Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XywKQf3kMQoWCDRKdwrlvvVTVX0.roa
File: XywKQf3kMQoWCDRKdwrlvvVTVX0.roa (raw, json)
Hash identifier: aVBYLdQK3OJM4+uOkNgTeXSIxV7WJlDOKzqT/dn8G2Q=
Subject key identifier: 5F:2C:0A:41:FD:E4:31:0A:16:08:34:4A:77:0A:E5:BE:F5:53:55:7D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XywKQf3kMQoWCDRKdwrlvvVTVX0.roa
Signing time: Thu 15 Sep 2022 02:53:19 +0000
ROA not before: Thu 15 Sep 2022 02:53:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.24.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5F2C0A41FDE4310A1608344A770AE5BEF553557D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:83:e3:44:1c:20:15:8a:06:bb:aa:e3:d0:
9f:25:b4:87:bb:a6:49:40:be:c1:a9:a8:4f:d2:a2:
51:05:6d:3f:cf:7f:ef:c0:04:20:08:b0:91:ad:22:
da:d4:c5:7b:5f:5a:04:6b:12:13:9e:06:d7:b9:2e:
c3:70:5a:a3:1a:42:a6:de:d9:f2:99:cf:86:64:3f:
cd:96:f1:11:5e:5d:5d:6a:31:4b:31:e4:b2:d2:f4:
9a:15:52:87:32:02:4e:54:53:f6:cb:9e:e0:3d:65:
77:94:39:d2:ff:08:2b:f9:33:ae:10:ca:6d:6f:3a:
9f:85:e2:07:a9:83:2c:d3:ae:85:cf:16:e1:1e:e9:
d0:d1:85:11:51:cc:0a:08:6d:ad:57:5d:e3:08:02:
5b:4f:2a:a8:88:15:8c:1a:2e:ca:97:e8:cd:93:ad:
a5:e4:d0:d0:fb:96:4c:40:9d:fe:c6:11:88:f9:05:
09:ff:66:94:d0:bc:bf:73:f0:1e:97:f1:75:05:95:
bb:f7:fa:d1:81:1f:db:5c:e1:3a:7e:0e:c1:c5:04:
c5:bd:78:aa:b2:02:d4:01:f9:c7:04:cc:e2:43:e5:
d1:03:bf:0d:b3:6c:9a:81:0d:b3:c3:36:4a:fb:a8:
94:15:41:a5:65:1d:1f:c6:7a:54:7d:48:65:b9:1e:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:2C:0A:41:FD:E4:31:0A:16:08:34:4A:77:0A:E5:BE:F5:53:55:7D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XywKQf3kMQoWCDRKdwrlvvVTVX0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
12:d0:65:1d:ec:1c:82:59:66:35:02:f1:c0:2c:e1:9b:85:cf:
68:f6:a1:1e:1c:b3:fe:48:b5:72:85:98:37:14:78:3d:c2:99:
af:b2:91:73:be:1a:c7:f1:ba:a6:65:4e:0d:9b:fb:6c:7c:a0:
97:8a:39:0a:14:ff:c3:b7:01:8f:31:07:dd:35:8e:de:cb:12:
7d:f3:de:e9:0c:b4:81:ee:43:76:5f:c5:c5:01:85:bb:a8:c8:
66:d4:9e:9f:9d:b7:87:d5:ec:cb:82:28:45:dc:01:cc:42:6f:
52:9d:4b:a0:a8:79:42:f3:20:ea:e2:4b:55:74:a9:8a:5c:ef:
32:34:2f:61:c8:f5:bd:05:38:2c:1e:22:90:fc:a2:1c:b6:26:
e2:73:1d:44:41:76:ee:aa:c0:50:bc:6f:e0:fb:c9:9b:f1:08:
7c:fa:4e:2b:81:bf:90:27:3b:be:29:95:23:37:51:cb:b7:53:
0d:b6:5e:57:c4:c0:e0:0f:8b:33:cd:3d:52:f0:9f:56:4d:f0:
a1:09:05:92:fd:83:32:9a:d8:4b:d2:a1:f4:21:0d:71:bb:39:
33:72:61:d6:cf:e6:ca:9b:e5:99:cd:8b:fa:ff:23:43:a3:69:
24:3c:20:bd:ab:3d:db:dc:10:de:d1:94:a6:e8:2c:86:8d:73:
97:9c:42:1c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUzMTlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDVGMkMwQTQxRkRFNDMx
MEExNjA4MzQ0QTc3MEFFNUJFRjU1MzU1N0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDT1oPjRBwgFYoGu6rj0J8ltIe7pklAvsGpqE/SolEFbT/Pf+/A
BCAIsJGtItrUxXtfWgRrEhOeBte5LsNwWqMaQqbe2fKZz4ZkP82W8RFeXV1qMUsx
5LLS9JoVUocyAk5UU/bLnuA9ZXeUOdL/CCv5M64Qym1vOp+F4gepgyzTroXPFuEe
6dDRhRFRzAoIba1XXeMIAltPKqiIFYwaLsqX6M2TraXk0ND7lkxAnf7GEYj5BQn/
ZpTQvL9z8B6X8XUFlbv3+tGBH9tc4Tp+DsHFBMW9eKqyAtQB+ccEzOJD5dEDvw2z
bJqBDbPDNkr7qJQVQaVlHR/GelR9SGW5HikjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUXywKQf3kMQoWCDRKdwrlvvVTVX0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1h5d0tRZjNrTVFvV0NEUktk
d3JsdnZWVFZYMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
whgwDQYJKoZIhvcNAQELBQADggEBABLQZR3sHIJZZjUC8cAs4ZuFz2j2oR4cs/5I
tXKFmDcUeD3Cma+ykXO+GsfxuqZlTg2b+2x8oJeKOQoU/8O3AY8xB901jt7LEn3z
3ukMtIHuQ3ZfxcUBhbuoyGbUnp+dt4fV7MuCKEXcAcxCb1KdS6CoeULzIOriS1V0
qYpc7zI0L2HI9b0FOCweIpD8ohy2JuJzHURBdu6qwFC8b+D7yZvxCHz6TiuBv5An
O74plSM3Ucu3Uw22XlfEwOAPizPNPVLwn1ZN8KEJBZL9gzKa2EvSofQhDXG7OTNy
YdbP5sqb5ZnNi/r/I0OjaSQ8IL2rPdvcEN7RlKboLIaNc5ecQhw=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:22 2023 by rpki-client on console-ams.rpki-client.org