZkVkMlppblZh
MVpjbC00b3JDUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT
THeAMA0GCSqGSIb3DQEBCwUAA4IBAQBhvKI1IrzvAgxu8bZ4zsWFQA9oXO5OJh6F
+fsWC+Rz8kP/o4PjgrQTpTrvVr6AltuQpgTOSV2WL3x7VYlT33N1UPAwRe+ztGhB
LKHzXrUe5I+OjLhO2iuqd0o0IaGDmM0JnK/R3tquke5H7NO7zATPuY9qt1gdjtL8
e60aJ97BQX5hxW0l+m1+VS0eTE2hEdCuXYZIjp4l84deltczyQK6R2x1aLPHcxAP
eXaYD3HcItOPJiR+XI/TyUrbsnT8tEWyuwzH7x/uX6grE7obnLj/vbqRRkMb/0ft
frPlQ8DIHusBPvmDn/JspS2/omMre8wDPJMYihxTTs2rScsC5Lhc
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:01 2023 by rpki-client on console-fra.rpki-client.org