Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KtBdikBee0RanYV7D0gIXmQ51Vk.roa
File: KtBdikBee0RanYV7D0gIXmQ51Vk.roa (raw, json)
Hash identifier: RWrvq5fk1oXefb3SQwiNxsn8W0opyPObF/HrxKytIsk=
Subject key identifier: 2A:D0:5D:8A:40:5E:7B:44:5A:9D:85:7B:0F:48:08:5E:64:39:D5:59
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2101
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KtBdikBee0RanYV7D0gIXmQ51Vk.roa
Signing time: Fri 25 Nov 2022 04:39:23 +0000
ROA not before: Fri 25 Nov 2022 04:39:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.120.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8449 (0x2101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2AD05D8A405E7B445A9D857B0F48085E6439D559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:89:3f:3d:24:88:86:7c:24:2e:dd:2f:80:48:
c1:ef:6d:04:1c:66:93:bd:55:37:a0:21:3b:89:89:
0b:a2:fa:18:89:d1:f2:ca:a1:a2:2f:f8:99:ba:52:
35:9a:04:15:34:40:dc:ea:b2:1d:eb:ca:44:da:c3:
c2:84:06:4d:27:62:41:1d:35:8d:9e:d2:56:fd:29:
5e:5b:45:70:f4:ed:39:21:d2:64:30:f2:e0:cb:4f:
2e:22:04:74:47:f4:44:e1:70:7a:ca:47:44:ba:ad:
07:01:cd:24:da:2d:b7:d6:69:48:36:44:2b:bd:fe:
14:01:c7:f3:c8:25:64:cc:14:c7:d1:a3:2f:19:bc:
fe:2e:c4:41:0d:0d:e3:28:a9:ce:38:35:ae:49:d1:
e6:29:7a:d7:ae:61:a0:69:48:60:d6:95:da:bc:53:
d5:f7:59:21:2a:44:85:a6:29:42:55:a0:b9:4a:7b:
91:2c:c4:ed:ba:b2:19:8d:eb:a3:0b:5d:44:1d:02:
e3:d6:b4:34:f9:8a:49:18:38:0d:d5:cb:20:c4:71:
6d:97:c7:ff:19:f8:1b:16:1b:30:26:5d:ee:ee:1c:
c8:67:27:2f:82:28:35:89:7a:d7:65:8d:9f:34:8f:
e6:f1:09:17:b8:c2:ed:aa:fc:81:29:14:dd:24:c2:
49:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D0:5D:8A:40:5E:7B:44:5A:9D:85:7B:0F:48:08:5E:64:39:D5:59
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KtBdikBee0RanYV7D0gIXmQ51Vk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.120.0/22
Signature Algorithm: sha256WithRSAEncryption
49:4d:c8:23:0c:ae:2a:72:7d:57:93:a6:a4:84:43:e5:63:36:
b1:21:0c:fa:44:88:f1:b8:69:bd:f1:46:dc:d2:c7:4b:e1:49:
58:e3:db:98:60:5f:ed:82:0a:f2:7d:6c:29:9f:a8:db:9e:04:
08:03:65:47:6b:7c:a1:04:86:a2:1e:7e:2f:fa:03:53:5c:0d:
e8:80:2e:b8:e4:d5:d7:a7:b3:73:ab:c7:9c:4a:93:c7:96:26:
eb:ab:7a:88:a7:7c:b4:f6:6f:19:16:cd:86:53:40:a0:3e:54:
19:8a:2a:15:51:2c:c6:39:79:17:c7:f9:a7:ce:71:ec:2f:36:
a8:c7:b0:d3:1f:21:75:1e:4e:78:1e:96:87:2f:7d:03:50:cb:
9d:55:f2:db:f1:fd:50:b2:74:02:33:12:dd:da:82:fa:ef:96:
6a:ea:b7:d1:dc:4b:a0:88:99:6b:29:4a:b1:6c:93:31:83:2f:
d8:1f:d6:f5:4b:27:b8:a0:83:2c:b8:3b:02:f1:df:a4:47:7b:
6d:a7:74:4c:d8:99:07:05:0d:04:0d:3c:6a:45:33:2f:3e:41:
2d:17:1d:b0:7b:8e:c4:86:5d:ad:6a:84:04:a3:90:0d:25:48:
45:61:ef:37:ce:4f:5b:70:f7:ce:94:d9:e1:08:4a:23:34:a0:
02:08:4f:a3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MjNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJBRDA1RDhBNDA1RTdC
NDQ1QTlEODU3QjBGNDgwODVFNjQzOUQ1NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMiT89JIiGfCQu3S+ASMHvbQQcZpO9VTegITuJiQui+hiJ0fLK
oaIv+Jm6UjWaBBU0QNzqsh3rykTaw8KEBk0nYkEdNY2e0lb9KV5bRXD07Tkh0mQw
8uDLTy4iBHRH9EThcHrKR0S6rQcBzSTaLbfWaUg2RCu9/hQBx/PIJWTMFMfRoy8Z
vP4uxEENDeMoqc44Na5J0eYpeteuYaBpSGDWldq8U9X3WSEqRIWmKUJVoLlKe5Es
xO26shmN66MLXUQdAuPWtDT5ikkYOA3VyyDEcW2Xx/8Z+BsWGzAmXe7uHMhnJy+C
KDWJetdljZ80j+bxCRe4wu2q/IEpFN0kwkmTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKtBdikBee0RanYV7D0gIXmQ51VkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0t0QmRpa0JlZTBSYW5ZVjdE
MGdJWG1RNTFWay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6HgwDQYJKoZIhvcNAQELBQADggEBAElNyCMMripyfVeTpqSEQ+VjNrEhDPpEiPG4
ab3xRtzSx0vhSVjj25hgX+2CCvJ9bCmfqNueBAgDZUdrfKEEhqIefi/6A1NcDeiA
Lrjk1dens3Orx5xKk8eWJuureoinfLT2bxkWzYZTQKA+VBmKKhVRLMY5eRfH+afO
cewvNqjHsNMfIXUeTngelocvfQNQy51V8tvx/VCydAIzEt3agvrvlmrqt9HcS6CI
mWspSrFskzGDL9gf1vVLJ7iggyy4OwLx36RHe22ndEzYmQcFDQQNPGpFMy8+QS0X
HbB7jsSGXa1qhASjkA0lSEVh7zfOT1tw986U2eEISiM0oAIIT6M=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:25 2023 by rpki-client on console-ams.rpki-client.org