Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/F6Xn2bsbWUtObioO7Wg8SUX9oZ4.roa
File: F6Xn2bsbWUtObioO7Wg8SUX9oZ4.roa (raw, json)
Hash identifier: Q96bVy8NRoq54PbhGgPqSxZ1pkqZ5IXQB3MKmrqf51A=
Subject key identifier: 17:A5:E7:D9:BB:1B:59:4B:4E:6E:2A:0E:ED:68:3C:49:45:FD:A1:9E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 226D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/F6Xn2bsbWUtObioO7Wg8SUX9oZ4.roa
Signing time: Fri 25 Nov 2022 04:41:09 +0000
ROA not before: Fri 25 Nov 2022 04:41:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.192.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8813 (0x226d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=17A5E7D9BB1B594B4E6E2A0EED683C4945FDA19E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6e:80:7e:bd:39:bb:3d:fa:12:3c:e9:6b:88:
5f:1f:f8:c9:1b:4d:8e:8e:e1:97:0d:9c:c2:a4:75:
34:b7:ce:aa:df:27:9d:2f:11:30:ac:54:4b:c3:3e:
84:1f:0b:79:94:c6:5d:77:81:17:cb:83:8f:04:a2:
81:aa:82:ed:08:1c:c9:b2:97:2b:eb:93:61:12:92:
16:87:38:fb:33:11:0d:8a:77:1e:4d:2f:96:2d:c0:
48:b4:60:f9:c4:fb:17:57:94:84:f1:dc:12:3e:99:
d7:dd:70:f7:03:c8:f5:53:b4:4c:28:7b:d7:b9:fb:
98:62:8c:1a:14:ee:a8:b6:96:38:4d:bf:70:53:63:
73:b2:e0:da:91:54:96:9c:62:47:58:80:f6:37:ca:
b0:a2:99:b7:03:ac:61:59:30:2f:8a:8f:b0:68:09:
f1:10:9d:dc:43:b3:a1:47:e5:92:82:3b:1e:1a:1b:
43:78:1f:4c:a0:03:8c:c2:d7:a9:65:94:e5:61:5a:
93:4d:b4:38:69:14:ed:86:65:90:59:db:b5:50:8a:
8e:1a:6d:56:99:b7:9c:f9:13:79:62:18:12:12:57:
80:8a:a9:ed:57:cf:35:ae:1c:f7:17:e3:08:13:57:
f2:1e:27:e0:19:0c:c2:d6:1f:b3:bf:e1:36:4d:80:
d9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A5:E7:D9:BB:1B:59:4B:4E:6E:2A:0E:ED:68:3C:49:45:FD:A1:9E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/F6Xn2bsbWUtObioO7Wg8SUX9oZ4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.192.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:28:84:b9:b6:8b:99:6e:a8:db:62:c5:9b:28:06:61:3d:3e:
32:2a:f9:50:0c:30:8d:f7:3b:97:e6:f0:14:1c:79:b9:2b:ac:
7b:e5:a2:e2:3f:00:e1:17:bc:16:b2:3a:11:24:f5:3c:b0:70:
1b:08:0f:2d:db:47:a7:3a:6e:43:e2:6e:44:17:c7:06:d1:66:
86:cc:f7:eb:35:34:7e:6d:d3:b2:26:39:e2:b4:10:a5:90:06:
79:ce:74:59:a3:92:3b:6d:5c:49:7d:01:20:29:fa:e5:d9:60:
bf:62:99:54:96:a0:e6:c8:92:3d:37:f1:64:80:ab:33:3b:30:
f6:0b:8e:20:3c:ba:62:86:56:ec:9e:75:33:1b:e2:41:f4:47:
83:cf:fd:58:84:16:9c:3b:54:c3:e6:b3:36:1c:7a:b5:b8:c4:
6e:54:b8:2a:c8:5c:65:cb:72:83:1b:65:e1:09:10:b0:ca:20:
2c:20:69:bd:07:1e:cf:36:b2:b3:63:70:38:6a:bb:a0:97:8e:
59:b5:41:45:66:35:1d:a8:e5:6f:f8:2f:af:8c:45:50:80:ea:
75:7c:30:28:23:2e:fc:37:86:47:47:4d:d9:e1:b9:2c:35:c6:
4a:61:0e:c6:31:95:88:80:c5:be:d6:0f:f0:2e:ad:45:bb:01:
ec:1e:d4:eb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIm0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQxMDlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDE3QTVFN0Q5QkIxQjU5
NEI0RTZFMkEwRUVENjgzQzQ5NDVGREExOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDrboB+vTm7PfoSPOlriF8f+MkbTY6O4ZcNnMKkdTS3zqrfJ50v
ETCsVEvDPoQfC3mUxl13gRfLg48EooGqgu0IHMmylyvrk2ESkhaHOPszEQ2Kdx5N
L5YtwEi0YPnE+xdXlITx3BI+mdfdcPcDyPVTtEwoe9e5+5hijBoU7qi2ljhNv3BT
Y3Oy4NqRVJacYkdYgPY3yrCimbcDrGFZMC+Kj7BoCfEQndxDs6FH5ZKCOx4aG0N4
H0ygA4zC16lllOVhWpNNtDhpFO2GZZBZ27VQio4abVaZt5z5E3liGBISV4CKqe1X
zzWuHPcX4wgTV/IeJ+AZDMLWH7O/4TZNgNljAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUF6Xn2bsbWUtObioO7Wg8SUX9oZ4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0Y2WG4yYnNiV1V0T2Jpb083
V2c4U1VYOW9aNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
scAwDQYJKoZIhvcNAQELBQADggEBAH0ohLm2i5luqNtixZsoBmE9PjIq+VAMMI33
O5fm8BQcebkrrHvlouI/AOEXvBayOhEk9TywcBsIDy3bR6c6bkPibkQXxwbRZobM
9+s1NH5t07ImOeK0EKWQBnnOdFmjkjttXEl9ASAp+uXZYL9imVSWoObIkj038WSA
qzM7MPYLjiA8umKGVuyedTMb4kH0R4PP/ViEFpw7VMPmszYcerW4xG5UuCrIXGXL
coMbZeEJELDKICwgab0HHs82srNjcDhqu6CXjlm1QUVmNR2o5W/4L6+MRVCA6nV8
MCgjLvw3hkdHTdnhuSw1xkphDsYxlYiAxb7WD/AurUW7Aewe1Os=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:23 2023 by rpki-client on console-ams.rpki-client.org