Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TF_NGMLYySWFxGismYMRUAuQzGA.roa
File: TF_NGMLYySWFxGismYMRUAuQzGA.roa (raw, json)
Hash identifier: awwp6AEZx24muEZ+DvkXgLIbv2q3Qr6WcFkrlJz4exM=
Subject key identifier: 4C:5F:CD:18:C2:D8:C9:25:85:C4:68:AC:99:83:11:50:0B:90:CC:60
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 214D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TF_NGMLYySWFxGismYMRUAuQzGA.roa
Signing time: Fri 25 Nov 2022 04:39:45 +0000
ROA not before: Fri 25 Nov 2022 04:39:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.156.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8525 (0x214d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4C5FCD18C2D8C92585C468AC998311500B90CC60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:73:aa:d5:6f:06:0c:a8:45:02:77:6f:bc:f4:
4c:0e:f1:32:3c:3b:4c:04:63:5f:c0:2a:7b:ac:98:
7f:8a:1f:8e:13:e9:8e:a8:b6:fb:f1:e9:28:48:42:
63:17:d5:2b:d8:44:8b:71:c5:09:79:2d:95:54:1d:
5c:52:35:d6:b6:79:cb:b6:cb:d5:cc:88:bc:2f:c7:
84:99:d3:74:0a:d9:21:70:c8:57:a1:af:21:34:ce:
8c:f3:6d:a9:db:0c:3f:73:e5:58:31:2b:49:af:09:
38:cf:67:2b:91:d6:d0:08:cc:88:19:2e:3b:c1:a1:
eb:13:3b:3b:fa:e1:54:7a:8f:ca:5e:19:3c:b6:1a:
10:e6:34:a3:53:c3:05:02:d5:1e:1b:38:c4:2b:87:
72:2e:cd:30:40:0c:28:5b:fe:33:2d:3d:6b:1d:af:
1a:10:4c:92:d4:a6:24:a2:29:3a:1e:46:6c:1d:55:
b5:e5:37:47:10:8d:b5:0d:2a:f0:b8:ad:f4:ea:d0:
37:43:c9:a2:b6:6a:d3:b4:9b:3e:ff:08:51:ca:77:
e4:9b:99:24:f6:4f:b2:0d:42:cf:95:8b:95:f1:e8:
de:d2:30:42:dd:41:26:a0:be:1e:75:5c:ad:f1:84:
69:03:86:51:93:20:5a:64:9d:62:37:6f:84:5e:16:
a0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5F:CD:18:C2:D8:C9:25:85:C4:68:AC:99:83:11:50:0B:90:CC:60
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TF_NGMLYySWFxGismYMRUAuQzGA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.156.0/22
Signature Algorithm: sha256WithRSAEncryption
74:cf:f2:08:bd:0b:72:52:68:bc:f5:86:b1:0c:d3:51:29:d1:
32:fb:70:a6:e6:50:b7:b5:7f:eb:3e:a7:1d:1d:97:7d:34:53:
9b:7f:97:41:76:79:59:27:f5:ac:f6:67:5a:9e:81:69:43:f1:
8b:2f:f3:6e:42:be:eb:2f:84:de:65:0a:f4:f8:66:af:3e:b7:
56:04:ea:39:00:39:2d:d0:54:90:16:1d:1b:1c:36:27:9c:ec:
f2:6c:9e:fe:50:ea:2e:06:e5:bf:58:5b:c6:63:45:07:b7:db:
5f:e9:a9:f2:ac:d3:7a:ff:88:fd:9e:fa:3c:16:12:35:fc:f5:
9d:c5:0a:e2:a8:ae:f7:21:9e:b0:13:47:3b:17:86:45:3c:6b:
7d:26:04:60:44:7c:14:a1:46:d6:5d:c1:cf:e0:fd:60:72:34:
60:73:7d:1f:08:93:a8:cf:a3:bb:ab:2e:c9:7a:22:20:68:8c:
7a:70:d9:cf:21:0a:a3:ac:97:ba:40:fe:e9:68:bd:37:52:99:
58:81:ab:d7:74:41:d5:14:f5:b1:d8:c1:04:b1:b6:20:a9:62:
6e:f3:d2:69:db:f6:21:97:ba:e1:fc:26:9a:ec:57:3c:31:2b:
c0:28:70:d2:ba:6b:14:f9:5c:8d:13:69:c4:9e:bf:9e:4d:a6:
d9:92:87:d8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIU0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5NDVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDRDNUZDRDE4QzJEOEM5
MjU4NUM0NjhBQzk5ODMxMTUwMEI5MENDNjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUc6rVbwYMqEUCd2+89EwO8TI8O0wEY1/AKnusmH+KH44T6Y6o
tvvx6ShIQmMX1SvYRItxxQl5LZVUHVxSNda2ecu2y9XMiLwvx4SZ03QK2SFwyFeh
ryE0zozzbanbDD9z5VgxK0mvCTjPZyuR1tAIzIgZLjvBoesTOzv64VR6j8peGTy2
GhDmNKNTwwUC1R4bOMQrh3IuzTBADChb/jMtPWsdrxoQTJLUpiSiKToeRmwdVbXl
N0cQjbUNKvC4rfTq0DdDyaK2atO0mz7/CFHKd+SbmST2T7INQs+Vi5Xx6N7SMELd
QSagvh51XK3xhGkDhlGTIFpknWI3b4ReFqA/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUTF/NGMLYySWFxGismYMRUAuQzGAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1RGX05HTUxZeVNXRnhHaXNt
WU1SVUF1UXpHQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wpwwDQYJKoZIhvcNAQELBQADggEBAHTP8gi9C3JSaLz1hrEM01Ep0TL7cKbmULe1
f+s+px0dl300U5t/l0F2eVkn9az2Z1qegWlD8Ysv825CvusvhN5lCvT4Zq8+t1YE
6jkAOS3QVJAWHRscNiec7PJsnv5Q6i4G5b9YW8ZjRQe321/pqfKs03r/iP2e+jwW
EjX89Z3FCuKorvchnrATRzsXhkU8a30mBGBEfBShRtZdwc/g/WByNGBzfR8Ik6jP
o7urLsl6IiBojHpw2c8hCqOsl7pA/ulovTdSmViBq9d0QdUU9bHYwQSxtiCpYm7z
0mnb9iGXuuH8JprsVzwxK8AocNK6axT5XI0TacSev55NptmSh9g=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:28 2023 by rpki-client on console-ams.rpki-client.org