Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LKfePxOAbBVLcsvLLYtGx-4sq1E.roa
File: LKfePxOAbBVLcsvLLYtGx-4sq1E.roa (raw, json)
Hash identifier: wmZaUGCxvur1aRV88xWFt+GjwrZmkBeOFpSXXB0hLRA=
Subject key identifier: 2C:A7:DE:3F:13:80:6C:15:4B:72:CB:CB:2D:8B:46:C7:EE:2C:AB:51
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2267
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LKfePxOAbBVLcsvLLYtGx-4sq1E.roa
Signing time: Fri 25 Nov 2022 04:41:07 +0000
ROA not before: Fri 25 Nov 2022 04:41:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.96.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8807 (0x2267)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2CA7DE3F13806C154B72CBCB2D8B46C7EE2CAB51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6c:13:a6:c7:cb:09:21:c2:0e:68:c9:33:48:
43:63:b1:e2:2f:88:bc:98:5f:c7:2d:e7:9f:45:8d:
f8:3a:8e:ac:1a:a5:92:fb:08:92:d9:91:91:7f:3a:
fa:81:9b:fa:69:4e:7a:fc:87:a9:cc:99:11:8f:fc:
e0:a1:6b:26:b3:c6:fb:d7:a4:d7:bc:90:a8:6a:fb:
73:c1:9d:52:40:8f:b2:04:60:08:cb:cd:cd:c2:37:
e5:c6:f9:86:df:ce:d0:21:5c:4e:d2:6b:3b:b5:82:
7f:13:e7:9b:eb:a1:80:48:20:29:e4:1f:5a:3c:ac:
56:8b:79:81:11:a5:de:85:6e:6b:2b:17:fa:8a:47:
2e:65:89:05:e8:1d:56:bd:66:04:ae:6e:6d:e8:7a:
07:95:3e:ae:b9:d4:4c:59:9c:e1:fe:ef:f5:a9:3e:
f7:ce:d4:53:2f:f5:fd:68:1f:be:e6:b5:08:da:e6:
09:30:c1:59:4b:b0:d5:d5:0c:05:cc:5a:5d:12:88:
d4:12:fe:4e:27:93:7a:e6:0c:c2:3e:b0:a2:ba:9e:
6a:81:d5:38:35:65:b8:94:3f:80:85:63:cd:5d:de:
71:ed:2a:86:3a:e1:8f:2e:47:1f:bf:12:42:cf:ff:
40:d1:4c:26:d9:77:56:fa:68:23:30:9c:7a:9f:15:
76:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:A7:DE:3F:13:80:6C:15:4B:72:CB:CB:2D:8B:46:C7:EE:2C:AB:51
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LKfePxOAbBVLcsvLLYtGx-4sq1E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.96.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:72:5b:3b:8d:2c:ca:c4:a9:b6:47:e9:cb:51:32:bf:53:eb:
d4:88:9e:93:ef:be:ef:12:90:92:8c:09:1e:2d:de:6c:ec:70:
09:c1:e9:63:91:ef:59:42:5d:22:71:2d:05:c8:7d:b9:e8:b5:
c1:11:70:b7:79:8e:c3:5d:15:c9:1d:95:7e:8d:f0:67:43:17:
9b:5d:5c:8e:6b:a5:b9:c3:03:7e:92:2e:37:b6:82:e8:4f:1d:
14:af:87:64:37:07:7b:b1:31:1d:81:60:40:88:7c:b6:61:f3:
09:71:17:e8:32:07:25:19:77:66:77:bd:15:76:c5:0b:6b:dd:
4a:cb:5e:98:ca:7b:b1:6c:97:1f:5a:ce:70:e9:6e:7f:41:d3:
9f:15:89:7a:76:5b:d4:95:58:da:85:fa:15:aa:8b:75:b6:0f:
a6:3f:94:5c:aa:1a:38:6b:61:ca:47:ab:8a:fd:8a:40:d8:5e:
e7:d2:ff:e8:ba:dd:a8:f3:e7:54:c0:48:65:e2:63:c7:93:43:
0f:e5:06:52:3e:00:62:4b:6f:43:4e:d5:32:4a:43:1c:65:0e:
c3:77:ea:ed:f9:be:8c:80:47:f9:54:ab:7b:29:2f:1e:ea:4a:
33:64:12:68:62:56:b7:06:0b:4b:ac:2b:63:8e:b9:c0:21:a9:
69:ae:e3:f2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICImcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQxMDdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDJDQTdERTNGMTM4MDZD
MTU0QjcyQ0JDQjJEOEI0NkM3RUUyQ0FCNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMbBOmx8sJIcIOaMkzSENjseIviLyYX8ct559Fjfg6jqwapZL7
CJLZkZF/OvqBm/ppTnr8h6nMmRGP/OChayazxvvXpNe8kKhq+3PBnVJAj7IEYAjL
zc3CN+XG+YbfztAhXE7Sazu1gn8T55vroYBIICnkH1o8rFaLeYERpd6FbmsrF/qK
Ry5liQXoHVa9ZgSubm3oegeVPq651ExZnOH+7/WpPvfO1FMv9f1oH77mtQja5gkw
wVlLsNXVDAXMWl0SiNQS/k4nk3rmDMI+sKK6nmqB1Tg1ZbiUP4CFY81d3nHtKoY6
4Y8uRx+/EkLP/0DRTCbZd1b6aCMwnHqfFXaLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQULKfePxOAbBVLcsvLLYtGx+4sq1EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0xLZmVQeE9BYkJWTGNzdkxM
WXRHeC00c3ExRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6GAwDQYJKoZIhvcNAQELBQADggEBAH1yWzuNLMrEqbZH6ctRMr9T69SInpPvvu8S
kJKMCR4t3mzscAnB6WOR71lCXSJxLQXIfbnotcERcLd5jsNdFckdlX6N8GdDF5td
XI5rpbnDA36SLje2guhPHRSvh2Q3B3uxMR2BYECIfLZh8wlxF+gyByUZd2Z3vRV2
xQtr3UrLXpjKe7Fslx9aznDpbn9B058ViXp2W9SVWNqF+hWqi3W2D6Y/lFyqGjhr
YcpHq4r9ikDYXufS/+i63ajz51TASGXiY8eTQw/lBlI+AGJLb0NO1TJKQxxlDsN3
6u35voyAR/lUq3spLx7qSjNkEmhiVrcGC0usK2OOucAhqWmu4/I=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:25 2023 by rpki-client on console-ams.rpki-client.org