Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dGe-T8KxwqRAjTI2JZFT4f_09Zw.roa
File: dGe-T8KxwqRAjTI2JZFT4f_09Zw.roa (raw, json)
Hash identifier: 5gbtVbej8JeF681/QPNh231KH+OqUirelk0xZ3N0KzI=
Subject key identifier: 74:67:BE:4F:C2:B1:C2:A4:40:8D:32:36:25:91:53:E1:FF:F4:F5:9C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 215F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dGe-T8KxwqRAjTI2JZFT4f_09Zw.roa
Signing time: Fri 25 Nov 2022 04:39:51 +0000
ROA not before: Fri 25 Nov 2022 04:39:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8543 (0x215f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7467BE4FC2B1C2A4408D3236259153E1FFF4F59C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bc:09:69:65:ad:e5:df:d9:67:ee:43:8d:01:
60:1a:54:57:a2:be:97:a3:0f:39:aa:b1:da:ce:06:
1d:75:ca:58:ac:e1:06:8b:0c:1b:ed:b8:47:32:0b:
5a:e3:19:6b:b3:0c:dd:f5:5f:17:b1:18:1e:e5:dc:
b9:00:7c:98:37:8d:d2:39:de:8c:ec:18:a5:a8:10:
46:be:47:f7:e4:1a:92:23:69:bb:6e:5e:57:07:46:
44:5e:e6:6d:29:49:db:b3:80:9a:9a:3e:89:64:3d:
24:aa:ba:13:3c:eb:52:a4:4a:da:40:2c:39:80:03:
9e:93:7d:13:17:61:45:23:05:0e:18:69:15:7a:05:
8d:13:09:45:67:37:fd:ac:0e:5a:b1:51:83:10:51:
8d:ce:d5:f2:4e:d4:c0:28:07:53:f3:3d:fc:bc:ce:
c8:40:30:dc:4e:2a:a0:68:3d:47:23:85:f6:be:cf:
fc:0e:29:10:52:b6:49:d4:29:ab:35:b9:cd:93:67:
c9:da:ba:4f:7e:7a:df:02:33:6e:79:f8:f0:5a:da:
c4:e5:66:31:9f:5f:23:d0:76:97:02:ed:db:4e:89:
2e:0a:d5:8b:b9:ad:8d:aa:55:bf:b6:03:7e:27:67:
eb:4d:b7:3d:29:af:99:15:ed:bf:77:5c:0d:46:21:
27:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:67:BE:4F:C2:B1:C2:A4:40:8D:32:36:25:91:53:E1:FF:F4:F5:9C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dGe-T8KxwqRAjTI2JZFT4f_09Zw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.252.0/24
Signature Algorithm: sha256WithRSAEncryption
78:8f:6d:9f:2d:15:6d:e5:1c:76:3f:2f:61:50:27:ea:a0:a2:
8b:e6:6d:2f:59:4e:f7:59:1b:70:25:5c:7d:04:1d:78:63:49:
36:62:0a:c4:d1:dc:32:09:08:cb:ad:20:2b:fa:c9:39:2f:2f:
17:86:a9:bc:b8:9e:b5:fb:63:5d:0c:02:fa:19:0a:e7:e7:51:
9a:63:20:c2:a0:2a:a5:ea:45:54:8a:09:e0:09:4a:ec:85:56:
55:1d:98:a7:d4:27:8f:2d:22:b9:1d:d9:62:fa:41:1f:db:99:
80:22:53:94:83:6c:8b:d2:4f:11:b9:60:6b:16:62:de:11:07:
35:76:da:07:ce:e5:5b:51:f3:64:27:94:e7:d6:28:78:5c:6d:
49:3f:5e:6a:ae:51:bb:7b:66:7d:06:b3:51:5d:84:ec:7b:99:
a3:ec:b3:37:98:7b:89:be:74:3d:d3:b4:b3:b2:18:bf:f8:b6:
74:3d:d2:66:ab:b7:3c:ee:8b:6d:06:8e:07:f0:5c:28:25:4a:
67:51:55:b2:65:af:47:f7:b3:75:22:2a:97:f1:7e:d8:b7:ff:
2c:73:1f:04:ec:6b:68:94:42:f6:30:59:4a:e3:c1:2a:11:50:
28:3d:f0:68:6b:43:ff:b7:f8:8a:43:41:7c:67:ec:d2:8e:24:
d8:2d:f2:20
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIV8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM5NTFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDc0NjdCRTRGQzJCMUMy
QTQ0MDhEMzIzNjI1OTE1M0UxRkZGNEY1OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhvAlpZa3l39ln7kONAWAaVFeivpejDzmqsdrOBh11ylis4QaL
DBvtuEcyC1rjGWuzDN31XxexGB7l3LkAfJg3jdI53ozsGKWoEEa+R/fkGpIjabtu
XlcHRkRe5m0pSduzgJqaPolkPSSquhM861KkStpALDmAA56TfRMXYUUjBQ4YaRV6
BY0TCUVnN/2sDlqxUYMQUY3O1fJO1MAoB1PzPfy8zshAMNxOKqBoPUcjhfa+z/wO
KRBStknUKas1uc2TZ8nauk9+et8CM255+PBa2sTlZjGfXyPQdpcC7dtOiS4K1Yu5
rY2qVb+2A34nZ+tNtz0pr5kV7b93XA1GISfdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUdGe+T8KxwqRAjTI2JZFT4f/09ZwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2RHZS1UOEt4d3FSQWpUSTJK
WkZUNGZfMDlady5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
wvwwDQYJKoZIhvcNAQELBQADggEBAHiPbZ8tFW3lHHY/L2FQJ+qgoovmbS9ZTvdZ
G3AlXH0EHXhjSTZiCsTR3DIJCMutICv6yTkvLxeGqby4nrX7Y10MAvoZCufnUZpj
IMKgKqXqRVSKCeAJSuyFVlUdmKfUJ48tIrkd2WL6QR/bmYAiU5SDbIvSTxG5YGsW
Yt4RBzV22gfO5VtR82QnlOfWKHhcbUk/XmquUbt7Zn0Gs1FdhOx7maPsszeYe4m+
dD3TtLOyGL/4tnQ90martzzui20GjgfwXCglSmdRVbJlr0f3s3UiKpfxfti3/yxz
HwTsa2iUQvYwWUrjwSoRUCg98GhrQ/+3+IpDQXxn7NKOJNgt8iA=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:07 2023 by rpki-client on console-fra.rpki-client.org