Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TT4Opr16ITC2GzD9xTeVgcjesWM.roa
File: TT4Opr16ITC2GzD9xTeVgcjesWM.roa (raw, json)
Hash identifier: LKdspMBzx4eNuDpKYO0nzGVjcwdcAZcc/+mu9xfg160=
Subject key identifier: 4D:3E:0E:A6:BD:7A:21:30:B6:1B:30:FD:C5:37:95:81:C8:DE:B1:63
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20FC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TT4Opr16ITC2GzD9xTeVgcjesWM.roa
Signing time: Fri 25 Nov 2022 04:39:22 +0000
ROA not before: Fri 25 Nov 2022 04:39:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.108.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8444 (0x20fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4D3E0EA6BD7A2130B61B30FDC5379581C8DEB163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:11:c2:f5:64:72:db:04:24:6a:39:10:52:6a:
af:ef:9a:6e:40:8f:6f:52:1d:3c:67:84:f8:a8:66:
d0:a5:cc:f4:3f:6e:fd:2b:fa:e4:54:c8:ae:99:84:
9f:5f:be:a2:69:bf:8a:91:bc:9c:39:39:8e:3e:07:
2a:11:02:51:b9:de:61:e5:79:b6:e5:75:e5:37:82:
13:8d:61:d1:10:3e:cd:a1:5b:1a:33:60:84:ef:45:
8f:a1:a4:52:dc:e1:ed:55:77:93:cc:b3:aa:7b:5e:
a2:82:69:1e:68:df:1c:45:a2:80:8d:43:0d:a7:2b:
b5:99:e3:80:b8:c3:92:73:40:ee:92:40:a3:05:00:
15:d0:aa:ac:9a:00:cf:03:95:d3:37:4b:44:fb:ca:
e0:f4:02:37:0e:0d:68:10:3e:63:ef:1d:87:d9:ff:
e7:b9:82:94:76:25:64:05:3b:06:7f:6f:f1:ce:5c:
a0:41:4a:fd:ea:50:02:87:ed:eb:97:c2:61:bc:04:
fe:e9:44:7a:22:7e:e6:f8:86:41:77:ca:f4:ee:2e:
d8:ad:4c:96:10:b5:53:7e:08:c2:6e:cb:c3:69:37:
0c:ad:49:bc:b4:87:87:af:d0:b5:c5:cf:7e:9d:23:
1e:d7:1b:ba:65:52:7d:74:22:ff:2f:be:9f:39:7d:
ec:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3E:0E:A6:BD:7A:21:30:B6:1B:30:FD:C5:37:95:81:C8:DE:B1:63
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TT4Opr16ITC2GzD9xTeVgcjesWM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.108.0/22
Signature Algorithm: sha256WithRSAEncryption
03:58:b7:7e:51:c6:40:88:dc:ca:ab:19:63:f6:44:73:01:a8:
4d:7f:58:3a:6a:d9:b7:03:99:c5:f2:0a:83:42:7d:89:d1:bb:
96:94:f9:fb:b0:af:a1:df:a9:14:5c:9a:28:45:42:0a:dc:02:
29:ab:43:b2:b6:96:ea:5d:90:27:51:f3:30:bf:dc:e2:93:2f:
27:73:2a:11:34:78:c3:ec:22:23:6f:fe:dc:97:aa:2a:28:4e:
65:10:5c:0d:8b:77:ce:44:e3:99:44:44:8e:ad:7c:d0:44:02:
75:e4:fe:ec:cc:31:60:6a:43:12:c4:9f:45:c4:99:91:85:47:
e0:89:86:d7:15:c1:d6:a4:b7:9c:28:7c:a2:17:be:2d:62:97:
3a:96:4f:c7:cb:07:30:3a:a4:b0:78:48:5a:0e:cc:48:f0:51:
cf:36:fc:41:06:6c:cb:56:d5:9a:90:5c:24:df:50:0d:d8:35:
8f:44:96:f7:43:0b:a6:dc:e4:7a:e4:b0:75:87:6e:36:10:d7:
a9:31:ec:b7:07:fb:4a:18:18:73:d7:66:86:a3:39:da:4c:11:
fe:60:d1:1c:08:9c:92:8a:87:27:74:1c:2b:13:f6:47:0c:ac:
b6:d2:ae:a4:a5:6f:46:c1:af:a9:39:df:7a:18:c7:61:72:bd:
11:e7:27:08
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIPwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MjJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDREM0UwRUE2QkQ3QTIx
MzBCNjFCMzBGREM1Mzc5NTgxQzhERUIxNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDiEcL1ZHLbBCRqORBSaq/vmm5Aj29SHTxnhPioZtClzPQ/bv0r
+uRUyK6ZhJ9fvqJpv4qRvJw5OY4+ByoRAlG53mHlebbldeU3ghONYdEQPs2hWxoz
YITvRY+hpFLc4e1Vd5PMs6p7XqKCaR5o3xxFooCNQw2nK7WZ44C4w5JzQO6SQKMF
ABXQqqyaAM8DldM3S0T7yuD0AjcODWgQPmPvHYfZ/+e5gpR2JWQFOwZ/b/HOXKBB
Sv3qUAKH7euXwmG8BP7pRHoifub4hkF3yvTuLtitTJYQtVN+CMJuy8NpNwytSby0
h4ev0LXFz36dIx7XG7plUn10Iv8vvp85feyRAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUTT4Opr16ITC2GzD9xTeVgcjesWMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1RUNE9wcjE2SVRDMkd6RDl4
VGVWZ2NqZXNXTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wmwwDQYJKoZIhvcNAQELBQADggEBAANYt35RxkCI3MqrGWP2RHMBqE1/WDpq2bcD
mcXyCoNCfYnRu5aU+fuwr6HfqRRcmihFQgrcAimrQ7K2lupdkCdR8zC/3OKTLydz
KhE0eMPsIiNv/tyXqiooTmUQXA2Ld85E45lERI6tfNBEAnXk/uzMMWBqQxLEn0XE
mZGFR+CJhtcVwdakt5wofKIXvi1ilzqWT8fLBzA6pLB4SFoOzEjwUc82/EEGbMtW
1ZqQXCTfUA3YNY9ElvdDC6bc5HrksHWHbjYQ16kx7LcH+0oYGHPXZoajOdpMEf5g
0RwInJKKhyd0HCsT9kcMrLbSrqSlb0bBr6k533oYx2FyvRHnJwg=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:05 2023 by rpki-client on console-fra.rpki-client.org