Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KyJ-ci5E-hXGnns_FzJbvkrxewc.roa
File: KyJ-ci5E-hXGnns_FzJbvkrxewc.roa (raw, json)
Hash identifier: QzM+RhyjB2rGp6jBH6+YByyFRImA2wkd4ASguXu5naA=
Subject key identifier: 2B:22:7E:72:2E:44:FA:15:C6:9E:7B:3F:17:32:5B:BE:4A:F1:7B:07
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KyJ-ci5E-hXGnns_FzJbvkrxewc.roa
Signing time: Thu 15 Sep 2022 02:54:13 +0000
ROA not before: Thu 15 Sep 2022 02:54:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.48.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:54:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2B227E722E44FA15C69E7B3F17325BBE4AF17B07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ce:a5:26:c0:8c:c1:4c:ff:9e:37:3f:f7:4d:
16:22:b3:43:1e:c5:a2:4c:2e:4f:72:c2:47:0d:aa:
c2:f6:c2:d2:6b:06:2e:2d:39:30:60:6a:5b:b4:3d:
a8:23:93:65:34:7f:a0:93:a0:92:7a:50:fd:42:11:
23:cd:30:df:ab:5c:81:b5:42:87:f7:bf:7b:2c:4b:
4a:bf:e8:fe:1e:6b:fa:0f:37:89:82:cd:37:7d:7c:
77:00:b9:51:31:86:3e:58:da:6f:7a:08:a4:f7:c2:
47:6a:b4:86:36:c9:a7:35:90:73:60:49:7f:5d:8d:
7b:b0:53:18:63:4e:c4:58:34:a5:d7:99:fe:72:b6:
d5:54:c6:b4:4d:a0:3b:77:60:5c:91:62:07:74:73:
a4:6d:fc:28:90:4c:3f:ef:05:df:2d:96:90:da:4c:
4c:fc:03:4c:23:6b:41:22:eb:25:1a:e0:5d:c3:5d:
d5:9c:ba:88:ad:da:25:d5:8e:31:95:e2:c8:ce:4b:
df:0d:48:50:98:9d:07:39:72:92:58:75:76:e9:7c:
07:2e:02:83:7a:79:8c:a4:3a:99:cc:f4:7e:07:f5:
b9:1c:eb:a1:39:6d:13:e7:94:ec:fb:db:16:a2:90:
b5:5c:7b:57:f8:51:bd:cc:17:50:6b:5e:ab:2f:69:
10:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:22:7E:72:2E:44:FA:15:C6:9E:7B:3F:17:32:5B:BE:4A:F1:7B:07
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KyJ-ci5E-hXGnns_FzJbvkrxewc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.48.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:86:d8:5e:3c:0a:cc:27:c5:5d:d5:28:5a:bc:d6:89:43:3f:
3e:68:94:32:e8:f3:25:48:04:11:aa:1d:27:8a:04:b2:d0:1e:
9c:30:7f:c7:49:20:84:84:9e:d2:68:84:6f:a5:c6:46:71:cc:
d1:28:5c:28:49:c7:ed:be:5f:e9:80:55:80:07:60:8d:63:6f:
61:4d:3b:a0:85:5e:71:d4:07:c7:00:95:b4:97:d6:0c:89:bd:
a9:3b:a7:ba:77:d8:51:69:45:03:d3:65:33:19:b0:a3:73:7b:
3d:61:03:03:47:89:df:15:94:87:fe:43:aa:5b:5b:c8:4f:ac:
85:59:12:8a:e9:ef:ff:7e:a6:ff:71:96:c2:87:91:b3:49:a8:
dc:c0:ca:67:a4:ed:18:93:e9:91:25:23:70:41:8b:8c:9e:54:
eb:59:5f:70:f2:b0:02:83:6b:27:04:7b:7f:f7:d0:dc:06:a5:
3b:a9:6e:5d:6d:41:23:76:8a:fb:9e:78:51:d8:53:04:d3:5f:
81:59:d5:09:41:1e:8b:85:0c:f0:05:01:cb:0e:cd:c8:3c:8a:
86:30:2c:bf:f0:d8:23:c3:ed:fb:96:87:d3:2a:14:e7:dd:63:
1a:7d:7a:b5:41:59:95:99:ab:32:3f:f1:52:13:31:68:2f:a4:
51:ac:7c:b1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjU0MTNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJCMjI3RTcyMkU0NEZB
MTVDNjlFN0IzRjE3MzI1QkJFNEFGMTdCMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQzqUmwIzBTP+eNz/3TRYis0MexaJMLk9ywkcNqsL2wtJrBi4t
OTBgalu0Pagjk2U0f6CToJJ6UP1CESPNMN+rXIG1Qof3v3ssS0q/6P4ea/oPN4mC
zTd9fHcAuVExhj5Y2m96CKT3wkdqtIY2yac1kHNgSX9djXuwUxhjTsRYNKXXmf5y
ttVUxrRNoDt3YFyRYgd0c6Rt/CiQTD/vBd8tlpDaTEz8A0wja0Ei6yUa4F3DXdWc
uoit2iXVjjGV4sjOS98NSFCYnQc5cpJYdXbpfAcuAoN6eYykOpnM9H4H9bkc66E5
bRPnlOz72xaikLVce1f4Ub3MF1BrXqsvaRARAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKyJ+ci5E+hXGnns/FzJbvkrxewcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0t5Si1jaTVFLWhYR25uc19G
ekpidmtyeGV3Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF2
6TAwDQYJKoZIhvcNAQELBQADggEBAIuG2F48CswnxV3VKFq81olDPz5olDLo8yVI
BBGqHSeKBLLQHpwwf8dJIISEntJohG+lxkZxzNEoXChJx+2+X+mAVYAHYI1jb2FN
O6CFXnHUB8cAlbSX1gyJvak7p7p32FFpRQPTZTMZsKNzez1hAwNHid8VlIf+Q6pb
W8hPrIVZEorp7/9+pv9xlsKHkbNJqNzAymek7RiT6ZElI3BBi4yeVOtZX3DysAKD
aycEe3/30NwGpTupbl1tQSN2ivueeFHYUwTTX4FZ1QlBHouFDPAFAcsOzcg8ioYw
LL/w2CPD7fuWh9MqFOfdYxp9erVBWZWZqzI/8VITMWgvpFGsfLE=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:16 2023 by rpki-client on console-ams.rpki-client.org