Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ap6t6sE-6Iw6ffRlso2fXceNH_I.roa
File: ap6t6sE-6Iw6ffRlso2fXceNH_I.roa (raw, json)
Hash identifier: aA2pdU/n0fmPgQZnXM6/pvkUltpT/cLRhckw+oC9q6w=
Subject key identifier: 6A:9E:AD:EA:C1:3E:E8:8C:3A:7D:F4:65:B2:8D:9F:5D:C7:8D:1F:F2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 208A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ap6t6sE-6Iw6ffRlso2fXceNH_I.roa
Signing time: Fri 25 Nov 2022 04:38:51 +0000
ROA not before: Fri 25 Nov 2022 04:38:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.100.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8330 (0x208a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6A9EADEAC13EE88C3A7DF465B28D9F5DC78D1FF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:67:a5:0e:04:e8:f3:85:65:6a:31:98:91:f9:
18:87:4d:dc:bd:60:65:41:08:97:c2:a5:90:2d:9e:
42:79:e0:e1:ca:13:e7:5d:4f:2d:c0:28:28:8e:55:
b0:70:c1:a4:3a:6d:be:a3:07:f3:a5:c6:8d:d0:cc:
65:a9:43:bc:3d:19:9f:4f:9f:dc:9e:e9:4c:c0:d6:
f1:77:a2:b0:b6:f5:94:55:28:25:8f:52:c1:8e:99:
13:4d:04:0b:73:8c:1d:14:71:ff:60:23:ef:a0:10:
2b:0b:0d:4a:7b:8f:22:8f:ce:db:e0:eb:0d:d6:23:
d5:99:8d:d7:43:7d:16:18:d7:d1:25:6d:04:20:eb:
1b:67:2d:8e:f4:b6:e7:db:5d:6a:1d:d0:9e:9a:86:
08:ae:4c:00:3b:a5:57:8a:6f:de:a7:bc:cf:fb:db:
08:20:64:b0:af:0d:20:f3:35:79:79:8b:21:c2:cf:
ab:1d:f0:0d:57:d2:d7:38:56:3d:07:20:3c:33:b9:
69:a3:04:64:8d:95:3d:63:cc:e8:b1:6e:9b:d0:66:
fc:b4:b2:b4:89:da:9b:9a:e8:22:7b:f0:cf:56:11:
08:a2:f9:16:2f:3d:33:2f:3c:45:8d:fa:8e:96:16:
4b:22:77:e4:bb:1e:41:74:ac:dd:2a:27:e7:d0:07:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9E:AD:EA:C1:3E:E8:8C:3A:7D:F4:65:B2:8D:9F:5D:C7:8D:1F:F2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ap6t6sE-6Iw6ffRlso2fXceNH_I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.100.0/22
Signature Algorithm: sha256WithRSAEncryption
73:81:74:10:6e:1b:8c:a6:c7:a3:66:53:b6:bc:9f:43:f5:64:
73:fe:60:50:7b:92:bc:a5:7f:ca:3b:b4:a7:1d:dc:e9:0c:19:
ac:4d:f4:f5:44:aa:5d:dc:d3:3f:8f:aa:77:f7:34:74:d9:cc:
27:d0:3d:4c:58:d3:9b:00:3a:4a:92:0e:60:94:dc:86:4b:be:
cc:16:a8:0e:73:93:65:1c:ae:39:cc:40:ab:27:7c:44:e4:a6:
2b:55:47:5d:9b:6a:e7:82:6e:01:03:9b:46:3d:36:ae:49:5e:
aa:3d:86:53:94:91:e5:94:77:20:ad:ab:bd:d9:b5:f4:e7:12:
bb:31:16:7f:5a:e4:c4:3c:9c:6f:36:41:cc:32:37:8f:74:b6:
db:f9:de:92:77:6a:03:41:92:5d:14:f3:0e:aa:21:33:de:8c:
c4:aa:bc:c1:52:f6:2b:52:64:28:9f:77:8c:23:27:95:75:29:
d9:df:3b:c2:20:d7:43:88:dc:c1:8c:55:ad:2f:a4:05:90:50:
eb:65:bc:2e:90:4c:2d:42:f9:83:9d:bc:78:42:f2:c4:a3:05:
9c:70:32:de:a7:f9:33:e5:eb:86:5d:89:77:70:33:1c:1a:ad:
b9:68:da:2d:40:f2:c6:1a:02:24:51:f7:5a:d2:98:2e:5c:25:
a8:88:ec:f5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIIowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4NTFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDZBOUVBREVBQzEzRUU4
OEMzQTdERjQ2NUIyOEQ5RjVEQzc4RDFGRjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHZ6UOBOjzhWVqMZiR+RiHTdy9YGVBCJfCpZAtnkJ54OHKE+dd
Ty3AKCiOVbBwwaQ6bb6jB/Olxo3QzGWpQ7w9GZ9Pn9ye6UzA1vF3orC29ZRVKCWP
UsGOmRNNBAtzjB0Ucf9gI++gECsLDUp7jyKPztvg6w3WI9WZjddDfRYY19ElbQQg
6xtnLY70tufbXWod0J6ahgiuTAA7pVeKb96nvM/72wggZLCvDSDzNXl5iyHCz6sd
8A1X0tc4Vj0HIDwzuWmjBGSNlT1jzOixbpvQZvy0srSJ2pua6CJ78M9WEQii+RYv
PTMvPEWN+o6WFksid+S7HkF0rN0qJ+fQB5S9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUap6t6sE+6Iw6ffRlso2fXceNH/IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FwNnQ2c0UtNkl3NmZmUmxz
bzJmWGNlTkhfSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wGQwDQYJKoZIhvcNAQELBQADggEBAHOBdBBuG4ymx6NmU7a8n0P1ZHP+YFB7kryl
f8o7tKcd3OkMGaxN9PVEql3c0z+Pqnf3NHTZzCfQPUxY05sAOkqSDmCU3IZLvswW
qA5zk2UcrjnMQKsnfETkpitVR12baueCbgEDm0Y9Nq5JXqo9hlOUkeWUdyCtq73Z
tfTnErsxFn9a5MQ8nG82QcwyN490ttv53pJ3agNBkl0U8w6qITPejMSqvMFS9itS
ZCifd4wjJ5V1KdnfO8Ig10OI3MGMVa0vpAWQUOtlvC6QTC1C+YOdvHhC8sSjBZxw
Mt6n+TPl64ZdiXdwMxwarblo2i1A8sYaAiRR91rSmC5cJaiI7PU=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:30 2023 by rpki-client on console-ams.rpki-client.org