Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YnTr4zge0eFJttjqxd5Q1JhENgY.roa
File: YnTr4zge0eFJttjqxd5Q1JhENgY.roa (raw, json)
Hash identifier: vvW7vftRG84eHhQ1swIJ1Z6WIpIaqafDgR1oYijh2gI=
Subject key identifier: 62:74:EB:E3:38:1E:D1:E1:49:B6:D8:EA:C5:DE:50:D4:98:44:36:06
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FC9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YnTr4zge0eFJttjqxd5Q1JhENgY.roa
Signing time: Tue 11 Oct 2022 14:16:15 +0000
ROA not before: Tue 11 Oct 2022 14:16:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.192.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8137 (0x1fc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Oct 11 14:16:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6274EBE3381ED1E149B6D8EAC5DE50D498443606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8a:a0:7b:00:3b:a2:bc:58:42:5d:0a:04:be:
45:53:9a:12:04:99:fa:af:8c:8e:fa:51:3d:50:06:
c0:99:44:e7:52:41:dc:69:c3:d8:b2:3c:da:15:e4:
e0:29:be:c5:cc:f3:54:ee:a3:61:bc:c5:8f:75:07:
05:3f:54:63:1d:04:46:e9:95:bd:4c:96:8e:5b:66:
84:f7:44:8b:37:84:98:4a:50:ad:88:70:5c:65:38:
25:11:19:c0:7c:f4:b6:1d:7c:5f:d6:bd:68:cc:18:
1f:46:a1:10:a9:55:32:c2:3a:1a:8b:9d:0b:99:ff:
a5:ad:d1:f3:ec:92:54:66:e5:d2:2d:0b:c1:33:ba:
e1:8c:bd:42:b7:77:5c:1e:db:2a:f6:01:23:d6:e6:
09:81:2d:f7:8d:97:d1:ae:d0:e3:f8:2b:2c:9b:39:
0d:3c:e9:a6:a3:5c:54:ce:2b:f7:76:ae:eb:14:27:
8a:ce:55:e2:9d:f6:c2:1d:d3:ce:95:02:24:71:88:
6a:94:5b:82:9d:d9:66:e7:a1:0c:53:cf:40:d8:90:
3c:c5:a9:0b:c9:25:38:c5:2d:d9:21:aa:f7:4b:91:
28:40:e6:4b:fb:62:93:6b:ce:51:c8:04:41:a8:a2:
5c:48:b8:af:df:68:57:b0:d2:7a:a2:3e:bf:b5:28:
f5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:74:EB:E3:38:1E:D1:E1:49:B6:D8:EA:C5:DE:50:D4:98:44:36:06
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YnTr4zge0eFJttjqxd5Q1JhENgY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.192.0/20
Signature Algorithm: sha256WithRSAEncryption
b1:3b:13:9d:38:45:7b:4d:48:95:59:b9:b3:3b:94:00:8a:3f:
b1:10:b9:97:b5:30:4f:61:33:af:d7:7f:05:61:db:1e:71:28:
ed:a3:e1:b9:46:b5:78:3b:29:19:28:3c:33:6a:36:b1:40:53:
a5:7f:0a:42:90:72:91:f6:c6:45:c0:5c:1b:74:27:64:98:97:
81:c5:ca:4c:b1:0a:c5:e2:31:3d:e5:e6:23:09:c6:bb:bd:57:
da:5d:59:6e:5f:2d:33:cf:37:b2:bb:4f:91:61:7e:68:56:fa:
85:c9:90:58:0e:7b:29:bc:91:8e:fc:40:07:29:4a:c4:02:a7:
79:63:d6:a9:d2:f4:21:e1:dd:b6:d8:6d:de:98:a5:dd:94:4b:
84:46:61:8b:d7:9c:db:34:9e:58:e3:b2:e2:77:5c:62:e8:bc:
b3:98:cd:c6:c9:93:4b:31:b9:9f:cd:39:91:66:61:19:ee:b7:
87:b1:69:af:c7:13:e4:8f:3b:db:d1:27:a8:61:07:16:de:60:
fc:39:63:58:ba:68:4a:db:dc:aa:dd:93:95:7b:23:e5:8f:0f:
bd:82:bb:55:9c:e5:71:ce:4f:76:de:9e:0b:a3:ae:39:2e:bc:
95:92:1d:de:a0:02:bb:ed:60:eb:9d:3f:ec:95:40:8a:b7:2e:
fa:4d:d1:d7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH8kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjEwMTEx
NDE2MTVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDYyNzRFQkUzMzgxRUQx
RTE0OUI2RDhFQUM1REU1MEQ0OTg0NDM2MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNiqB7ADuivFhCXQoEvkVTmhIEmfqvjI76UT1QBsCZROdSQdxp
w9iyPNoV5OApvsXM81Tuo2G8xY91BwU/VGMdBEbplb1Mlo5bZoT3RIs3hJhKUK2I
cFxlOCURGcB89LYdfF/WvWjMGB9GoRCpVTLCOhqLnQuZ/6Wt0fPsklRm5dItC8Ez
uuGMvUK3d1we2yr2ASPW5gmBLfeNl9Gu0OP4KyybOQ086aajXFTOK/d2rusUJ4rO
VeKd9sId086VAiRxiGqUW4Kd2WbnoQxTz0DYkDzFqQvJJTjFLdkhqvdLkShA5kv7
YpNrzlHIBEGoolxIuK/faFew0nqiPr+1KPUdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUYnTr4zge0eFJttjqxd5Q1JhENgYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1luVHI0emdlMGVGSnR0anF4
ZDVRMUpoRU5nWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
wcAwDQYJKoZIhvcNAQELBQADggEBALE7E504RXtNSJVZubM7lACKP7EQuZe1ME9h
M6/XfwVh2x5xKO2j4blGtXg7KRkoPDNqNrFAU6V/CkKQcpH2xkXAXBt0J2SYl4HF
ykyxCsXiMT3l5iMJxru9V9pdWW5fLTPPN7K7T5FhfmhW+oXJkFgOeym8kY78QAcp
SsQCp3lj1qnS9CHh3bbYbd6Ypd2US4RGYYvXnNs0nljjsuJ3XGLovLOYzcbJk0sx
uZ/NOZFmYRnut4exaa/HE+SPO9vRJ6hhBxbeYPw5Y1i6aErb3Krdk5V7I+WPD72C
u1Wc5XHOT3bengujrjkuvJWSHd6gArvtYOudP+yVQIq3LvpN0dc=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:22 2023 by rpki-client on console-ams.rpki-client.org