Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CkBlCwsYLrd8BnuXNLrbU9cNI8k.roa
File: CkBlCwsYLrd8BnuXNLrbU9cNI8k.roa (raw, json)
Hash identifier: 418qNW41ReJAW+v6lXXl6psBdT1WD/RLbSlKzZJl12Q=
Subject key identifier: 0A:40:65:0B:0B:18:2E:B7:7C:06:7B:97:34:BA:DB:53:D7:0D:23:C9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2142
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CkBlCwsYLrd8BnuXNLrbU9cNI8k.roa
Signing time: Fri 25 Nov 2022 04:39:43 +0000
ROA not before: Fri 25 Nov 2022 04:39:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8514 (0x2142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0A40650B0B182EB77C067B9734BADB53D70D23C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:32:9a:da:b1:09:cb:01:11:45:f7:58:5a:
21:f8:c2:30:ab:f2:57:fd:1a:73:d2:60:68:40:26:
b9:f8:8e:43:79:ef:99:45:a9:4c:fe:d1:cd:bb:c9:
f7:1f:99:71:8a:0c:67:3e:51:30:56:8f:a6:08:33:
c8:ca:5e:31:6a:6f:f3:fb:e9:6b:0c:95:da:e7:70:
47:d6:07:7a:ed:34:f0:7e:12:28:30:ce:4d:20:5d:
65:3e:3f:61:95:a6:89:7e:9d:ab:c1:84:d0:f9:7c:
f2:28:2a:6a:c0:80:87:37:a3:9a:6f:d0:09:b1:19:
95:a3:26:b7:6e:5c:3c:6c:92:18:d1:5a:55:7d:a9:
4c:2c:a9:ee:20:5c:b8:5a:d5:48:48:5a:62:e7:72:
15:02:a7:33:a5:5c:2d:e6:d9:9d:e2:85:08:f0:ae:
3d:3c:8c:18:2c:4e:23:4c:0b:ee:d1:68:f4:0b:f6:
90:53:04:d2:5a:b1:9d:70:c8:07:cb:65:94:8a:45:
3a:a9:fd:80:db:3f:af:26:65:2d:aa:ad:5f:b3:ae:
94:06:69:61:06:b2:21:94:3f:e7:c7:d2:f1:1b:2e:
2b:70:c2:e7:59:99:64:48:ba:4d:bf:63:de:40:4a:
56:5a:0b:51:7f:e3:74:b8:5f:9e:f0:9c:1d:2f:02:
58:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:40:65:0B:0B:18:2E:B7:7C:06:7B:97:34:BA:DB:53:D7:0D:23:C9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CkBlCwsYLrd8BnuXNLrbU9cNI8k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.76.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c2:07:e4:ff:0a:bf:e5:10:b9:20:4f:ce:49:33:03:19:b5:
05:cf:bd:86:76:12:7a:87:81:94:db:96:3e:ca:c7:48:9e:c6:
a5:da:e0:9a:94:a7:ee:29:12:a5:10:71:d5:33:7a:20:ba:d4:
2a:aa:59:74:6a:2a:d8:0f:2d:ae:58:31:2c:58:e0:44:e0:b6:
df:db:9e:1e:64:41:33:5a:ae:e0:2a:f3:6e:b8:97:ac:3e:27:
16:dd:ff:4c:e0:1c:9e:d8:53:f3:85:26:a5:74:c0:f8:e9:b9:
83:ed:48:c1:36:a1:d1:7d:eb:34:07:a9:80:40:69:c3:39:d6:
4b:66:e4:78:bb:e0:28:f5:7c:ae:6e:ec:15:6a:f3:2a:9f:83:
95:38:84:e2:17:c2:ed:87:59:e5:a9:e9:ce:ab:83:83:5a:a1:
19:b9:77:16:49:99:eb:72:2c:70:33:63:0a:2b:f7:c3:77:22:
43:23:63:6e:35:b7:b6:6c:56:4b:97:18:d8:4f:d7:54:7d:c6:
35:d3:e5:17:2a:ed:fd:f4:6f:38:b6:69:fc:38:e9:bf:69:c9:
03:2d:b2:e8:6e:75:f6:39:3f:e0:fb:03:ed:25:2b:e1:bf:4c:
ab:ed:b5:61:51:41:8a:d6:73:c8:38:1d:92:27:7f:fb:d6:a2:
2f:c3:a8:65
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIUIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5NDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDBBNDA2NTBCMEIxODJF
Qjc3QzA2N0I5NzM0QkFEQjUzRDcwRDIzQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5ZTKa2rEJywERRfdYWiH4wjCr8lf9GnPSYGhAJrn4jkN575lF
qUz+0c27yfcfmXGKDGc+UTBWj6YIM8jKXjFqb/P76WsMldrncEfWB3rtNPB+Eigw
zk0gXWU+P2GVpol+navBhND5fPIoKmrAgIc3o5pv0AmxGZWjJrduXDxskhjRWlV9
qUwsqe4gXLha1UhIWmLnchUCpzOlXC3m2Z3ihQjwrj08jBgsTiNMC+7RaPQL9pBT
BNJasZ1wyAfLZZSKRTqp/YDbP68mZS2qrV+zrpQGaWEGsiGUP+fH0vEbLitwwudZ
mWRIuk2/Y95ASlZaC1F/43S4X57wnB0vAlgxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUCkBlCwsYLrd8BnuXNLrbU9cNI8kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0NrQmxDd3NZTHJkOEJudVhO
THJiVTljTkk4ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2
6EwwDQYJKoZIhvcNAQELBQADggEBACXCB+T/Cr/lELkgT85JMwMZtQXPvYZ2EnqH
gZTblj7Kx0iexqXa4JqUp+4pEqUQcdUzeiC61CqqWXRqKtgPLa5YMSxY4ETgtt/b
nh5kQTNaruAq8264l6w+Jxbd/0zgHJ7YU/OFJqV0wPjpuYPtSME2odF96zQHqYBA
acM51ktm5Hi74Cj1fK5u7BVq8yqfg5U4hOIXwu2HWeWp6c6rg4NaoRm5dxZJmety
LHAzYwor98N3IkMjY241t7ZsVkuXGNhP11R9xjXT5Rcq7f30bzi2afw46b9pyQMt
suhudfY5P+D7A+0lK+G/TKvttWFRQYrWc8g4HZInf/vWoi/DqGU=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:01 2023 by rpki-client on console-fra.rpki-client.org