Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GFZKtUapJg7GbYNd_VGmcDa6444.roa
File: GFZKtUapJg7GbYNd_VGmcDa6444.roa (raw, json)
Hash identifier: LRgPDeG3YIrSUa1xFHq3xUKDpRNRu4u15cmjGUOpb8s=
Subject key identifier: 18:56:4A:B5:46:A9:26:0E:C6:6D:83:5D:FD:51:A6:70:36:BA:E3:8E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GFZKtUapJg7GbYNd_VGmcDa6444.roa
Signing time: Thu 15 Sep 2022 02:52:47 +0000
ROA not before: Thu 15 Sep 2022 02:52:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.144.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=18564AB546A9260EC66D835DFD51A67036BAE38E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:ab:6a:5f:65:70:f1:c1:d9:b4:53:4e:e0:5f:
e5:e9:1d:29:10:64:07:89:3c:79:89:f1:2c:4c:d4:
a9:15:d6:59:84:56:35:6a:9c:7e:67:1f:2a:cf:98:
14:79:db:e7:ff:6d:5a:14:81:76:52:5c:3e:67:88:
b7:46:f7:22:e1:99:8d:ee:b9:60:66:73:f1:da:6f:
75:32:8e:08:da:ff:ef:9a:b5:64:de:e7:24:23:96:
62:38:d1:6e:49:80:6c:98:dd:70:5d:3a:b1:41:f7:
36:50:df:0f:e9:23:1c:41:8e:db:c0:88:d3:a3:b7:
9b:1b:cf:b8:0c:99:aa:2d:d8:88:24:50:b3:5c:59:
de:67:8c:23:bf:2c:0b:6f:f8:3a:7c:2a:5c:5b:92:
1d:14:8e:5d:74:1f:4f:20:9c:dd:c7:90:c6:86:64:
55:97:bd:57:8a:d3:55:4e:6d:e5:e4:22:06:0d:e3:
40:d0:4c:2a:d8:a2:a9:b3:41:20:fc:25:83:b9:07:
8e:7d:a4:97:10:19:10:dc:b9:12:f7:cf:09:55:7b:
da:2a:42:15:d1:b6:89:60:88:99:86:dd:3f:b4:70:
6e:ba:b9:b6:12:9c:92:14:72:d4:bc:96:fa:e0:1a:
18:66:4c:19:81:c4:3b:9a:14:df:30:f7:16:19:3b:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:56:4A:B5:46:A9:26:0E:C6:6D:83:5D:FD:51:A6:70:36:BA:E3:8E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GFZKtUapJg7GbYNd_VGmcDa6444.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.144.0/21
Signature Algorithm: sha256WithRSAEncryption
09:37:f8:8a:40:f2:e9:82:e7:24:6a:16:90:74:06:8e:7e:71:
12:2d:a5:7b:82:7a:40:9c:54:41:be:5d:39:5a:bd:d9:7f:99:
58:05:3e:55:d2:99:48:21:60:7b:5f:e2:63:49:80:80:f7:41:
ee:2e:df:ee:3e:f7:4d:46:d5:82:35:d6:4a:2c:24:65:e9:2c:
ab:01:fa:b9:40:ff:bd:c8:3d:52:4c:68:aa:8a:09:e3:77:a5:
39:e1:26:ce:ff:eb:23:a6:eb:78:13:32:c9:6c:32:4e:42:1e:
60:7d:88:ab:e7:08:c5:ec:25:8e:07:fd:3b:54:d5:cc:ec:df:
36:04:c5:e1:31:77:b1:27:20:b6:26:31:52:a3:31:01:ae:1c:
b7:70:81:79:40:c1:52:d2:b7:cc:89:1f:6f:44:04:58:03:e6:
a1:53:ae:9a:06:6b:0d:4f:0e:61:a4:2a:34:81:da:35:c9:02:
09:31:5c:09:4b:41:76:d4:47:b0:54:f1:b8:ea:37:9c:e4:5b:
fa:c0:4e:c0:13:30:68:10:62:13:ce:c8:ec:53:75:41:20:fd:
b1:a4:0a:ba:ca:53:42:d2:b6:e4:62:a9:3d:3f:92:3f:cb:e8:
b1:02:73:a1:65:d6:41:18:7c:c2:ed:f4:33:9f:aa:aa:52:dc:
fe:a8:57:a2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUyNDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDE4NTY0QUI1NDZBOTI2
MEVDNjZEODM1REZENTFBNjcwMzZCQUUzOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD7q2pfZXDxwdm0U07gX+XpHSkQZAeJPHmJ8SxM1KkV1lmEVjVq
nH5nHyrPmBR52+f/bVoUgXZSXD5niLdG9yLhmY3uuWBmc/Hab3Uyjgja/++atWTe
5yQjlmI40W5JgGyY3XBdOrFB9zZQ3w/pIxxBjtvAiNOjt5sbz7gMmaot2IgkULNc
Wd5njCO/LAtv+Dp8Klxbkh0Ujl10H08gnN3HkMaGZFWXvVeK01VObeXkIgYN40DQ
TCrYoqmzQSD8JYO5B459pJcQGRDcuRL3zwlVe9oqQhXRtolgiJmG3T+0cG66ubYS
nJIUctS8lvrgGhhmTBmBxDuaFN8w9xYZO5qZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUGFZKtUapJg7GbYNd/VGmcDa6444wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0dGWkt0VWFwSmc3R2JZTmRf
VkdtY0RhNjQ0NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wZAwDQYJKoZIhvcNAQELBQADggEBAAk3+IpA8umC5yRqFpB0Bo5+cRItpXuCekCc
VEG+XTlavdl/mVgFPlXSmUghYHtf4mNJgID3Qe4u3+4+901G1YI11kosJGXpLKsB
+rlA/73IPVJMaKqKCeN3pTnhJs7/6yOm63gTMslsMk5CHmB9iKvnCMXsJY4H/TtU
1czs3zYExeExd7EnILYmMVKjMQGuHLdwgXlAwVLSt8yJH29EBFgD5qFTrpoGaw1P
DmGkKjSB2jXJAgkxXAlLQXbUR7BU8bjqN5zkW/rATsATMGgQYhPOyOxTdUEg/bGk
CrrKU0LStuRiqT0/kj/L6LECc6Fl1kEYfMLt9DOfqqpS3P6oV6I=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:25 2023 by rpki-client on console-fra.rpki-client.org