Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VNotCvLij1D4L3T2wHAWnn_4pnY.roa
File: VNotCvLij1D4L3T2wHAWnn_4pnY.roa (raw, json)
Hash identifier: ZJQR5WtASuA/KWptELeGyI7UjodFr7wkTg+xFgKnuiU=
Subject key identifier: 54:DA:2D:0A:F2:E2:8F:50:F8:2F:74:F6:C0:70:16:9E:7F:F8:A6:76
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2044
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VNotCvLij1D4L3T2wHAWnn_4pnY.roa
Signing time: Fri 25 Nov 2022 04:38:31 +0000
ROA not before: Fri 25 Nov 2022 04:38:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.236.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8260 (0x2044)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=54DA2D0AF2E28F50F82F74F6C070169E7FF8A676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e3:b7:81:f2:23:27:32:d3:7d:88:cb:c2:36:
b7:cc:a4:19:8c:b8:3e:d2:57:55:b8:4b:74:65:b1:
cf:a8:d7:bc:7f:ca:6a:10:40:16:8c:80:82:bd:91:
d3:74:d6:c8:bf:64:b9:7a:36:93:57:eb:0f:b5:83:
1e:58:09:fd:fa:34:c6:c0:a7:29:dd:27:ec:05:01:
b7:34:fe:42:41:98:c7:41:4e:9e:94:47:a2:f5:55:
b6:19:ad:32:60:e4:76:ec:1c:39:0b:71:89:1b:3d:
7c:03:10:67:1f:26:72:e0:9b:f7:c5:3f:05:fe:49:
48:3a:20:6a:68:d3:8c:c4:a0:a7:b9:7c:be:d2:fa:
a9:88:ac:fa:ce:50:31:e4:ec:bf:85:97:86:ec:33:
ab:34:48:82:5c:df:da:06:6d:27:8a:16:c5:ef:b5:
80:b5:2b:ba:f2:86:5a:b8:da:41:f1:1c:7a:d0:a9:
6c:bb:d3:d2:31:cb:e1:62:7f:44:36:7d:a9:36:8b:
cc:08:9f:57:8f:3c:c3:94:ab:c1:ad:7b:3f:54:6f:
f5:15:ed:4b:af:5f:be:64:40:e3:a6:b5:12:2e:2e:
d1:61:1e:68:0a:b5:9c:df:71:ab:e5:76:09:ff:5a:
5b:9f:e3:fb:e2:fe:d8:ae:0c:6f:1d:da:a8:2f:fd:
88:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DA:2D:0A:F2:E2:8F:50:F8:2F:74:F6:C0:70:16:9E:7F:F8:A6:76
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VNotCvLij1D4L3T2wHAWnn_4pnY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.236.0/23
Signature Algorithm: sha256WithRSAEncryption
93:7f:a7:47:46:3a:fd:61:2d:bc:7f:3f:cd:e5:cf:5c:fd:24:
70:ad:0b:f3:16:29:e5:2b:c0:0a:1c:bd:de:0f:5f:65:f0:66:
ae:19:cd:37:a0:2f:00:0c:d0:fe:2a:20:45:9c:a3:f5:72:77:
4e:07:79:e1:7a:67:c4:f2:2c:01:4c:a7:16:41:04:8f:4b:73:
c4:d2:74:5d:f6:b1:a0:af:c6:42:32:b3:fa:13:77:8c:04:1b:
25:3b:cb:60:c7:ea:f3:c2:e7:e1:6f:51:7b:83:0e:31:0f:d4:
aa:01:64:68:75:0b:5a:1c:8c:c8:b0:13:f4:12:54:f1:58:dd:
f7:94:b3:57:b3:bb:ff:3e:bd:2b:28:cd:39:43:82:a3:08:e8:
77:33:a8:c5:55:81:88:80:9f:31:0a:f1:7a:d6:e2:04:f4:7a:
a4:64:37:4e:66:4c:bb:9a:a4:54:1a:38:5b:c0:3b:0e:6f:22:
38:5c:d2:6b:f8:21:25:70:d0:81:1b:7b:0f:38:b9:97:2c:bf:
e7:5c:71:7b:80:e8:89:80:1f:b1:64:ea:50:a0:dd:a2:d4:2b:
ec:3f:84:85:a2:ae:2e:eb:68:cc:91:8b:89:db:61:77:5d:e9:
da:d5:6f:cb:8c:32:de:21:fd:c6:4f:2a:bf:86:5b:f5:1d:3a:
ca:7e:d4:23
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIEQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4MzFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDU0REEyRDBBRjJFMjhG
NTBGODJGNzRGNkMwNzAxNjlFN0ZGOEE2NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDV47eB8iMnMtN9iMvCNrfMpBmMuD7SV1W4S3Rlsc+o17x/ymoQ
QBaMgIK9kdN01si/ZLl6NpNX6w+1gx5YCf36NMbApyndJ+wFAbc0/kJBmMdBTp6U
R6L1VbYZrTJg5HbsHDkLcYkbPXwDEGcfJnLgm/fFPwX+SUg6IGpo04zEoKe5fL7S
+qmIrPrOUDHk7L+Fl4bsM6s0SIJc39oGbSeKFsXvtYC1K7ryhlq42kHxHHrQqWy7
09Ixy+Fif0Q2fak2i8wIn1ePPMOUq8Gtez9Ub/UV7UuvX75kQOOmtRIuLtFhHmgK
tZzfcavldgn/Wluf4/vi/tiuDG8d2qgv/Yh3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUVNotCvLij1D4L3T2wHAWnn/4pnYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZOb3RDdkxpajFENEwzVDJ3
SEFXbm5fNHBuWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq
AewwDQYJKoZIhvcNAQELBQADggEBAJN/p0dGOv1hLbx/P83lz1z9JHCtC/MWKeUr
wAocvd4PX2XwZq4ZzTegLwAM0P4qIEWco/Vyd04HeeF6Z8TyLAFMpxZBBI9Lc8TS
dF32saCvxkIys/oTd4wEGyU7y2DH6vPC5+FvUXuDDjEP1KoBZGh1C1ocjMiwE/QS
VPFY3feUs1ezu/8+vSsozTlDgqMI6HczqMVVgYiAnzEK8XrW4gT0eqRkN05mTLua
pFQaOFvAOw5vIjhc0mv4ISVw0IEbew84uZcsv+dccXuA6ImAH7Fk6lCg3aLUK+w/
hIWiri7raMyRi4nbYXdd6drVb8uMMt4h/cZPKr+GW/UdOsp+1CM=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:05 2023 by rpki-client on console-fra.rpki-client.org