Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X8ac6u15FQK3A8xnwWdGrCUgX7Y.roa
File: X8ac6u15FQK3A8xnwWdGrCUgX7Y.roa (raw, json)
Hash identifier: csg7dVRvmJP99hCQWApBpMnaMQKE/4F7AGn4QOY4uJM=
Subject key identifier: 5F:C6:9C:EA:ED:79:15:02:B7:03:CC:67:C1:67:46:AC:25:20:5F:B6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20BF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X8ac6u15FQK3A8xnwWdGrCUgX7Y.roa
Signing time: Fri 25 Nov 2022 04:39:03 +0000
ROA not before: Fri 25 Nov 2022 04:39:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.208.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8383 (0x20bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5FC69CEAED791502B703CC67C16746AC25205FB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:61:2b:1f:db:cb:5c:92:6e:25:e2:a6:f0:
cc:54:99:9d:30:4a:de:74:d5:bd:65:bc:7c:d6:4f:
23:e4:53:13:34:29:31:32:48:5b:09:44:a7:3e:d8:
63:3f:f5:81:44:69:c1:8d:cf:79:04:34:15:d5:d9:
a5:69:a7:ba:2f:38:24:04:d1:9c:e2:56:92:47:fa:
c0:d1:ea:3d:a5:a2:e6:56:97:f2:7f:bb:71:f7:35:
36:c2:ef:ef:b6:a5:12:4e:f8:27:3e:d5:f7:0f:a4:
fb:9e:15:2d:84:41:f1:83:42:77:db:43:05:f0:1d:
97:d9:5f:fb:2a:cc:2b:68:23:ae:6a:56:ce:7c:c3:
34:9b:90:7b:02:7a:53:13:e3:04:77:4e:ce:67:40:
c9:2e:15:d8:50:82:cf:48:26:66:74:c1:43:89:24:
0b:cc:1a:b6:98:56:2d:f0:ca:2a:7e:c0:58:2b:97:
ee:a8:96:7f:32:ce:72:45:f1:f5:e6:60:e4:54:66:
45:42:ac:15:29:07:ac:ed:fb:e9:c0:8a:b7:c3:25:
f4:97:f0:cb:76:64:d3:b3:84:75:31:3b:7c:bb:24:
25:81:ae:96:1f:9e:c9:c7:b4:b9:a2:bc:c0:4c:8b:
31:ac:4c:d6:8a:f0:61:91:ca:06:70:35:c8:55:2e:
23:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C6:9C:EA:ED:79:15:02:B7:03:CC:67:C1:67:46:AC:25:20:5F:B6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X8ac6u15FQK3A8xnwWdGrCUgX7Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.208.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:23:9d:f7:8e:86:92:07:7c:1c:a0:be:5b:86:48:1d:6f:e3:
2d:e2:d1:c7:e1:72:02:9b:f7:a4:23:96:bc:b5:2d:ef:4b:b3:
09:1c:67:f9:a1:2c:a7:e4:af:3e:43:bb:0c:8e:11:60:52:95:
fd:77:43:1c:f8:b4:6d:e5:f9:63:3c:fc:6a:8b:6c:f6:1b:f6:
8f:13:b7:8e:4d:09:6c:9d:a9:38:4e:13:bd:90:f8:e5:50:c5:
e8:b5:e6:61:cb:1a:6b:2d:65:e2:6a:92:a9:28:5e:62:51:1c:
cc:c9:39:1d:11:40:70:72:1b:fd:f2:1b:fa:47:48:5b:ac:e3:
24:2b:8c:13:98:3e:d0:b1:3b:36:09:49:71:a7:76:20:03:58:
ec:11:b1:98:10:2d:15:95:d1:bf:07:aa:6b:c2:ea:b6:8f:ab:
1f:99:17:8d:4f:66:84:1f:71:41:23:a4:11:fe:cb:80:bf:16:
00:86:b2:fb:15:54:a6:ab:1e:1a:ae:95:c8:1d:c1:8e:42:fc:
71:29:e4:50:84:88:e7:7a:b4:9b:61:74:23:eb:86:12:95:c0:
00:fd:c3:82:75:44:52:8b:bb:7a:d5:4c:59:9f:3f:00:12:e3:
43:18:d6:45:14:a5:f9:81:a8:9f:de:d3:34:22:8c:6f:7d:7a:
f0:4e:91:6c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIL8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MDNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDVGQzY5Q0VBRUQ3OTE1
MDJCNzAzQ0M2N0MxNjc0NkFDMjUyMDVGQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBg2ErH9vLXJJuJeKm8MxUmZ0wSt501b1lvHzWTyPkUxM0KTEy
SFsJRKc+2GM/9YFEacGNz3kENBXV2aVpp7ovOCQE0ZziVpJH+sDR6j2louZWl/J/
u3H3NTbC7++2pRJO+Cc+1fcPpPueFS2EQfGDQnfbQwXwHZfZX/sqzCtoI65qVs58
wzSbkHsCelMT4wR3Ts5nQMkuFdhQgs9IJmZ0wUOJJAvMGraYVi3wyip+wFgrl+6o
ln8yznJF8fXmYORUZkVCrBUpB6zt++nAirfDJfSX8Mt2ZNOzhHUxO3y7JCWBrpYf
nsnHtLmivMBMizGsTNaK8GGRygZwNchVLiN3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUX8ac6u15FQK3A8xnwWdGrCUgX7YwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1g4YWM2dTE1RlFLM0E4eG53
V2RHckNVZ1g3WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wNAwDQYJKoZIhvcNAQELBQADggEBAC8jnfeOhpIHfBygvluGSB1v4y3i0cfhcgKb
96Qjlry1Le9LswkcZ/mhLKfkrz5DuwyOEWBSlf13Qxz4tG3l+WM8/GqLbPYb9o8T
t45NCWydqThOE72Q+OVQxei15mHLGmstZeJqkqkoXmJRHMzJOR0RQHByG/3yG/pH
SFus4yQrjBOYPtCxOzYJSXGndiADWOwRsZgQLRWV0b8HqmvC6raPqx+ZF41PZoQf
cUEjpBH+y4C/FgCGsvsVVKarHhqulcgdwY5C/HEp5FCEiOd6tJthdCPrhhKVwAD9
w4J1RFKLu3rVTFmfPwAS40MY1kUUpfmBqJ/e0zQijG99evBOkWw=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:06 2023 by rpki-client on console-fra.rpki-client.org