Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/avf6vhwV5gGXO9EQt2ehX0-JQq4.roa
File: avf6vhwV5gGXO9EQt2ehX0-JQq4.roa (raw, json)
Hash identifier: 5CNG4PX0cYQLIW6zwdcWodlsgusfnl9YM2Eo3EgyrBI=
Subject key identifier: 6A:F7:FA:BE:1C:15:E6:01:97:3B:D1:10:B7:67:A1:5F:4F:89:42:AE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 201C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/avf6vhwV5gGXO9EQt2ehX0-JQq4.roa
Signing time: Fri 25 Nov 2022 04:38:20 +0000
ROA not before: Fri 25 Nov 2022 04:38:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8220 (0x201c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6AF7FABE1C15E601973BD110B767A15F4F8942AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:96:bc:4c:c5:ea:00:a4:57:31:1b:bf:d0:b1:
7a:c6:ba:06:a1:9a:35:75:4a:4b:f4:6d:08:37:b0:
22:99:2c:b5:88:b7:71:ef:5a:c2:e5:c0:8e:d9:e3:
bd:8f:15:75:3b:fc:57:4b:fd:02:a3:76:6b:3b:7e:
08:42:a0:b8:59:eb:bd:09:3f:79:16:ba:43:1c:2e:
ab:64:d5:6f:8e:01:2a:04:6b:cd:4c:01:b8:6c:c4:
5e:f5:64:1b:95:d4:14:bf:9b:8d:35:23:b9:2b:77:
2e:3f:5b:b6:ae:db:42:82:5c:c7:e1:7f:84:30:41:
c7:66:20:06:d8:22:32:65:a6:c1:b5:5a:2a:b4:9a:
88:3b:4e:79:ac:7a:c3:72:0d:20:bd:2d:21:1f:af:
3e:af:d2:d5:69:d3:70:6d:b9:d8:93:7c:30:f0:ab:
35:92:b7:4d:1e:81:b7:c6:d1:fb:99:06:77:81:fa:
a4:41:9d:69:53:50:e7:f5:f4:0f:93:57:5b:4d:01:
3b:59:49:51:9b:b2:73:62:f0:5f:e2:d6:4d:16:b8:
37:df:12:fd:d9:23:65:81:4d:47:0c:a6:bb:91:84:
bf:31:e5:d9:cb:ea:9c:71:4a:3a:86:46:2d:9a:dd:
74:74:eb:1c:f2:c4:e3:79:e1:7a:67:9f:c1:c5:fb:
22:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F7:FA:BE:1C:15:E6:01:97:3B:D1:10:B7:67:A1:5F:4F:89:42:AE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/avf6vhwV5gGXO9EQt2ehX0-JQq4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:fb:c0:2a:7d:52:cf:b4:29:2e:26:8f:b1:56:2f:a1:d4:65:
ae:f6:12:27:28:9a:3d:4f:ad:8e:77:1c:dd:4c:0e:76:9d:09:
ca:13:14:24:e2:da:35:e2:46:7b:3e:d1:08:c7:71:28:cb:c0:
14:cf:5b:11:a4:57:c0:9d:82:52:f8:24:14:00:5e:2f:44:5e:
98:36:2f:5f:9c:9e:1d:19:78:96:dc:f7:fe:73:41:62:29:97:
c0:99:f7:cb:d8:fc:c1:e5:0c:1e:2a:ac:2d:e2:0c:31:6a:77:
eb:da:bb:a5:c9:45:c1:6f:51:8a:53:bd:a4:28:c6:37:41:54:
50:5f:a0:eb:67:64:d0:0b:56:e0:e2:c5:93:91:39:ac:1f:ee:
a2:9d:0b:7b:17:9b:1f:9a:32:fc:23:98:2d:ca:40:ec:37:41:
93:a0:76:cd:0c:05:60:7f:03:ee:26:57:29:6d:9f:17:22:a0:
cc:53:c9:53:24:f4:55:30:d1:a3:0f:12:6c:a1:ed:c6:70:24:
a2:dd:60:66:af:73:0b:99:8a:91:5e:c3:9a:ec:7f:f4:9b:49:
69:65:94:6e:7b:b4:00:36:69:2e:45:ee:10:03:91:6e:cb:8c:
b8:94:78:0f:45:82:21:0a:f6:d9:5c:7b:ea:80:4a:3b:03:12:
92:57:bc:48
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIBwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4MjBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDZBRjdGQUJFMUMxNUU2
MDE5NzNCRDExMEI3NjdBMTVGNEY4OTQyQUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQlrxMxeoApFcxG7/QsXrGugahmjV1Skv0bQg3sCKZLLWIt3Hv
WsLlwI7Z472PFXU7/FdL/QKjdms7fghCoLhZ670JP3kWukMcLqtk1W+OASoEa81M
AbhsxF71ZBuV1BS/m401I7krdy4/W7au20KCXMfhf4QwQcdmIAbYIjJlpsG1Wiq0
mog7TnmsesNyDSC9LSEfrz6v0tVp03BtudiTfDDwqzWSt00egbfG0fuZBneB+qRB
nWlTUOf19A+TV1tNATtZSVGbsnNi8F/i1k0WuDffEv3ZI2WBTUcMpruRhL8x5dnL
6pxxSjqGRi2a3XR06xzyxON54Xpnn8HF+yK1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUavf6vhwV5gGXO9EQt2ehX0+JQq4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2F2ZjZ2aHdWNWdHWE85RVF0
MmVoWDAtSlFxNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AYEwDQYJKoZIhvcNAQELBQADggEBAKH7wCp9Us+0KS4mj7FWL6HUZa72Eicomj1P
rY53HN1MDnadCcoTFCTi2jXiRns+0QjHcSjLwBTPWxGkV8CdglL4JBQAXi9EXpg2
L1+cnh0ZeJbc9/5zQWIpl8CZ98vY/MHlDB4qrC3iDDFqd+vau6XJRcFvUYpTvaQo
xjdBVFBfoOtnZNALVuDixZOROawf7qKdC3sXmx+aMvwjmC3KQOw3QZOgds0MBWB/
A+4mVyltnxcioMxTyVMk9FUw0aMPEmyh7cZwJKLdYGavcwuZipFew5rsf/SbSWll
lG57tAA2aS5F7hADkW7LjLiUeA9FgiEK9tlce+qASjsDEpJXvEg=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:07 2023 by rpki-client on console-fra.rpki-client.org