Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b_cyxRkDMldVDWn1Ja1khYzq-mE.roa
File: b_cyxRkDMldVDWn1Ja1khYzq-mE.roa (raw, json)
Hash identifier: iVcuK1uzPk/wWFKV0Q/9Zvu1yZtqjXicQp1wZ0DRLsw=
Subject key identifier: 6F:F7:32:C5:19:03:32:57:55:0D:69:F5:25:AD:64:85:8C:EA:FA:61
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21F2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b_cyxRkDMldVDWn1Ja1khYzq-mE.roa
Signing time: Fri 25 Nov 2022 04:40:35 +0000
ROA not before: Fri 25 Nov 2022 04:40:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.152.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8690 (0x21f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6FF732C519033257550D69F525AD64858CEAFA61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:32:60:62:e8:ed:42:44:d8:d2:e5:55:1f:08:
d5:43:b3:16:19:58:45:c6:96:f4:9b:64:58:15:ee:
09:19:cb:b8:18:ee:97:dd:74:ea:a9:9b:0e:85:3c:
87:d8:49:3c:58:63:fb:72:85:31:7a:08:37:2f:31:
1a:3a:13:8c:ed:b7:78:e0:27:9a:80:a3:a0:97:21:
c6:5e:fa:41:b5:82:3e:7d:7a:d5:11:99:1f:7b:1a:
3a:8b:ea:b3:e8:fd:b3:f9:b5:f9:6a:d2:a5:78:50:
e2:36:a2:b3:54:0f:21:83:8a:a0:23:c8:25:8e:27:
a8:24:2c:88:13:75:e6:41:e0:87:19:c0:31:a2:6e:
a4:2d:f4:1e:d0:99:78:35:1a:d2:cf:12:74:d8:b2:
c7:ca:5a:de:33:5f:46:8d:ed:e6:4a:72:9f:ed:ac:
1a:76:0e:c4:3c:19:ec:46:22:8a:2e:41:a2:a8:4b:
3c:1f:65:cd:ee:00:32:40:ea:82:b9:f6:5f:7d:89:
be:62:6a:e9:10:9d:8e:ce:93:6a:b6:7e:b5:92:f5:
79:92:74:47:f2:19:63:db:4f:4c:e0:e5:18:d3:5b:
05:6c:c6:af:cd:39:be:f8:0c:bb:6f:a4:ff:b9:39:
74:7f:95:6a:22:e5:11:ca:4c:97:b7:6d:78:77:05:
d4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F7:32:C5:19:03:32:57:55:0D:69:F5:25:AD:64:85:8C:EA:FA:61
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/b_cyxRkDMldVDWn1Ja1khYzq-mE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.152.0/22
Signature Algorithm: sha256WithRSAEncryption
16:46:1f:d7:04:6f:34:f7:d1:f1:86:56:00:bd:f8:4f:d8:35:
87:8e:00:12:b3:1b:8f:97:40:9e:c0:6d:d9:2e:3b:1b:97:fe:
3f:6d:3a:d2:5c:11:b3:f7:55:f5:cd:ff:73:12:e7:15:09:e3:
82:6f:22:70:50:f0:73:b8:1c:f5:44:d0:31:31:b0:1b:e1:cf:
78:30:03:4f:47:7c:2f:af:2a:8c:28:85:58:c2:9a:46:3c:5d:
2b:21:8d:32:51:7d:2e:6d:c1:32:98:61:06:21:1f:25:3b:60:
d1:fc:92:1d:e7:b1:c1:14:47:ee:3f:a6:b5:65:25:e5:e7:d9:
23:06:a7:cd:1e:15:fc:3a:fb:5e:85:1b:b1:12:f8:38:85:c8:
d4:af:0f:59:a6:43:3f:f5:31:07:fc:06:1a:cb:aa:7b:89:ce:
aa:8d:54:43:71:fb:02:a1:5f:23:41:54:14:e2:18:b0:5d:91:
36:30:a5:15:34:06:c7:d8:b5:75:20:57:a9:16:50:5d:c0:9f:
e1:16:a3:de:f9:1f:3f:fc:6f:66:ee:d1:27:5f:d3:f8:72:1b:
f1:82:82:b5:62:7a:15:f4:f2:dd:58:a2:74:cc:e3:d8:0d:92:
77:52:f0:d0:5f:b6:9e:0c:16:b3:cb:cd:78:ec:34:b5:f7:3f:
15:6c:22:4e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIfIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwMzVaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDZGRjczMkM1MTkwMzMy
NTc1NTBENjlGNTI1QUQ2NDg1OENFQUZBNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeMmBi6O1CRNjS5VUfCNVDsxYZWEXGlvSbZFgV7gkZy7gY7pfd
dOqpmw6FPIfYSTxYY/tyhTF6CDcvMRo6E4ztt3jgJ5qAo6CXIcZe+kG1gj59etUR
mR97GjqL6rPo/bP5tflq0qV4UOI2orNUDyGDiqAjyCWOJ6gkLIgTdeZB4IcZwDGi
bqQt9B7QmXg1GtLPEnTYssfKWt4zX0aN7eZKcp/trBp2DsQ8GexGIoouQaKoSzwf
Zc3uADJA6oK59l99ib5iaukQnY7Ok2q2frWS9XmSdEfyGWPbT0zg5RjTWwVsxq/N
Ob74DLtvpP+5OXR/lWoi5RHKTJe3bXh3BdTlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUb/cyxRkDMldVDWn1Ja1khYzq+mEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JfY3l4UmtETWxkVkRXbjFK
YTFraFl6cS1tRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6ZgwDQYJKoZIhvcNAQELBQADggEBABZGH9cEbzT30fGGVgC9+E/YNYeOABKzG4+X
QJ7AbdkuOxuX/j9tOtJcEbP3VfXN/3MS5xUJ44JvInBQ8HO4HPVE0DExsBvhz3gw
A09HfC+vKowohVjCmkY8XSshjTJRfS5twTKYYQYhHyU7YNH8kh3nscEUR+4/prVl
JeXn2SMGp80eFfw6+16FG7ES+DiFyNSvD1mmQz/1MQf8BhrLqnuJzqqNVENx+wKh
XyNBVBTiGLBdkTYwpRU0BsfYtXUgV6kWUF3An+EWo975Hz/8b2bu0Sdf0/hyG/GC
grViehX08t1YonTM49gNkndS8NBftp4MFrPLzXjsNLX3PxVsIk4=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:07 2023 by rpki-client on console-fra.rpki-client.org