Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sd6PO6n0nttssfCaesdb_CD3bfY.roa
File: Sd6PO6n0nttssfCaesdb_CD3bfY.roa (raw, json)
Hash identifier: 25GbHEXxK8jMJ/Jvfkz0fViKC0L3C850Eg+H0j0cgCU=
Subject key identifier: 49:DE:8F:3B:A9:F4:9E:DB:6C:B1:F0:9A:7A:C7:5B:FC:20:F7:6D:F6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sd6PO6n0nttssfCaesdb_CD3bfY.roa
Signing time: Thu 15 Sep 2022 02:44:44 +0000
ROA not before: Thu 15 Sep 2022 02:44:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=49DE8F3BA9F49EDB6CB1F09A7AC75BFC20F76DF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:24:b2:03:2d:d3:79:6e:5b:60:78:88:a5:
e7:7f:64:db:fe:78:c9:b3:a3:5c:5a:27:5f:fb:5b:
43:1b:99:00:dc:c6:89:29:48:e8:f1:0d:93:0f:5a:
8e:a8:14:53:a3:4d:93:16:cf:e3:d7:d1:72:2d:f3:
14:46:56:51:0f:46:d7:a8:5b:8f:23:89:de:02:17:
4e:c3:ec:94:3c:05:26:dc:b6:1c:67:af:79:0b:33:
64:d7:fb:6e:7d:71:c8:fb:0c:ed:6f:d0:6e:4e:70:
f1:ae:8f:31:5d:5c:16:e5:4f:39:9f:51:7a:3f:db:
6c:26:89:62:8d:c3:09:43:2f:17:84:1f:94:75:1d:
2d:c0:86:fc:27:ab:4a:44:70:3a:4d:31:d7:9f:e3:
8b:ae:10:22:e5:cd:a4:5d:59:75:fd:2b:8a:e5:f6:
56:e8:d5:9d:30:15:12:e4:e2:90:9f:3e:7a:eb:2c:
be:13:66:67:ba:ac:62:19:ab:aa:9f:4a:7a:ec:33:
05:1c:d4:80:bf:a2:a5:dd:03:d0:7e:26:df:d4:6a:
87:7c:18:76:5f:bb:fe:ef:88:1e:47:c1:79:79:10:
3f:f6:71:e8:be:3b:76:1a:26:cd:ce:68:14:4a:38:
9d:16:43:8f:d4:f9:1c:01:4e:de:85:14:ac:ad:1e:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DE:8F:3B:A9:F4:9E:DB:6C:B1:F0:9A:7A:C7:5B:FC:20:F7:6D:F6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sd6PO6n0nttssfCaesdb_CD3bfY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.103.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ed:82:e9:52:44:12:51:72:c9:5b:a1:06:a9:86:57:94:67:
0d:05:10:02:1e:e3:4e:3c:9a:c1:d1:c6:65:64:3c:c4:fd:e6:
8b:c9:e8:e8:ab:86:ff:18:2c:66:ec:1e:e5:aa:34:75:2f:2e:
98:7d:f0:8f:50:9f:fe:8d:30:17:7f:0d:ce:55:49:ac:fa:53:
96:07:1a:f3:01:2d:9e:32:7f:64:46:c7:a9:9f:f5:64:b0:48:
cc:89:73:0f:a5:5a:c9:fe:62:9a:35:02:70:f7:ee:b9:c6:92:
b0:14:37:94:ae:26:ce:72:87:66:c3:0e:c4:fc:39:bd:aa:9c:
21:08:4c:97:c3:45:b4:81:47:83:7b:58:09:9f:dd:48:62:60:
61:63:67:e5:1b:70:af:77:33:78:7a:44:6a:f4:26:cd:1c:5d:
24:06:56:ce:4e:5b:db:09:63:f0:e2:ca:aa:76:5a:ae:57:dc:
38:6f:cb:cc:58:41:de:d0:aa:eb:d4:cb:96:59:e1:a5:ab:a8:
dd:fc:52:4f:f4:e3:0d:fe:d6:fd:d9:11:42:b0:aa:f6:aa:f2:
48:3b:c1:8a:8a:ad:58:ed:ac:04:83:be:15:84:7c:af:45:87:
89:8e:d9:eb:6e:a6:28:7c:6b:ec:63:67:2b:ef:0f:e3:de:3d:
4d:11:e7:17
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ0NDRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDQ5REU4RjNCQTlGNDlF
REI2Q0IxRjA5QTdBQzc1QkZDMjBGNzZERjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXgiSyAy3TeW5bYHiIped/ZNv+eMmzo1xaJ1/7W0MbmQDcxokp
SOjxDZMPWo6oFFOjTZMWz+PX0XIt8xRGVlEPRteoW48jid4CF07D7JQ8BSbcthxn
r3kLM2TX+259ccj7DO1v0G5OcPGujzFdXBblTzmfUXo/22wmiWKNwwlDLxeEH5R1
HS3Ahvwnq0pEcDpNMdef44uuECLlzaRdWXX9K4rl9lbo1Z0wFRLk4pCfPnrrLL4T
Zme6rGIZq6qfSnrsMwUc1IC/oqXdA9B+Jt/Uaod8GHZfu/7viB5HwXl5ED/2cei+
O3YaJs3OaBRKOJ0WQ4/U+RwBTt6FFKytHpTRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUSd6PO6n0nttssfCaesdb/CD3bfYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1NkNlBPNm4wbnR0c3NmQ2Fl
c2RiX0NEM2JmWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2
6WcwDQYJKoZIhvcNAQELBQADggEBAHXtgulSRBJRcslboQaphleUZw0FEAIe4048
msHRxmVkPMT95ovJ6Oirhv8YLGbsHuWqNHUvLph98I9Qn/6NMBd/Dc5VSaz6U5YH
GvMBLZ4yf2RGx6mf9WSwSMyJcw+lWsn+Ypo1AnD37rnGkrAUN5SuJs5yh2bDDsT8
Ob2qnCEITJfDRbSBR4N7WAmf3UhiYGFjZ+UbcK93M3h6RGr0Js0cXSQGVs5OW9sJ
Y/Diyqp2Wq5X3Dhvy8xYQd7QquvUy5ZZ4aWrqN38Uk/04w3+1v3ZEUKwqvaq8kg7
wYqKrVjtrASDvhWEfK9Fh4mO2etupih8a+xjZyvvD+PePU0R5xc=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:29 2023 by rpki-client on console-fra.rpki-client.org