Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VrQLvQwau0HkEn6-2Y84eNkXyoo.roa
File: VrQLvQwau0HkEn6-2Y84eNkXyoo.roa (raw, json)
Hash identifier: gBou5krsJpQkSHu8m9rYmL7LeWBqFeDL9gbn2RgAhLg=
Subject key identifier: 56:B4:0B:BD:0C:1A:BB:41:E4:12:7E:BE:D9:8F:38:78:D9:17:CA:8A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2200
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VrQLvQwau0HkEn6-2Y84eNkXyoo.roa
Signing time: Fri 25 Nov 2022 04:40:39 +0000
ROA not before: Fri 25 Nov 2022 04:40:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 211.76.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8704 (0x2200)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=56B40BBD0C1ABB41E4127EBED98F3878D917CA8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:73:cc:dd:4b:63:7a:e8:13:89:46:1e:92:f5:
78:5e:9c:9a:e0:28:9c:0c:a5:6b:d3:72:3e:21:2f:
6b:e9:76:82:f9:ea:fd:95:d1:53:4e:96:d1:8f:f2:
46:ab:0d:0d:97:17:32:14:28:5c:18:7e:7e:0e:d5:
64:bb:e3:ba:28:62:9d:bf:65:48:b5:c8:d0:e5:c0:
1f:d2:b6:1a:77:32:ed:c7:f3:4a:ef:f9:20:02:e1:
9f:40:20:23:0d:1a:80:48:8d:96:b5:5e:60:f8:32:
83:04:fb:7e:e5:0b:3a:99:2b:34:af:0e:9c:a9:6f:
c3:6d:17:55:1d:02:9c:09:ba:53:51:e9:68:fd:3e:
2d:38:16:15:f5:fa:d1:c4:5f:8c:4e:e1:6c:9a:8e:
6a:86:c3:8b:66:3e:35:e0:b3:da:45:c0:13:4e:9a:
14:60:53:a9:07:93:12:e4:c0:b6:35:4f:59:9b:b6:
30:4a:e5:e1:32:f5:16:5d:20:5a:ce:95:39:01:38:
04:78:5d:1e:0c:e2:2d:46:5a:ba:a4:8a:9b:6a:02:
ad:2a:df:70:ed:02:79:45:76:5a:f8:13:e4:d8:56:
d3:aa:4d:b7:37:60:33:d2:f9:96:be:58:17:7a:a8:
a0:e9:48:bb:50:6a:2f:0c:98:6f:3e:4f:ec:06:79:
18:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B4:0B:BD:0C:1A:BB:41:E4:12:7E:BE:D9:8F:38:78:D9:17:CA:8A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VrQLvQwau0HkEn6-2Y84eNkXyoo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.115.0/24
Signature Algorithm: sha256WithRSAEncryption
29:fc:d0:4b:21:f0:75:56:d8:07:83:5f:d6:61:87:a8:d6:d3:
09:6b:63:ea:bb:db:52:17:f2:7d:73:1d:e0:0f:cc:b7:7f:4c:
14:04:02:82:bc:7f:5e:32:ff:6e:2b:a7:2b:58:ab:10:9d:25:
8d:a0:29:97:be:4a:cc:29:0e:17:3d:4c:09:44:e4:b5:05:a5:
30:4a:2f:16:30:53:80:ff:0a:7e:b9:fd:6a:47:cb:a9:e2:fe:
50:e5:3c:04:4b:85:ff:0d:78:9d:4c:be:d4:53:6c:f4:81:20:
2f:63:6b:b6:6a:88:9c:78:fc:59:be:ab:9c:51:a4:6a:8f:12:
97:c7:5a:e3:0d:81:9a:6d:a3:b8:f9:6b:dc:74:c9:cf:c7:c3:
c7:c9:eb:fc:2f:53:c0:5f:c0:5e:4e:29:74:d6:eb:2c:3c:4f:
fd:32:43:87:99:c6:4a:d2:ae:d0:6b:8c:e5:0e:1c:ab:b5:6d:
44:6e:95:97:0e:be:40:c3:0b:05:6e:06:da:d3:f9:37:dd:e8:
8c:fb:b8:52:e3:8c:84:0c:c0:0f:ca:86:4c:44:f9:f8:40:22:
a3:fa:09:10:d8:64:be:d7:73:3b:33:37:da:76:a5:91:5f:86:
12:a8:58:01:5c:4a:60:0d:db:8e:08:0b:b5:9e:4d:08:3e:5a:
10:42:7d:b0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIgAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwMzlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDU2QjQwQkJEMEMxQUJC
NDFFNDEyN0VCRUQ5OEYzODc4RDkxN0NBOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhc8zdS2N66BOJRh6S9XhenJrgKJwMpWvTcj4hL2vpdoL56v2V
0VNOltGP8karDQ2XFzIUKFwYfn4O1WS747ooYp2/ZUi1yNDlwB/Sthp3Mu3H80rv
+SAC4Z9AICMNGoBIjZa1XmD4MoME+37lCzqZKzSvDpypb8NtF1UdApwJulNR6Wj9
Pi04FhX1+tHEX4xO4WyajmqGw4tmPjXgs9pFwBNOmhRgU6kHkxLkwLY1T1mbtjBK
5eEy9RZdIFrOlTkBOAR4XR4M4i1GWrqkiptqAq0q33DtAnlFdlr4E+TYVtOqTbc3
YDPS+Za+WBd6qKDpSLtQai8MmG8+T+wGeRiVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUVrQLvQwau0HkEn6+2Y84eNkXyoowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZyUUx2UXdhdTBIa0VuNi0y
WTg0ZU5rWHlvby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
THMwDQYJKoZIhvcNAQELBQADggEBACn80Esh8HVW2AeDX9Zhh6jW0wlrY+q721IX
8n1zHeAPzLd/TBQEAoK8f14y/24rpytYqxCdJY2gKZe+SswpDhc9TAlE5LUFpTBK
LxYwU4D/Cn65/WpHy6ni/lDlPARLhf8NeJ1MvtRTbPSBIC9ja7ZqiJx4/Fm+q5xR
pGqPEpfHWuMNgZpto7j5a9x0yc/Hw8fJ6/wvU8BfwF5OKXTW6yw8T/0yQ4eZxkrS
rtBrjOUOHKu1bURulZcOvkDDCwVuBtrT+Tfd6Iz7uFLjjIQMwA/KhkxE+fhAIqP6
CRDYZL7XczszN9p2pZFfhhKoWAFcSmAN244IC7WeTQg+WhBCfbA=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:28 2023 by rpki-client on console-ams.rpki-client.org