Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KytpTBEHE2-3a37HNgs0exh2FUI.roa
File: KytpTBEHE2-3a37HNgs0exh2FUI.roa (raw, json)
Hash identifier: LUcKBdgMo29gHA5k7ebmDdw5S46n796v7AC2voKZJ/0=
Subject key identifier: 2B:2B:69:4C:11:07:13:6F:B7:6B:7E:C7:36:0B:34:7B:18:76:15:42
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22F2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KytpTBEHE2-3a37HNgs0exh2FUI.roa
Signing time: Fri 25 Nov 2022 04:41:50 +0000
ROA not before: Fri 25 Nov 2022 04:41:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.24.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8946 (0x22f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2B2B694C1107136FB76B7EC7360B347B18761542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b3:19:3e:16:1d:71:6c:ba:8c:c8:67:af:79:
d1:e4:28:54:6a:74:ad:b3:72:c8:7d:8c:e3:d4:f4:
fb:15:ed:7c:b3:f3:b8:f2:53:08:cb:64:8d:10:b2:
25:c0:1b:b8:0c:17:b9:86:c2:1a:92:46:b2:e3:90:
ec:5d:b5:d8:7e:3b:3d:19:e4:6e:6a:f0:8f:ae:53:
fc:b3:52:c3:0f:f4:b0:69:c8:ce:db:6a:90:b3:29:
26:57:d2:e0:76:02:b1:64:9c:53:89:82:fc:70:eb:
26:1d:39:ff:ee:61:f4:45:f1:89:93:61:3a:88:99:
c7:a0:be:de:25:c2:af:04:38:a3:30:f1:ef:00:30:
d4:50:a0:c4:08:c0:2b:13:13:3c:9c:0a:f5:0f:47:
39:04:a9:13:7d:3e:c2:14:82:6a:86:ad:59:44:6c:
6b:01:ea:08:ed:a2:c5:d2:8e:2f:4a:dc:7f:bd:4d:
4a:0a:a9:29:16:70:31:9b:f5:ae:74:97:80:85:df:
29:ab:4e:52:32:45:92:6c:5b:9a:30:e1:f8:2f:82:
1c:fe:10:74:35:79:71:5b:c4:06:53:dd:63:9c:5d:
f7:9a:48:c1:36:9e:11:25:2f:0d:d9:35:3b:37:69:
f6:39:65:9b:c2:7b:bf:d3:0d:d6:a4:93:17:78:c3:
b9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2B:69:4C:11:07:13:6F:B7:6B:7E:C7:36:0B:34:7B:18:76:15:42
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KytpTBEHE2-3a37HNgs0exh2FUI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.24.0/22
Signature Algorithm: sha256WithRSAEncryption
17:e3:95:cc:bf:c8:ca:ca:5b:9b:43:75:dc:59:94:67:64:63:
6f:2e:13:01:73:b2:07:54:ab:49:a4:66:d9:f3:ff:ab:24:90:
44:a7:9f:79:48:cf:26:9d:fb:c5:9b:08:6d:54:fe:d8:05:ac:
bb:0f:3f:61:b9:4f:27:ef:4b:95:ef:b8:51:0f:67:18:ab:59:
96:37:f8:db:cc:3d:08:b2:c9:90:d6:39:5b:5b:93:9e:fa:2b:
71:81:29:b9:16:4f:c0:35:1a:d7:aa:ef:c2:9f:51:6f:25:ad:
50:ec:2e:83:89:3f:de:09:d9:97:aa:77:bd:1a:0f:52:46:87:
b0:70:d4:b8:cd:51:a9:ee:df:34:e8:b1:b3:cb:08:51:f6:3c:
2e:79:36:0f:8c:52:e4:18:e6:8a:b1:96:6f:8a:ee:3e:29:b6:
c9:de:78:01:08:eb:c3:67:66:60:8a:72:0d:36:c7:e2:26:bc:
e0:d8:a9:d8:ae:71:65:45:ce:8b:91:24:3e:e1:d2:10:c6:45:
c5:6e:1a:ac:9b:c8:cd:57:63:99:4e:5b:15:22:67:4c:61:88:
a6:43:28:a3:ea:fc:c2:14:22:c4:fb:c9:48:c0:6e:95:e8:8c:
f1:e4:54:36:2c:38:fd:24:8a:64:e1:40:0b:27:32:f2:2d:af:
5d:2b:e6:41
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIvIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQxNTBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJCMkI2OTRDMTEwNzEz
NkZCNzZCN0VDNzM2MEIzNDdCMTg3NjE1NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgsxk+Fh1xbLqMyGevedHkKFRqdK2zcsh9jOPU9PsV7Xyz87jy
UwjLZI0QsiXAG7gMF7mGwhqSRrLjkOxdtdh+Oz0Z5G5q8I+uU/yzUsMP9LBpyM7b
apCzKSZX0uB2ArFknFOJgvxw6yYdOf/uYfRF8YmTYTqImcegvt4lwq8EOKMw8e8A
MNRQoMQIwCsTEzycCvUPRzkEqRN9PsIUgmqGrVlEbGsB6gjtosXSji9K3H+9TUoK
qSkWcDGb9a50l4CF3ymrTlIyRZJsW5ow4fgvghz+EHQ1eXFbxAZT3WOcXfeaSME2
nhElLw3ZNTs3afY5ZZvCe7/TDdakkxd4w7mzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKytpTBEHE2+3a37HNgs0exh2FUIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0t5dHBUQkVIRTItM2EzN0hO
Z3MwZXhoMkZVSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6BgwDQYJKoZIhvcNAQELBQADggEBABfjlcy/yMrKW5tDddxZlGdkY28uEwFzsgdU
q0mkZtnz/6skkESnn3lIzyad+8WbCG1U/tgFrLsPP2G5TyfvS5XvuFEPZxirWZY3
+NvMPQiyyZDWOVtbk576K3GBKbkWT8A1Gteq78KfUW8lrVDsLoOJP94J2Zeqd70a
D1JGh7Bw1LjNUanu3zTosbPLCFH2PC55Ng+MUuQY5oqxlm+K7j4ptsneeAEI68Nn
ZmCKcg02x+ImvODYqdiucWVFzouRJD7h0hDGRcVuGqybyM1XY5lOWxUiZ0xhiKZD
KKPq/MIUIsT7yUjAbpXojPHkVDYsOP0kimThQAsnMvItr10r5kE=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:25 2023 by rpki-client on console-ams.rpki-client.org