Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fwoEzZnm2FCI5ZLhXoxIKWD5wY4.roa
File: fwoEzZnm2FCI5ZLhXoxIKWD5wY4.roa (raw, json)
Hash identifier: aF7be/lxtMzZ3ZZ42P7+NWJtQXkM/sKEc8anFy24zq4=
Subject key identifier: 7F:0A:04:CD:99:E6:D8:50:88:E5:92:E1:5E:8C:48:29:60:F9:C1:8E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fwoEzZnm2FCI5ZLhXoxIKWD5wY4.roa
Signing time: Thu 15 Sep 2022 02:46:20 +0000
ROA not before: Thu 15 Sep 2022 02:46:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.204.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7F0A04CD99E6D85088E592E15E8C482960F9C18E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:af:3e:ca:f7:66:53:8e:8e:24:2e:b1:d5:cf:
c6:ca:8c:9d:39:2f:aa:59:0d:ce:96:e4:fb:a1:a4:
d6:83:56:7a:1f:0a:15:6d:65:1d:aa:08:b6:81:66:
cb:c8:f5:35:35:6f:b7:f4:62:7d:cb:ff:b0:11:1c:
b5:a1:da:61:d0:31:af:0a:a1:93:01:e9:4f:e9:2d:
3b:ae:bc:82:6a:c2:0b:07:56:13:51:c5:33:db:aa:
98:95:76:44:6d:f8:ec:1d:b3:16:be:7b:74:8b:8c:
94:16:7d:db:fb:f7:b8:b5:54:74:71:00:c8:9d:8f:
56:62:15:f1:25:f1:da:7a:59:dd:da:41:14:e6:df:
99:30:33:24:bb:14:35:8c:e3:06:1c:64:c9:93:5c:
a8:c4:51:6f:c2:96:ea:5c:0a:75:41:fd:8f:73:3d:
b7:4c:b9:29:44:b2:97:7e:6e:c7:50:2e:ae:ae:9b:
40:8d:a4:f1:35:04:e4:44:9e:61:44:36:18:1c:2b:
58:7b:9a:5e:0b:45:6d:d7:8d:ee:80:fb:cc:44:66:
20:ad:9c:5a:d1:68:ef:bd:e1:9c:73:e2:12:ce:76:
73:fd:6e:11:5f:cb:45:23:73:b1:b9:bd:72:dd:5b:
e3:c2:be:52:1f:ef:7a:1b:d5:cb:88:7f:4a:99:62:
d4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0A:04:CD:99:E6:D8:50:88:E5:92:E1:5E:8C:48:29:60:F9:C1:8E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fwoEzZnm2FCI5ZLhXoxIKWD5wY4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.204.0/22
Signature Algorithm: sha256WithRSAEncryption
34:96:19:60:d6:a8:a9:21:d4:3c:66:4e:b6:c8:b8:15:03:7b:
a8:46:7d:b1:cf:de:a8:57:72:ae:fd:77:42:6c:29:a5:0f:33:
77:62:7b:f4:e0:ee:14:4b:c2:24:dc:b3:fc:cc:f8:b8:68:01:
11:1d:e0:1f:b2:cf:29:03:0d:92:0f:00:43:4a:65:dd:a8:a4:
a9:90:29:2b:f3:af:bd:de:3e:c2:70:55:0e:56:b2:a4:65:e4:
06:75:4a:b0:51:97:cb:a2:71:9c:7b:7d:9f:38:9f:c4:b6:54:
8c:d6:3c:f0:9b:ad:97:c1:d3:1e:63:68:84:31:03:1f:77:7d:
f0:26:e7:e8:2f:6b:c1:70:e0:47:02:13:66:03:42:e2:42:62:
55:f5:51:5f:0c:cb:4e:24:dc:c7:85:66:65:c7:f2:67:d3:30:
06:e6:ff:b0:b0:3c:30:11:84:b0:c2:62:39:de:d0:d8:8b:5d:
dd:24:61:a5:40:43:03:80:74:32:4e:65:8c:0c:f6:ee:d2:67:
9b:76:e7:6b:5e:2c:a9:a6:dc:d9:07:5a:9b:88:8c:e5:cd:75:
bf:72:93:dc:f9:96:f4:20:94:4a:6d:83:bb:e9:93:9b:49:39:
f2:32:68:d4:33:3c:b2:0d:09:6e:47:f6:4d:a8:7e:51:c0:71:
1b:91:d9:70
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ2MjBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDdGMEEwNENEOTlFNkQ4
NTA4OEU1OTJFMTVFOEM0ODI5NjBGOUMxOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPrz7K92ZTjo4kLrHVz8bKjJ05L6pZDc6W5PuhpNaDVnofChVt
ZR2qCLaBZsvI9TU1b7f0Yn3L/7ARHLWh2mHQMa8KoZMB6U/pLTuuvIJqwgsHVhNR
xTPbqpiVdkRt+Owdsxa+e3SLjJQWfdv797i1VHRxAMidj1ZiFfEl8dp6Wd3aQRTm
35kwMyS7FDWM4wYcZMmTXKjEUW/ClupcCnVB/Y9zPbdMuSlEspd+bsdQLq6um0CN
pPE1BOREnmFENhgcK1h7ml4LRW3Xje6A+8xEZiCtnFrRaO+94Zxz4hLOdnP9bhFf
y0Ujc7G5vXLdW+PCvlIf73ob1cuIf0qZYtTBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUfwoEzZnm2FCI5ZLhXoxIKWD5wY4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2Z3b0V6Wm5tMkZDSTVaTGhY
b3hJS1dENXdZNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
w8wwDQYJKoZIhvcNAQELBQADggEBADSWGWDWqKkh1DxmTrbIuBUDe6hGfbHP3qhX
cq79d0JsKaUPM3die/Tg7hRLwiTcs/zM+LhoAREd4B+yzykDDZIPAENKZd2opKmQ
KSvzr73ePsJwVQ5WsqRl5AZ1SrBRl8uicZx7fZ84n8S2VIzWPPCbrZfB0x5jaIQx
Ax93ffAm5+gva8Fw4EcCE2YDQuJCYlX1UV8My04k3MeFZmXH8mfTMAbm/7CwPDAR
hLDCYjne0NiLXd0kYaVAQwOAdDJOZYwM9u7SZ5t252teLKmm3NkHWpuIjOXNdb9y
k9z5lvQglEptg7vpk5tJOfIyaNQzPLINCW5H9k2oflHAcRuR2XA=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:25 2023 by rpki-client on console-ams.rpki-client.org