Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JrAKq-hxj5mbuecQ4h0vQEe3sak.roa
File: JrAKq-hxj5mbuecQ4h0vQEe3sak.roa (raw, json)
Hash identifier: sU+tIAYSJKL35Yje31tl6E4/jirKNmhwEl1tQofALLo=
Subject key identifier: 26:B0:0A:AB:E8:71:8F:99:9B:B9:E7:10:E2:1D:2F:40:47:B7:B1:A9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22A8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JrAKq-hxj5mbuecQ4h0vQEe3sak.roa
Signing time: Fri 25 Nov 2022 04:41:28 +0000
ROA not before: Fri 25 Nov 2022 04:41:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.244.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8872 (0x22a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=26B00AABE8718F999BB9E710E21D2F4047B7B1A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:99:c8:f4:ab:a7:88:dd:88:d8:11:73:55:
6a:d5:4f:6c:80:9a:07:c8:75:a9:b7:00:ce:32:f1:
d1:66:54:d1:9b:2c:d2:2c:e1:ac:74:3c:37:df:98:
86:84:42:dc:a4:80:35:24:54:9f:91:51:fe:8b:47:
a0:ba:be:6f:1e:a3:20:49:38:6d:24:50:d8:5c:9d:
39:1e:24:76:49:13:d0:bb:75:4b:61:e8:55:ca:f6:
aa:82:f8:f9:ac:18:56:4c:bf:75:2e:a9:13:73:94:
ae:c5:54:a8:78:e7:2f:b2:75:11:ff:2f:32:1f:d9:
cc:d8:23:41:2f:db:6a:01:92:68:60:4e:bf:10:09:
b7:74:64:0c:d5:ce:1f:13:08:44:22:27:16:ea:a2:
fc:1d:72:6d:60:d8:ee:1b:87:e9:95:b9:6e:02:e3:
d9:31:8d:5d:ef:68:8e:71:0a:d4:f2:c9:23:14:42:
13:63:e9:86:d2:f7:b7:7a:e4:00:a4:9f:20:47:c9:
5b:30:e6:10:95:9f:9f:f7:fe:45:b6:2f:15:96:93:
36:03:71:db:1c:41:eb:b4:13:ff:93:e0:1e:23:b3:
c5:db:66:5a:03:cc:cf:a7:ec:fa:8b:a7:e9:2a:a3:
7e:b0:6e:86:b4:90:91:a3:64:1f:24:4e:38:35:c6:
3e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B0:0A:AB:E8:71:8F:99:9B:B9:E7:10:E2:1D:2F:40:47:B7:B1:A9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JrAKq-hxj5mbuecQ4h0vQEe3sak.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.244.0/22
Signature Algorithm: sha256WithRSAEncryption
73:66:8a:08:f9:19:f5:14:b8:b5:98:0a:c6:a6:66:67:c4:a2:
61:8a:05:b9:0f:02:05:aa:ad:8e:62:09:a6:e3:8c:d6:84:cb:
43:f4:60:74:3a:22:09:6a:0a:fb:81:12:a4:57:78:ed:50:fa:
3b:55:47:68:22:23:cc:24:49:eb:a4:0b:28:bf:84:f6:1d:53:
72:da:43:d7:39:72:3a:77:aa:9a:4d:8b:f3:36:be:9a:1a:5d:
0d:cf:77:38:75:e7:5f:c9:91:29:fb:58:90:9d:aa:68:bb:89:
b5:e7:1d:da:5c:0a:60:24:21:c6:cd:84:37:20:c7:1f:68:0f:
fb:ca:48:01:73:89:c5:49:21:0e:48:69:b3:ed:ae:c0:4b:23:
cd:ad:ed:ee:af:03:b8:dd:c9:36:5e:d7:33:0d:4e:7e:04:28:
33:4e:d2:54:7a:9b:06:38:41:71:50:68:6a:28:f1:78:f8:43:
4a:d5:bc:ab:2a:aa:e7:53:5f:4d:1e:9a:7a:15:10:45:f9:b2:
99:ee:69:9f:10:f6:e6:bd:99:48:20:9c:69:a9:0a:b8:8a:6d:
a6:18:60:8c:dc:2e:21:73:5c:9b:95:e4:1c:a1:b3:f6:2e:fb:
bc:e5:93:dd:aa:34:0e:77:57:63:49:ce:4a:c4:e0:25:db:b9:
93:a7:80:71
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIqgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQxMjhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDI2QjAwQUFCRTg3MThG
OTk5QkI5RTcxMEUyMUQyRjQwNDdCN0IxQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDI4JnI9KuniN2I2BFzVWrVT2yAmgfIdam3AM4y8dFmVNGbLNIs
4ax0PDffmIaEQtykgDUkVJ+RUf6LR6C6vm8eoyBJOG0kUNhcnTkeJHZJE9C7dUth
6FXK9qqC+PmsGFZMv3UuqRNzlK7FVKh45y+ydRH/LzIf2czYI0Ev22oBkmhgTr8Q
Cbd0ZAzVzh8TCEQiJxbqovwdcm1g2O4bh+mVuW4C49kxjV3vaI5xCtTyySMUQhNj
6YbS97d65ACknyBHyVsw5hCVn5/3/kW2LxWWkzYDcdscQeu0E/+T4B4js8XbZloD
zM+n7PqLp+kqo36wboa0kJGjZB8kTjg1xj5tAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUJrAKq+hxj5mbuecQ4h0vQEe3sakwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0pyQUtxLWh4ajVtYnVlY1E0
aDB2UUVlM3Nhay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sPQwDQYJKoZIhvcNAQELBQADggEBAHNmigj5GfUUuLWYCsamZmfEomGKBbkPAgWq
rY5iCabjjNaEy0P0YHQ6IglqCvuBEqRXeO1Q+jtVR2giI8wkSeukCyi/hPYdU3La
Q9c5cjp3qppNi/M2vpoaXQ3Pdzh151/JkSn7WJCdqmi7ibXnHdpcCmAkIcbNhDcg
xx9oD/vKSAFzicVJIQ5IabPtrsBLI82t7e6vA7jdyTZe1zMNTn4EKDNO0lR6mwY4
QXFQaGoo8Xj4Q0rVvKsqqudTX00emnoVEEX5spnuaZ8Q9ua9mUggnGmpCriKbaYY
YIzcLiFzXJuV5Byhs/Yu+7zlk92qNA53V2NJzkrE4CXbuZOngHE=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:03 2023 by rpki-client on console-fra.rpki-client.org