Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aqboHCIX-DUeV2thvuNHYtUcUJo.roa
File: aqboHCIX-DUeV2thvuNHYtUcUJo.roa (raw, json)
Hash identifier: pE9nlyP22U526Ft4a3AF66cwUUtWVyzw7xEqJ03Xl3U=
Subject key identifier: 6A:A6:E8:1C:22:17:F8:35:1E:57:6B:61:BE:E3:47:62:D5:1C:50:9A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20FF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aqboHCIX-DUeV2thvuNHYtUcUJo.roa
Signing time: Fri 25 Nov 2022 04:39:23 +0000
ROA not before: Fri 25 Nov 2022 04:39:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.192.0/20 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8447 (0x20ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6AA6E81C2217F8351E576B61BEE34762D51C509A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:24:dc:5c:a4:9e:f2:bf:1d:73:d4:82:64:
cc:f9:69:35:f9:0e:53:49:6b:f6:b9:b4:6d:f1:2c:
b8:2b:9d:2c:44:aa:5c:a1:03:28:f5:95:ab:8a:28:
2c:a0:8d:07:15:54:1f:5f:20:bd:ba:34:62:e9:1f:
23:78:9d:02:80:b8:ac:b3:2f:fd:71:77:23:fe:69:
79:03:4a:fb:79:fd:c0:d9:15:62:42:0c:35:67:9f:
06:18:fd:d6:a6:64:65:1d:40:95:50:3c:83:1a:52:
ef:bc:52:78:84:02:9b:6a:76:3f:9d:33:e0:a3:7d:
16:a9:03:b4:87:b7:8d:4b:bd:57:34:68:21:10:02:
12:00:bc:e2:b9:c1:63:14:3f:5a:b9:57:3e:de:fb:
42:f6:f1:3f:6d:7e:98:25:a2:07:0b:fe:7a:96:5c:
ad:0a:73:f0:5c:a5:b0:d7:78:26:2d:ad:79:58:dc:
cd:37:7f:e7:3f:e6:41:4f:70:b7:e8:84:2a:e7:0e:
37:12:31:ef:96:e1:2a:59:48:d6:7e:be:c7:f4:96:
c1:3e:56:b1:1f:ca:38:73:8d:7b:b6:02:20:4b:fa:
38:46:91:a0:6f:22:e1:0a:66:02:1a:1a:f3:9f:9e:
f8:d9:2b:82:11:ee:81:69:19:b4:ed:af:a8:b2:57:
f1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A6:E8:1C:22:17:F8:35:1E:57:6B:61:BE:E3:47:62:D5:1C:50:9A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aqboHCIX-DUeV2thvuNHYtUcUJo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.192.0/20
Signature Algorithm: sha256WithRSAEncryption
07:b3:5f:e9:a3:37:d4:66:cc:de:62:53:6f:4c:82:e4:aa:cc:
3b:92:2e:41:98:b9:2d:46:d6:8c:0d:e1:75:23:99:10:c2:cc:
b2:b5:bb:1c:60:0c:8e:f0:70:87:b7:11:4f:a8:1a:d9:d8:d7:
88:9f:ed:4b:16:01:16:2a:25:8e:80:4d:3d:67:b9:ba:ce:d7:
92:89:1f:6d:a7:40:82:c1:b8:3f:b6:70:21:0e:ac:ad:1c:91:
94:c9:94:11:3a:3e:7a:c6:8f:69:fe:5f:c3:57:91:62:2e:46:
57:cf:10:71:af:4b:95:31:f7:15:a8:c8:4f:a8:a4:67:26:e3:
3b:b7:41:cc:a0:ba:eb:31:ce:66:96:ab:61:1f:e0:62:51:82:
ad:d9:2c:2d:28:dd:73:8f:c7:13:c3:7f:7e:a4:e9:b7:91:6a:
ad:a2:a6:70:52:f5:34:9c:d2:b3:2c:ee:0a:c2:8e:03:3f:87:
df:3f:5a:51:03:e2:e2:fb:13:99:7e:33:52:09:1b:ed:59:55:
71:6a:e6:ed:23:d4:b1:b6:f2:8d:71:29:d7:99:ba:c2:fe:b2:
9e:d5:ca:df:51:2f:55:70:db:00:6a:9f:16:4f:52:b2:6e:7a:
a6:e7:b8:03:23:13:c1:0d:7b:14:a4:9e:af:d4:b1:d2:72:a7:
9c:27:62:a5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIP8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5MjNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDZBQTZFODFDMjIxN0Y4
MzUxRTU3NkI2MUJFRTM0NzYyRDUxQzUwOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxNiTcXKSe8r8dc9SCZMz5aTX5DlNJa/a5tG3xLLgrnSxEqlyh
Ayj1lauKKCygjQcVVB9fIL26NGLpHyN4nQKAuKyzL/1xdyP+aXkDSvt5/cDZFWJC
DDVnnwYY/damZGUdQJVQPIMaUu+8UniEAptqdj+dM+CjfRapA7SHt41LvVc0aCEQ
AhIAvOK5wWMUP1q5Vz7e+0L28T9tfpglogcL/nqWXK0Kc/BcpbDXeCYtrXlY3M03
f+c/5kFPcLfohCrnDjcSMe+W4SpZSNZ+vsf0lsE+VrEfyjhzjXu2AiBL+jhGkaBv
IuEKZgIaGvOfnvjZK4IR7oFpGbTtr6iyV/H/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUaqboHCIX+DUeV2thvuNHYtUcUJowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FxYm9IQ0lYLURVZVYydGh2
dU5IWXRVY1VKby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
wcAwDQYJKoZIhvcNAQELBQADggEBAAezX+mjN9RmzN5iU29MguSqzDuSLkGYuS1G
1owN4XUjmRDCzLK1uxxgDI7wcIe3EU+oGtnY14if7UsWARYqJY6ATT1nubrO15KJ
H22nQILBuD+2cCEOrK0ckZTJlBE6PnrGj2n+X8NXkWIuRlfPEHGvS5Ux9xWoyE+o
pGcm4zu3QcyguusxzmaWq2Ef4GJRgq3ZLC0o3XOPxxPDf36k6beRaq2ipnBS9TSc
0rMs7grCjgM/h98/WlED4uL7E5l+M1IJG+1ZVXFq5u0j1LG28o1xKdeZusL+sp7V
yt9RL1Vw2wBqnxZPUrJueqbnuAMjE8ENexSknq/UsdJyp5wnYqU=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:07 2023 by rpki-client on console-fra.rpki-client.org