Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WQr3qH0U1oCrzok4YlUs8UgzeAA.roa
File: WQr3qH0U1oCrzok4YlUs8UgzeAA.roa (raw, json)
Hash identifier: 7vBhFoYz6hp7hHGuUZxB91NZxYuTN3nKILbuq7+CmQg=
Subject key identifier: 59:0A:F7:A8:7D:14:D6:80:AB:CE:89:38:62:55:2C:F1:48:33:78:00
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20DD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WQr3qH0U1oCrzok4YlUs8UgzeAA.roa
Signing time: Fri 25 Nov 2022 04:39:12 +0000
ROA not before: Fri 25 Nov 2022 04:39:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.16.0/20 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8413 (0x20dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=590AF7A87D14D680ABCE893862552CF148337800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:de:47:bb:a5:af:04:33:57:b1:e8:8d:94:40:
67:a0:5a:95:27:64:3c:80:18:ff:56:5c:55:a5:9c:
75:3c:bd:99:85:f1:cc:c7:c3:b0:45:6f:7c:31:c0:
b4:fa:f3:ab:3a:ae:11:28:c6:99:d6:12:1d:29:7f:
f1:18:81:78:25:45:42:c2:65:7e:e8:7b:8e:38:f0:
ee:20:41:93:d0:3e:6d:da:4e:b3:e2:b7:34:73:34:
31:4e:e5:c6:c1:76:bb:12:89:17:3e:00:d2:f6:18:
b5:94:cf:e4:e8:81:78:ad:c3:bd:d3:fc:3a:5c:72:
f9:90:9e:5c:d2:70:0e:d6:fd:f6:ba:f6:da:d1:65:
5f:21:0a:d7:47:cf:52:94:00:bc:00:f5:2a:2d:98:
90:73:be:7c:c9:93:17:d4:70:a1:00:74:17:8e:d2:
3e:14:23:9b:e8:de:c5:a5:13:73:f5:82:b5:dc:fa:
6c:bc:5f:7b:65:ae:88:35:63:a7:8f:95:d1:19:76:
c7:c2:3e:49:39:e0:21:9e:34:39:a4:90:dc:64:1a:
ab:97:b0:d5:d0:11:3c:0d:2e:c8:60:dd:c0:06:99:
8c:35:8e:7a:67:99:db:05:69:80:ba:84:8a:21:3a:
f4:e6:c6:2a:de:1c:53:7c:dc:b6:f2:3b:e5:16:c9:
7c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0A:F7:A8:7D:14:D6:80:AB:CE:89:38:62:55:2C:F1:48:33:78:00
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WQr3qH0U1oCrzok4YlUs8UgzeAA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.16.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:3d:dc:4e:ec:4d:98:2f:03:9a:18:3d:c1:0f:5c:f0:a7:a3:
65:87:52:3f:b6:90:77:fa:f4:43:60:c9:c1:f0:18:a7:8b:a4:
21:33:b4:95:57:b7:01:89:f1:b2:2d:b4:42:dd:50:6f:1e:77:
34:db:95:3a:04:e6:12:87:96:14:52:a2:19:84:d5:2e:52:f2:
e6:79:e4:f7:c8:98:80:3e:43:f4:09:a5:0c:3a:5e:5e:74:7f:
33:de:ba:41:67:bb:18:f7:2f:85:5b:11:f5:9a:65:e8:3c:40:
e8:94:32:6f:ad:1d:9f:39:cc:30:50:8c:2d:03:fd:7b:c7:8a:
3f:fb:dd:27:63:5e:43:a6:1b:6c:12:aa:31:6d:2b:cb:ad:69:
05:96:45:9c:5e:d6:49:d5:85:14:15:16:69:74:48:ac:1b:e9:
cb:a2:af:d8:66:8d:ad:33:5c:f5:81:c5:2f:e4:ca:b3:d9:42:
62:ce:81:bb:84:a3:05:7d:5d:97:ec:56:4a:fb:f1:67:60:d3:
80:df:d7:9d:6e:33:ac:d4:1b:39:50:f8:74:c2:c5:02:f1:37:
86:9e:78:ad:22:84:07:a1:62:7a:07:69:4d:0f:5a:3f:f9:77:
1b:d2:54:2c:d6:89:2f:bf:0a:eb:0a:07:74:33:f9:86:37:c7:
40:7f:aa:02
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIN0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MTJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDU5MEFGN0E4N0QxNEQ2
ODBBQkNFODkzODYyNTUyQ0YxNDgzMzc4MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDM3ke7pa8EM1ex6I2UQGegWpUnZDyAGP9WXFWlnHU8vZmF8czH
w7BFb3wxwLT686s6rhEoxpnWEh0pf/EYgXglRULCZX7oe4448O4gQZPQPm3aTrPi
tzRzNDFO5cbBdrsSiRc+ANL2GLWUz+TogXitw73T/DpccvmQnlzScA7W/fa69trR
ZV8hCtdHz1KUALwA9SotmJBzvnzJkxfUcKEAdBeO0j4UI5vo3sWlE3P1grXc+my8
X3tlrog1Y6ePldEZdsfCPkk54CGeNDmkkNxkGquXsNXQETwNLshg3cAGmYw1jnpn
mdsFaYC6hIohOvTmxireHFN83LbyO+UWyXz1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUWQr3qH0U1oCrzok4YlUs8UgzeAAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1dRcjNxSDBVMW9DcnpvazRZ
bFVzOFVnemVBQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
whAwDQYJKoZIhvcNAQELBQADggEBAC493E7sTZgvA5oYPcEPXPCno2WHUj+2kHf6
9ENgycHwGKeLpCEztJVXtwGJ8bIttELdUG8edzTblToE5hKHlhRSohmE1S5S8uZ5
5PfImIA+Q/QJpQw6Xl50fzPeukFnuxj3L4VbEfWaZeg8QOiUMm+tHZ85zDBQjC0D
/XvHij/73SdjXkOmG2wSqjFtK8utaQWWRZxe1knVhRQVFml0SKwb6cuir9hmja0z
XPWBxS/kyrPZQmLOgbuEowV9XZfsVkr78Wdg04Df151uM6zUGzlQ+HTCxQLxN4ae
eK0ihAehYnoHaU0PWj/5dxvSVCzWiS+/CusKB3Qz+YY3x0B/qgI=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:28 2023 by rpki-client on console-ams.rpki-client.org