Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZAYS-RCnXT23xS6txFx_n0LzWcQ.roa
File: ZAYS-RCnXT23xS6txFx_n0LzWcQ.roa (raw, json)
Hash identifier: Y52UfmR1qHZHUXXjGp3qLEdO81nBd0UtxiUDPDBGX7E=
Subject key identifier: 64:06:12:F9:10:A7:5D:3D:B7:C5:2E:AD:C4:5C:7F:9F:42:F3:59:C4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21EE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZAYS-RCnXT23xS6txFx_n0LzWcQ.roa
Signing time: Fri 25 Nov 2022 04:40:34 +0000
ROA not before: Fri 25 Nov 2022 04:40:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8686 (0x21ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=640612F910A75D3DB7C52EADC45C7F9F42F359C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c2:26:4a:36:04:6d:ca:83:56:5f:98:09:de:
4c:b7:01:05:4f:b7:ea:5f:4f:25:53:58:0a:c2:af:
b3:c9:dc:fd:6d:56:6f:5f:b8:af:e8:8f:5f:ab:2f:
84:bf:0f:31:e3:66:95:ce:bc:ab:e6:8f:ed:e2:5e:
7e:9d:08:d4:e7:ca:fa:2c:2c:33:26:89:f2:9a:6f:
f4:b9:39:29:26:fd:6b:f7:c1:18:59:af:d6:ae:7c:
d4:67:15:7f:3c:95:56:3e:83:6e:bd:2a:98:d1:45:
c2:85:0f:8d:89:4c:85:93:f9:d6:28:7d:25:0b:cc:
61:90:ea:d4:8c:d9:8a:be:ca:72:70:5b:bc:e8:9e:
3a:04:61:ba:4f:fd:a9:6e:f5:d2:12:eb:e7:72:41:
8f:f8:ae:ae:f5:f0:97:03:a6:0a:13:5b:d1:9c:7a:
db:cb:78:5e:df:1e:35:33:c9:bf:db:5a:3a:27:c9:
cd:17:d3:b0:64:d7:d4:47:65:8d:d0:c3:ac:af:72:
9a:be:c3:29:6a:1a:61:40:2d:9d:6d:c5:48:5a:82:
e9:a6:c2:44:12:e9:04:c3:b1:eb:d7:f6:4a:1d:42:
f6:fd:24:f9:df:da:42:66:55:3c:dc:ca:18:a4:bc:
24:9e:35:bf:7e:b5:a5:6e:b3:cd:aa:54:5b:16:35:
dd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:06:12:F9:10:A7:5D:3D:B7:C5:2E:AD:C4:5C:7F:9F:42:F3:59:C4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZAYS-RCnXT23xS6txFx_n0LzWcQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.13.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e5:50:5e:3e:5a:1b:b5:48:4f:b7:d7:e2:fa:45:31:47:6f:
f3:5d:3f:0f:d9:7d:ed:02:b0:7a:c5:eb:a3:a7:ca:c7:95:dd:
0b:30:fa:3b:68:d7:fc:a4:f8:ca:b4:54:ca:36:4d:ae:ec:ba:
e2:7e:d8:00:9b:1e:79:4d:a8:2d:80:87:5b:ef:43:c4:9a:38:
61:4c:cd:95:91:fa:1e:67:99:b4:9a:0b:62:d7:7b:e0:eb:fe:
e0:7b:a3:07:97:a0:39:6b:95:3f:2c:54:cd:48:20:a2:41:d4:
93:04:04:f6:a8:98:4d:15:f3:68:60:dc:97:96:41:89:99:10:
f0:c3:c2:cf:1e:1c:dd:c1:86:c2:00:48:4c:60:97:60:db:fa:
31:e3:0e:e2:57:2e:4b:d4:1c:cb:8c:36:e0:ae:a9:81:10:0e:
2d:63:7a:7c:65:ea:13:37:0f:f6:49:97:a9:d3:44:92:9e:db:
af:5e:b8:50:58:57:a1:78:3b:fe:9d:b1:ee:0d:0c:74:23:31:
a2:09:c3:66:5e:7c:f7:27:bb:db:97:c7:cd:96:1f:9c:20:8d:
4b:68:9f:7d:0c:0b:7e:64:9d:60:22:3a:a0:20:4b:61:5d:08:
b3:af:11:f6:57:36:0f:bf:cb:bb:14:2d:47:e4:df:c9:05:68:
44:08:ce:c8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIe4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwMzRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDY0MDYxMkY5MTBBNzVE
M0RCN0M1MkVBREM0NUM3RjlGNDJGMzU5QzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOwiZKNgRtyoNWX5gJ3ky3AQVPt+pfTyVTWArCr7PJ3P1tVm9f
uK/oj1+rL4S/DzHjZpXOvKvmj+3iXn6dCNTnyvosLDMmifKab/S5OSkm/Wv3wRhZ
r9aufNRnFX88lVY+g269KpjRRcKFD42JTIWT+dYofSULzGGQ6tSM2Yq+ynJwW7zo
njoEYbpP/alu9dIS6+dyQY/4rq718JcDpgoTW9GcetvLeF7fHjUzyb/bWjonyc0X
07Bk19RHZY3Qw6yvcpq+wylqGmFALZ1txUhagummwkQS6QTDsevX9kodQvb9JPnf
2kJmVTzcyhikvCSeNb9+taVus82qVFsWNd19AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUZAYS+RCnXT23xS6txFx/n0LzWcQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1pBWVMtUkNuWFQyM3hTNnR4
RnhfbjBMeldjUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AQ0wDQYJKoZIhvcNAQELBQADggEBAJTlUF4+Whu1SE+31+L6RTFHb/NdPw/Zfe0C
sHrF66OnyseV3Qsw+jto1/yk+Mq0VMo2Ta7suuJ+2ACbHnlNqC2Ah1vvQ8SaOGFM
zZWR+h5nmbSaC2LXe+Dr/uB7oweXoDlrlT8sVM1IIKJB1JMEBPaomE0V82hg3JeW
QYmZEPDDws8eHN3BhsIASExgl2Db+jHjDuJXLkvUHMuMNuCuqYEQDi1jenxl6hM3
D/ZJl6nTRJKe269euFBYV6F4O/6dse4NDHQjMaIJw2ZefPcnu9uXx82WH5wgjUto
n30MC35knWAiOqAgS2FdCLOvEfZXNg+/y7sULUfk38kFaEQIzsg=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:06 2023 by rpki-client on console-fra.rpki-client.org