Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cvKUUES3i5dMcZIvV-r3GFP1VHg.roa
File: cvKUUES3i5dMcZIvV-r3GFP1VHg.roa (raw, json)
Hash identifier: 42q0j6nLXB/SEV85Gy9DT1B92uzFZH5cBQgN/EMk9yE=
Subject key identifier: 72:F2:94:50:44:B7:8B:97:4C:71:92:2F:57:EA:F7:18:53:F5:54:78
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cvKUUES3i5dMcZIvV-r3GFP1VHg.roa
Signing time: Thu 15 Sep 2022 02:45:37 +0000
ROA not before: Thu 15 Sep 2022 02:45:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=72F2945044B78B974C71922F57EAF71853F55478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:08:1b:0f:c5:d2:8f:aa:6f:f8:3d:7e:e9:9a:
c9:82:b0:05:8b:23:c0:1f:6d:1a:c1:fe:ce:1d:90:
0f:17:81:53:18:45:a5:b6:ee:6d:49:56:fb:1c:15:
f6:6f:d7:7c:04:15:8c:cd:9a:df:76:59:0d:11:5f:
12:00:90:24:21:35:0f:23:b4:7f:12:2a:5c:43:cc:
36:9c:89:dc:c6:61:a7:b0:5f:a7:39:40:c6:9b:66:
e0:39:a6:14:aa:69:dd:14:b5:f5:9b:ba:2b:f3:6a:
ba:ae:7f:35:74:f0:e9:40:0e:a0:64:ac:20:25:a8:
3c:b7:35:12:3f:b2:2f:c1:00:1c:49:d8:93:e3:9d:
c1:ac:4e:1d:78:60:52:bf:c7:69:52:4b:dd:e8:ae:
83:4c:11:fd:11:b7:6f:cb:03:ab:45:e1:22:0b:96:
d3:27:58:88:3b:05:09:0f:a6:81:ec:cc:06:69:fb:
98:38:27:ab:91:29:c5:ea:82:fd:96:31:60:82:9b:
b0:cf:2b:91:15:44:92:22:38:6e:b1:90:d9:25:0b:
6c:1a:52:62:cd:f4:e2:d1:2b:7a:5a:ae:69:e1:77:
8b:06:dc:21:92:7c:66:f0:9c:3a:dd:b4:23:65:1b:
d3:5c:44:4d:1e:6e:8b:9a:f5:d7:4c:8d:02:35:df:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F2:94:50:44:B7:8B:97:4C:71:92:2F:57:EA:F7:18:53:F5:54:78
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cvKUUES3i5dMcZIvV-r3GFP1VHg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.236.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:44:e8:2d:fa:6f:46:b1:a1:72:ba:b6:be:49:78:f2:b0:82:
25:d1:79:30:29:82:ed:f2:ac:2f:fb:75:ea:4e:f9:f7:54:d7:
1d:d7:0f:7e:24:24:7d:08:95:65:f1:88:fe:6a:26:73:5e:05:
ed:14:ca:58:10:e4:de:73:0c:1a:af:7a:1a:22:ed:73:c3:8e:
6c:03:1e:f4:93:0d:45:87:93:e1:23:fa:c6:b6:a9:29:19:65:
4d:70:61:ee:63:53:2a:b2:62:5b:de:42:5d:38:da:95:e6:e8:
fb:f4:37:b6:34:54:ba:29:5b:0e:64:c9:f6:ce:5b:6b:36:a3:
99:66:09:04:9e:8f:df:82:39:ac:13:c7:34:8d:b1:c2:2b:4a:
c7:fa:dc:f2:cd:12:51:96:f4:2e:6c:00:8c:21:c5:c7:5b:d7:
3f:22:78:64:62:cf:08:c7:4b:12:a1:5c:46:8f:81:46:3a:2d:
13:04:3e:6e:f1:30:6d:6a:ca:46:73:27:51:55:ce:b2:cf:1b:
6e:08:11:5c:30:02:30:8b:df:48:ce:f7:58:f0:da:dc:d7:99:
6c:b8:7f:ec:b9:d0:ce:ac:49:ff:3c:c0:8f:3e:7e:d8:b5:bf:
a5:2a:b6:c1:63:a8:47:0b:2e:32:8d:d3:5c:fa:c6:a3:a9:93:
70:58:2d:d9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1MzdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDcyRjI5NDUwNDRCNzhC
OTc0QzcxOTIyRjU3RUFGNzE4NTNGNTU0NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDtCBsPxdKPqm/4PX7pmsmCsAWLI8AfbRrB/s4dkA8XgVMYRaW2
7m1JVvscFfZv13wEFYzNmt92WQ0RXxIAkCQhNQ8jtH8SKlxDzDacidzGYaewX6c5
QMabZuA5phSqad0UtfWbuivzarqufzV08OlADqBkrCAlqDy3NRI/si/BABxJ2JPj
ncGsTh14YFK/x2lSS93oroNMEf0Rt2/LA6tF4SILltMnWIg7BQkPpoHszAZp+5g4
J6uRKcXqgv2WMWCCm7DPK5EVRJIiOG6xkNklC2waUmLN9OLRK3parmnhd4sG3CGS
fGbwnDrdtCNlG9NcRE0eboua9ddMjQI138pdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUcvKUUES3i5dMcZIvV+r3GFP1VHgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2N2S1VVRVMzaTVkTWNaSXZW
LXIzR0ZQMVZIZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
w+wwDQYJKoZIhvcNAQELBQADggEBAGtE6C36b0axoXK6tr5JePKwgiXReTApgu3y
rC/7depO+fdU1x3XD34kJH0IlWXxiP5qJnNeBe0UylgQ5N5zDBqvehoi7XPDjmwD
HvSTDUWHk+Ej+sa2qSkZZU1wYe5jUyqyYlveQl042pXm6Pv0N7Y0VLopWw5kyfbO
W2s2o5lmCQSej9+COawTxzSNscIrSsf63PLNElGW9C5sAIwhxcdb1z8ieGRizwjH
SxKhXEaPgUY6LRMEPm7xMG1qykZzJ1FVzrLPG24IEVwwAjCL30jO91jw2tzXmWy4
f+y50M6sSf88wI8+fti1v6UqtsFjqEcLLjKN01z6xqOpk3BYLdk=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:36 2023 by rpki-client on console-fra.rpki-client.org