Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b54Ji_4dUZy3BstJsEOz7iiMOK0.roa
File: b54Ji_4dUZy3BstJsEOz7iiMOK0.roa (raw, json)
Hash identifier: W3L9fOE8oMTz9fem4hVwJV+aLb8PYPZYm1ZLsg7ipHc=
Subject key identifier: 6F:9E:09:8B:FE:1D:51:9C:B7:06:CB:49:B0:43:B3:EE:28:8C:38:AD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2172
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b54Ji_4dUZy3BstJsEOz7iiMOK0.roa
Signing time: Fri 25 Nov 2022 04:39:56 +0000
ROA not before: Fri 25 Nov 2022 04:39:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8562 (0x2172)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6F9E098BFE1D519CB706CB49B043B3EE288C38AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a7:a9:2e:aa:28:05:7b:25:f7:c5:b0:ed:98:
ee:f2:21:aa:fc:31:ba:c6:c8:60:9d:7a:48:14:e9:
a5:97:9a:f9:c5:23:80:8f:c5:83:40:72:d8:b7:1a:
45:3a:49:40:3d:ec:b3:83:fc:dd:48:44:cc:d9:28:
b9:df:4e:0d:be:4f:d5:81:19:2e:83:19:28:57:a7:
e5:43:fc:e9:fc:1c:0a:96:0f:6d:89:ad:85:64:c6:
30:46:ff:00:ba:50:f4:83:51:7d:e7:b1:26:0b:bb:
cb:72:32:3b:a2:33:2e:b9:30:21:92:92:be:c1:24:
19:30:9f:d2:ba:a1:31:69:e5:5c:c1:8e:19:ac:d3:
e9:b8:f9:a3:9f:77:ee:1b:64:37:5c:44:04:48:8c:
78:e1:69:5d:51:19:ae:df:48:95:4e:37:b3:8b:77:
b0:b8:09:ac:57:13:b9:f9:c9:63:8a:6e:8b:f8:87:
9d:28:79:ef:1a:2d:81:9b:1c:9f:2b:34:67:a8:2f:
50:88:9b:67:28:c8:03:24:f4:51:af:5d:c9:4c:81:
2d:9c:ed:3c:c3:f1:8e:7b:97:0b:89:89:c6:ee:81:
40:36:80:0d:34:e4:6b:1e:c9:99:3c:fa:a3:2e:1d:
be:c6:cd:03:c1:b4:3d:2e:89:ab:41:23:de:d4:e5:
b1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9E:09:8B:FE:1D:51:9C:B7:06:CB:49:B0:43:B3:EE:28:8C:38:AD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b54Ji_4dUZy3BstJsEOz7iiMOK0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.106.0/24
Signature Algorithm: sha256WithRSAEncryption
86:97:33:b8:32:f0:79:41:43:6a:95:b7:12:01:4c:ed:d9:93:
cb:7b:74:3f:4b:72:86:3b:c5:27:ae:54:a6:0f:f6:88:4d:a1:
a4:38:82:ce:57:8b:f9:88:2e:71:4b:c1:6b:4d:83:80:56:19:
dc:38:dd:76:0a:85:f9:ec:0c:37:e4:5c:62:ce:7d:ca:e8:8b:
0c:eb:b0:c6:c4:3b:e4:11:8e:83:c4:0e:71:1c:12:1c:34:53:
52:c4:e7:b3:c7:ee:f4:75:de:00:18:2c:5d:b7:a8:b8:ef:2a:
aa:09:87:e1:3f:a6:3d:e1:e5:7c:9b:90:c7:2b:d8:69:ac:ba:
6c:f9:a1:cd:4f:34:30:27:e4:c0:a0:f7:1a:15:af:ac:84:e4:
5b:e7:8c:e6:b7:2a:e7:07:76:5b:d7:45:cf:0f:24:1d:34:cb:
2e:4d:c8:f0:a6:e9:81:7d:9d:fa:30:b7:68:ab:fa:22:ca:88:
48:1f:72:4c:91:c3:8c:f1:bf:9b:f6:8d:49:d4:c4:2f:58:48:
90:02:0f:8e:f0:f4:41:a4:d0:ff:26:93:ad:f3:07:07:76:3d:
0e:e7:ae:55:bd:d4:9b:66:a3:6e:fd:9b:b4:82:29:a0:f2:3a:
2b:d3:ef:b5:21:59:dc:d2:fb:97:9b:5f:dd:a5:ec:e0:a3:fb:
86:b1:54:d2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIXIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5NTZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDZGOUUwOThCRkUxRDUx
OUNCNzA2Q0I0OUIwNDNCM0VFMjg4QzM4QUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCap6kuqigFeyX3xbDtmO7yIar8MbrGyGCdekgU6aWXmvnFI4CP
xYNActi3GkU6SUA97LOD/N1IRMzZKLnfTg2+T9WBGS6DGShXp+VD/On8HAqWD22J
rYVkxjBG/wC6UPSDUX3nsSYLu8tyMjuiMy65MCGSkr7BJBkwn9K6oTFp5VzBjhms
0+m4+aOfd+4bZDdcRARIjHjhaV1RGa7fSJVON7OLd7C4CaxXE7n5yWOKbov4h50o
ee8aLYGbHJ8rNGeoL1CIm2coyAMk9FGvXclMgS2c7TzD8Y57lwuJicbugUA2gA00
5GseyZk8+qMuHb7GzQPBtD0uiatBI97U5bFJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUb54Ji/4dUZy3BstJsEOz7iiMOK0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2I1NEppXzRkVVp5M0JzdEpz
RU96N2lpTU9LMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
wWowDQYJKoZIhvcNAQELBQADggEBAIaXM7gy8HlBQ2qVtxIBTO3Zk8t7dD9LcoY7
xSeuVKYP9ohNoaQ4gs5Xi/mILnFLwWtNg4BWGdw43XYKhfnsDDfkXGLOfcroiwzr
sMbEO+QRjoPEDnEcEhw0U1LE57PH7vR13gAYLF23qLjvKqoJh+E/pj3h5XybkMcr
2Gmsumz5oc1PNDAn5MCg9xoVr6yE5FvnjOa3KucHdlvXRc8PJB00yy5NyPCm6YF9
nfowt2ir+iLKiEgfckyRw4zxv5v2jUnUxC9YSJACD47w9EGk0P8mk63zBwd2PQ7n
rlW91Jtmo279m7SCKaDyOivT77UhWdzS+5ebX92l7OCj+4axVNI=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:07 2023 by rpki-client on console-fra.rpki-client.org