Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_0YdzCrvVw4ZGBHR1r1gDJ36ECQ.roa
File: _0YdzCrvVw4ZGBHR1r1gDJ36ECQ.roa (raw, json)
Hash identifier: 7Ov6NjjDHssZn8Jv0MoMRKZ3P9T4QoFtWVfkhMIANMQ=
Subject key identifier: FF:46:1D:CC:2A:EF:57:0E:19:18:11:D1:D6:BD:60:0C:9D:FA:10:24
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22A3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_0YdzCrvVw4ZGBHR1r1gDJ36ECQ.roa
Signing time: Fri 25 Nov 2022 04:41:26 +0000
ROA not before: Fri 25 Nov 2022 04:41:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 103.224.192.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8867 (0x22a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FF461DCC2AEF570E191811D1D6BD600C9DFA1024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d0:80:9d:a0:80:69:3d:99:2c:b2:37:ae:97:
ad:ee:66:74:8d:11:ff:24:a6:ee:94:21:ef:d2:06:
5d:2a:d4:a9:36:d5:2e:6a:2f:bf:29:27:2e:85:1c:
93:0c:e4:d1:17:b0:68:b0:49:61:e5:54:78:b1:4b:
03:4b:e5:28:a3:70:bb:a6:d5:96:0a:2e:7b:73:8c:
dd:34:78:ac:25:31:b2:f7:23:aa:96:3e:2d:79:d9:
57:6a:6f:6a:97:2b:54:ef:da:e0:76:41:01:3a:fa:
11:8c:cb:78:6a:d6:4b:15:d7:e8:89:d8:7c:81:f5:
6e:8e:34:f5:17:a8:d3:c5:6a:ac:06:96:04:91:e4:
0d:62:66:5e:c2:61:cd:05:64:4c:c0:71:05:aa:de:
c8:3f:99:25:56:cc:d3:ec:a1:9e:19:15:79:a9:dd:
2a:f3:f6:14:d0:f9:95:4f:eb:fd:6b:1c:e0:1b:2f:
72:c9:95:fd:d1:3b:6f:aa:c2:75:ed:9e:c7:a2:14:
32:f4:37:af:9d:66:a7:00:b0:fa:10:69:f4:02:19:
25:8a:82:53:fb:14:50:e9:71:e7:b5:e9:f2:32:4c:
3c:1b:b3:9f:e0:91:e7:48:b3:c0:a6:6c:e2:38:e1:
cb:28:bd:3d:0a:4b:a8:31:60:06:a1:47:cb:f0:d3:
b4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:46:1D:CC:2A:EF:57:0E:19:18:11:D1:D6:BD:60:0C:9D:FA:10:24
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_0YdzCrvVw4ZGBHR1r1gDJ36ECQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.192.0/22
Signature Algorithm: sha256WithRSAEncryption
33:dc:46:54:28:82:7e:aa:f5:53:70:dd:32:ca:03:e5:95:42:
a0:c8:bd:b8:e2:f2:c2:39:95:d6:03:f8:c4:4c:a3:79:71:47:
bd:05:ef:88:97:73:04:17:6a:e2:4b:5d:db:b9:97:8c:35:6d:
9a:6e:23:a2:85:54:ba:bf:4f:de:d2:5c:85:30:c9:15:df:b4:
85:8c:da:f9:25:36:bc:f4:8c:85:c9:6d:7f:3e:33:9a:18:e7:
fa:de:ea:7d:9a:4d:38:58:84:3a:48:68:c0:6a:01:d3:80:57:
29:7b:99:74:de:3b:bf:3b:4b:bc:ae:20:1a:68:63:30:33:88:
57:dd:b4:9c:54:bf:97:b1:2f:46:13:d8:25:74:f2:10:ff:7b:
4f:e5:8c:14:68:86:66:6e:d7:19:db:36:1c:64:e0:41:f1:da:
a3:4d:55:ab:90:b3:1c:e1:8b:9e:10:03:21:35:f9:06:8d:ba:
1d:72:24:b4:08:86:a7:89:5a:3f:08:79:2e:40:0d:4d:61:ba:
6d:cf:12:dc:09:1c:25:bf:cc:dc:1d:d9:f0:df:b6:65:81:e2:
cb:27:39:db:62:10:bd:2d:6a:9c:fd:eb:5c:d2:4e:7a:0e:e4:
0c:b3:87:69:ea:c6:83:ca:e6:19:36:99:46:ac:d9:e3:3d:a3:
d0:be:54:46
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIqMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQxMjZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEZGNDYxRENDMkFFRjU3
MEUxOTE4MTFEMUQ2QkQ2MDBDOURGQTEwMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJ0ICdoIBpPZkssjeul63uZnSNEf8kpu6UIe/SBl0q1Kk21S5q
L78pJy6FHJMM5NEXsGiwSWHlVHixSwNL5SijcLum1ZYKLntzjN00eKwlMbL3I6qW
Pi152Vdqb2qXK1Tv2uB2QQE6+hGMy3hq1ksV1+iJ2HyB9W6ONPUXqNPFaqwGlgSR
5A1iZl7CYc0FZEzAcQWq3sg/mSVWzNPsoZ4ZFXmp3Srz9hTQ+ZVP6/1rHOAbL3LJ
lf3RO2+qwnXtnseiFDL0N6+dZqcAsPoQafQCGSWKglP7FFDpcee16fIyTDwbs5/g
kedIs8CmbOI44csovT0KS6gxYAahR8vw07RHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/0YdzCrvVw4ZGBHR1r1gDJ36ECQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL18wWWR6Q3J2Vnc0WkdCSFIx
cjFnREozNkVDUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn
4MAwDQYJKoZIhvcNAQELBQADggEBADPcRlQogn6q9VNw3TLKA+WVQqDIvbji8sI5
ldYD+MRMo3lxR70F74iXcwQXauJLXdu5l4w1bZpuI6KFVLq/T97SXIUwyRXftIWM
2vklNrz0jIXJbX8+M5oY5/re6n2aTThYhDpIaMBqAdOAVyl7mXTeO787S7yuIBpo
YzAziFfdtJxUv5exL0YT2CV08hD/e0/ljBRohmZu1xnbNhxk4EHx2qNNVauQsxzh
i54QAyE1+QaNuh1yJLQIhqeJWj8IeS5ADU1hum3PEtwJHCW/zNwd2fDftmWB4ssn
OdtiEL0tapz961zSTnoO5Ayzh2nqxoPK5hk2mUas2eM9o9C+VEY=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:29 2023 by rpki-client on console-ams.rpki-client.org