Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VeyHTlQiWm8L1L475-hBVUBOXac.roa
File: VeyHTlQiWm8L1L475-hBVUBOXac.roa (raw, json)
Hash identifier: +UIBDSfgKGjTP+tYYtmxuAHHwKY4nW1B+UyG+0oKbSk=
Subject key identifier: 55:EC:87:4E:54:22:5A:6F:0B:D4:BE:3B:E7:E8:41:55:40:4E:5D:A7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VeyHTlQiWm8L1L475-hBVUBOXac.roa
Signing time: Thu 15 Sep 2022 02:45:27 +0000
ROA not before: Thu 15 Sep 2022 02:45:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.208.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=55EC874E54225A6F0BD4BE3BE7E84155404E5DA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:25:50:42:bd:53:c0:f4:1a:93:bc:72:4f:
eb:05:84:df:a8:b0:a2:ff:52:db:8e:da:22:f5:6d:
ca:4f:36:eb:61:80:4c:a1:82:f0:ed:fe:11:26:be:
e5:10:2c:ea:4e:50:92:cd:26:5f:99:71:6a:e7:a5:
7e:cf:9b:29:57:49:e0:bb:a1:d0:2e:b3:26:7e:32:
97:e9:be:90:28:48:dd:94:08:07:2b:48:79:8f:da:
f7:07:df:a9:11:21:09:b8:ad:7a:61:47:fe:ba:50:
db:a8:64:34:4d:de:2c:ec:df:bb:75:8b:7c:00:7c:
6b:9c:48:91:71:14:98:95:bc:e9:95:46:90:6e:b1:
d6:4f:7a:d0:49:96:65:7d:d4:d7:42:49:22:35:5a:
5c:73:68:cc:e6:73:62:76:e1:24:47:bc:3f:5a:8a:
3d:2b:b2:ec:a1:5a:55:89:2a:08:04:f1:99:4a:97:
3c:32:5f:3b:aa:60:ff:14:30:e9:1b:11:1f:34:93:
81:ec:00:f8:bc:cd:85:83:d1:44:bb:66:8e:14:3f:
e4:41:9f:59:16:48:91:6c:dd:a3:5c:0b:69:46:8d:
2c:34:2f:ca:09:0c:a8:e0:4b:9d:cb:a5:4c:43:ad:
f1:75:d8:b4:9d:8b:82:58:4f:1b:47:75:79:56:bc:
4c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EC:87:4E:54:22:5A:6F:0B:D4:BE:3B:E7:E8:41:55:40:4E:5D:A7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VeyHTlQiWm8L1L475-hBVUBOXac.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.208.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:cd:ca:1d:bc:d4:a7:82:9e:92:98:31:d4:6e:71:2d:52:12:
44:d2:5a:3d:f6:b9:18:13:c6:9e:a0:fb:da:0e:f6:a7:ea:d3:
5c:fd:51:08:54:a7:0a:51:f6:9f:68:8e:fa:41:8b:78:d3:5d:
c6:b5:ed:c8:85:0b:dc:98:e1:ee:22:12:30:56:53:66:9f:d0:
13:c2:ff:35:8e:8a:89:6f:5d:ee:03:9d:01:8a:49:92:cb:cc:
2b:6a:a4:24:38:fe:db:f6:e3:aa:b5:44:17:53:18:37:cc:77:
d3:30:7e:e9:84:c3:0c:95:d6:cb:a0:c0:6d:16:8f:cb:13:7a:
65:19:ca:18:50:ac:99:d8:31:95:d7:ee:c3:bb:9a:28:dc:d0:
49:14:5a:43:c1:a7:28:b4:df:d1:12:1f:e8:e6:81:f1:99:cd:
2e:a3:c0:0f:b2:a9:54:b0:89:b4:43:9f:dc:97:b7:1c:40:84:
68:af:7b:f5:eb:65:f6:2f:04:17:d9:02:e5:9b:85:b4:e3:e6:
63:70:cc:f0:20:28:6c:af:06:04:a9:13:77:ae:d5:5a:e1:54:
51:00:30:e8:f1:a3:6b:e5:a3:54:b8:7f:67:3e:ea:ad:ba:c1:
4d:de:fe:b2:ce:6f:b8:73:61:0c:df:f9:d5:f4:c2:16:09:09:
1d:dd:16:62
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1MjdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDU1RUM4NzRFNTQyMjVB
NkYwQkQ0QkUzQkU3RTg0MTU1NDA0RTVEQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCi9SVQQr1TwPQak7xyT+sFhN+osKL/UtuO2iL1bcpPNuthgEyh
gvDt/hEmvuUQLOpOUJLNJl+ZcWrnpX7PmylXSeC7odAusyZ+MpfpvpAoSN2UCAcr
SHmP2vcH36kRIQm4rXphR/66UNuoZDRN3izs37t1i3wAfGucSJFxFJiVvOmVRpBu
sdZPetBJlmV91NdCSSI1WlxzaMzmc2J24SRHvD9aij0rsuyhWlWJKggE8ZlKlzwy
XzuqYP8UMOkbER80k4HsAPi8zYWD0US7Zo4UP+RBn1kWSJFs3aNcC2lGjSw0L8oJ
DKjgS53LpUxDrfF12LSdi4JYTxtHdXlWvEw3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUVeyHTlQiWm8L1L475+hBVUBOXacwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZleUhUbFFpV204TDFMNDc1
LWhCVlVCT1hhYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wNAwDQYJKoZIhvcNAQELBQADggEBAB/Nyh281KeCnpKYMdRucS1SEkTSWj32uRgT
xp6g+9oO9qfq01z9UQhUpwpR9p9ojvpBi3jTXca17ciFC9yY4e4iEjBWU2af0BPC
/zWOiolvXe4DnQGKSZLLzCtqpCQ4/tv246q1RBdTGDfMd9MwfumEwwyV1sugwG0W
j8sTemUZyhhQrJnYMZXX7sO7mijc0EkUWkPBpyi039ESH+jmgfGZzS6jwA+yqVSw
ibRDn9yXtxxAhGive/XrZfYvBBfZAuWbhbTj5mNwzPAgKGyvBgSpE3eu1VrhVFEA
MOjxo2vlo1S4f2c+6q26wU3e/rLOb7hzYQzf+dX0whYJCR3dFmI=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:30 2023 by rpki-client on console-fra.rpki-client.org