Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YOqZe6hxziElZXmWpQ1g0zOPafU.roa
File: YOqZe6hxziElZXmWpQ1g0zOPafU.roa (raw, json)
Hash identifier: CfvR4PDCS02op65//2wl/HVgcQT0cf5lRs76PJOTsYQ=
Subject key identifier: 60:EA:99:7B:A8:71:CE:21:25:65:79:96:A5:0D:60:D3:33:8F:69:F5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2020
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YOqZe6hxziElZXmWpQ1g0zOPafU.roa
Signing time: Fri 25 Nov 2022 04:38:21 +0000
ROA not before: Fri 25 Nov 2022 04:38:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.160.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8224 (0x2020)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=60EA997BA871CE2125657996A50D60D3338F69F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:ca:c3:34:c6:af:23:97:de:9b:a2:8e:1e:
16:3c:b2:d8:a9:93:5f:5f:19:f2:77:da:d6:70:1a:
9f:ab:5d:57:b7:97:81:9a:4e:66:36:d9:6f:e1:21:
46:b9:2d:c8:0a:4d:f3:1b:a7:da:47:8c:08:ac:35:
54:82:8c:30:59:0d:01:26:72:3d:c5:84:a0:89:e4:
58:10:6a:e4:fe:8a:f4:71:dc:ff:f9:2e:c8:2c:78:
c9:13:d1:74:67:06:e1:ae:a6:e6:1e:a1:d2:77:f0:
6f:50:40:38:ae:01:5e:9b:57:75:aa:7e:bc:25:46:
b1:a0:f4:78:38:fc:22:8b:a1:a4:75:12:2e:72:b2:
ba:25:17:3d:76:07:76:b3:bb:df:90:1e:29:46:84:
78:5f:d8:99:cf:37:0f:34:ad:21:b6:63:c6:89:17:
00:1b:4e:5a:82:ca:d2:86:ad:91:d9:ee:2d:62:03:
26:c9:91:0b:2b:55:6a:79:f0:1b:0e:c7:6f:30:70:
57:53:a5:4d:32:f3:c0:c4:f9:50:29:fb:ca:95:60:
92:3a:e8:9f:8a:33:6f:af:a8:5c:77:0f:fc:b6:88:
6a:9f:61:7f:68:4b:a8:b2:a5:0b:f2:a8:a3:05:f7:
a7:d6:b3:c3:2c:5d:66:f8:e3:4a:83:a2:85:cc:56:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EA:99:7B:A8:71:CE:21:25:65:79:96:A5:0D:60:D3:33:8F:69:F5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YOqZe6hxziElZXmWpQ1g0zOPafU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.160.0/21
Signature Algorithm: sha256WithRSAEncryption
71:d4:79:87:f6:17:60:07:6e:a8:16:fe:09:0a:12:d5:fa:1c:
af:46:93:e1:ba:dd:19:e7:0b:2b:b9:70:ac:56:e7:85:fa:30:
1b:e6:19:12:49:ae:dc:f3:26:2b:15:87:88:ff:bc:74:8e:30:
0a:a9:b2:1e:ca:6e:9d:4e:9c:d5:89:7c:f9:81:fa:4d:85:94:
05:2f:3c:0e:c3:ac:02:ca:1e:ad:d4:0d:48:55:04:1d:e1:0b:
96:f0:ad:3d:db:c0:f6:97:c7:33:c6:0e:e5:bb:54:e1:1d:f9:
d2:a7:25:99:91:e1:34:4a:ee:e4:e8:c4:6a:df:95:30:28:ef:
86:f5:ce:bc:1a:fb:34:fa:a6:e8:29:40:73:45:a1:ad:cd:0b:
e9:0c:e3:1d:84:f9:1a:59:f2:10:74:9d:3f:7a:e2:3f:74:28:
07:69:75:f3:2a:09:ec:24:16:3d:d8:6a:b8:a3:6c:bd:50:04:
9b:42:15:5a:be:7c:18:03:9a:6e:d1:e8:17:b6:ba:b2:94:c1:
3c:a3:22:90:d5:fe:ec:0b:c6:09:77:fa:13:62:6c:11:bc:4f:
77:1d:3a:3b:90:e3:9e:33:3c:c3:cd:d2:ee:37:55:a8:a5:5d:
78:05:49:6c:cf:4f:d9:5c:9b:b0:75:79:9a:7a:96:a7:14:6b:
f6:b0:6e:07
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICICAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4MjFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDYwRUE5OTdCQTg3MUNF
MjEyNTY1Nzk5NkE1MEQ2MEQzMzM4RjY5RjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzhcrDNMavI5fem6KOHhY8stipk19fGfJ32tZwGp+rXVe3l4Ga
TmY22W/hIUa5LcgKTfMbp9pHjAisNVSCjDBZDQEmcj3FhKCJ5FgQauT+ivRx3P/5
LsgseMkT0XRnBuGupuYeodJ38G9QQDiuAV6bV3WqfrwlRrGg9Hg4/CKLoaR1Ei5y
srolFz12B3azu9+QHilGhHhf2JnPNw80rSG2Y8aJFwAbTlqCytKGrZHZ7i1iAybJ
kQsrVWp58BsOx28wcFdTpU0y88DE+VAp+8qVYJI66J+KM2+vqFx3D/y2iGqfYX9o
S6iypQvyqKMF96fWs8MsXWb440qDooXMVjR5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUYOqZe6hxziElZXmWpQ1g0zOPafUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lPcVplNmh4emlFbFpYbVdw
UTFnMHpPUGFmVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wqAwDQYJKoZIhvcNAQELBQADggEBAHHUeYf2F2AHbqgW/gkKEtX6HK9Gk+G63Rnn
Cyu5cKxW54X6MBvmGRJJrtzzJisVh4j/vHSOMAqpsh7Kbp1OnNWJfPmB+k2FlAUv
PA7DrALKHq3UDUhVBB3hC5bwrT3bwPaXxzPGDuW7VOEd+dKnJZmR4TRK7uToxGrf
lTAo74b1zrwa+zT6pugpQHNFoa3NC+kM4x2E+RpZ8hB0nT964j90KAdpdfMqCewk
Fj3YarijbL1QBJtCFVq+fBgDmm7R6Be2urKUwTyjIpDV/uwLxgl3+hNibBG8T3cd
OjuQ454zPMPN0u43VailXXgFSWzPT9lcm7B1eZp6lqcUa/awbgc=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:29 2023 by rpki-client on console-ams.rpki-client.org