Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SoiIO0NbyBpDFunz4g5iWtgptOM.roa
File: SoiIO0NbyBpDFunz4g5iWtgptOM.roa (raw, json)
Hash identifier: +PnM9sqCN453glFA+vq4P0rYx4gsFfpdubeSluKGMps=
Subject key identifier: 4A:88:88:3B:43:5B:C8:1A:43:16:E9:F3:E2:0E:62:5A:D8:29:B4:E3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SoiIO0NbyBpDFunz4g5iWtgptOM.roa
Signing time: Thu 15 Sep 2022 02:45:43 +0000
ROA not before: Thu 15 Sep 2022 02:45:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.4.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4A88883B435BC81A4316E9F3E20E625AD829B4E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:98:70:43:69:9e:44:49:b1:71:09:2f:e8:2b:
44:49:3e:83:f8:09:bc:ac:4c:a1:e6:d0:b3:7b:2c:
ef:2b:7e:66:9b:50:25:28:21:f9:87:e0:d0:7a:a7:
f5:96:b4:eb:e6:6a:f6:bb:59:7f:63:c7:82:55:19:
cf:42:bf:c8:8f:49:f3:af:ad:10:34:37:cc:33:c9:
5e:09:3c:ad:f0:6f:b7:3a:24:d7:d2:31:b9:ff:a2:
bc:6e:d1:08:be:35:3e:02:97:4a:8c:21:e6:42:ad:
c8:5f:0a:86:e4:06:a9:26:0f:bd:d0:bf:a4:09:88:
de:25:51:7c:5e:c0:ea:5d:15:58:72:31:94:a4:fb:
85:db:f8:cf:8e:ac:e0:4f:c4:5b:36:0e:79:64:16:
07:89:87:5d:c8:e3:08:80:22:a3:aa:0e:30:1c:51:
e8:9a:7c:eb:61:c8:5b:65:d3:b2:28:c4:e7:b7:d6:
16:a5:e8:1d:a8:29:b7:9a:f0:28:cb:08:4b:b5:ba:
3f:df:cc:d0:b6:85:ed:28:aa:14:27:89:58:2f:82:
10:97:2d:0c:93:49:58:12:e6:de:4b:c3:15:8c:c4:
1e:12:43:22:22:c6:a5:44:e2:28:d8:ad:64:0f:3f:
4b:f5:03:8f:0d:3b:a3:83:b3:af:75:6c:65:e4:9e:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:88:88:3B:43:5B:C8:1A:43:16:E9:F3:E2:0E:62:5A:D8:29:B4:E3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SoiIO0NbyBpDFunz4g5iWtgptOM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.4.0/22
Signature Algorithm: sha256WithRSAEncryption
06:fe:44:8e:0a:29:f7:e3:6a:da:7b:14:c0:a0:28:cb:c8:3e:
8a:52:12:b8:8e:a5:5f:6b:ea:b9:87:7e:fb:e0:e3:fa:ad:99:
41:6c:94:27:92:f7:07:e3:98:45:92:69:8d:67:23:9d:ce:c0:
71:2b:08:63:07:61:e4:a2:6f:aa:08:8c:70:5d:1f:9e:1d:f1:
25:b9:48:fa:af:1b:ea:1c:41:d8:23:45:8c:ad:ee:f1:68:a7:
9b:19:db:95:0a:c6:66:d1:33:bc:13:07:b7:b4:81:9c:0f:19:
f1:c7:e6:5f:1c:40:e9:88:45:35:f8:74:71:6f:0e:5d:87:56:
71:12:c1:80:58:9a:bb:ef:c9:c3:60:a0:0d:f9:a7:91:eb:ae:
bd:d7:74:58:2e:bb:0a:a6:ca:fc:40:dc:6d:ad:28:b2:b3:f0:
85:06:d3:e0:03:6c:d4:80:37:a4:99:37:a1:5b:6a:6e:63:db:
e6:c5:85:a9:5f:bc:76:36:57:2b:31:46:f6:18:5b:01:30:60:
18:c3:06:c9:e9:4d:17:94:4e:d5:21:cb:33:29:9d:d1:2e:82:
9b:de:aa:6c:e3:72:9f:2c:0d:4c:c6:1b:13:89:5f:88:25:9b:
71:2e:f8:20:74:2d:4d:bb:87:3f:73:fb:c6:b9:b7:e2:f5:40:
0d:70:48:c2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1NDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDRBODg4ODNCNDM1QkM4
MUE0MzE2RTlGM0UyMEU2MjVBRDgyOUI0RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4mHBDaZ5ESbFxCS/oK0RJPoP4CbysTKHm0LN7LO8rfmabUCUo
IfmH4NB6p/WWtOvmava7WX9jx4JVGc9Cv8iPSfOvrRA0N8wzyV4JPK3wb7c6JNfS
Mbn/orxu0Qi+NT4Cl0qMIeZCrchfCobkBqkmD73Qv6QJiN4lUXxewOpdFVhyMZSk
+4Xb+M+OrOBPxFs2DnlkFgeJh13I4wiAIqOqDjAcUeiafOthyFtl07IoxOe31hal
6B2oKbea8CjLCEu1uj/fzNC2he0oqhQniVgvghCXLQyTSVgS5t5LwxWMxB4SQyIi
xqVE4ijYrWQPP0v1A48NO6ODs691bGXknpVVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUSoiIO0NbyBpDFunz4g5iWtgptOMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1NvaUlPME5ieUJwREZ1bno0
ZzVpV3RncHRPTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6AQwDQYJKoZIhvcNAQELBQADggEBAAb+RI4KKffjatp7FMCgKMvIPopSEriOpV9r
6rmHfvvg4/qtmUFslCeS9wfjmEWSaY1nI53OwHErCGMHYeSib6oIjHBdH54d8SW5
SPqvG+ocQdgjRYyt7vFop5sZ25UKxmbRM7wTB7e0gZwPGfHH5l8cQOmIRTX4dHFv
Dl2HVnESwYBYmrvvycNgoA35p5Hrrr3XdFguuwqmyvxA3G2tKLKz8IUG0+ADbNSA
N6SZN6Fbam5j2+bFhalfvHY2VysxRvYYWwEwYBjDBsnpTReUTtUhyzMpndEugpve
qmzjcp8sDUzGGxOJX4glm3Eu+CB0LU27hz9z+8a5t+L1QA1wSMI=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:20 2023 by rpki-client on console-ams.rpki-client.org