Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gb3JRLtrPF53ydTbnqm_tnn5Wok.roa
File: gb3JRLtrPF53ydTbnqm_tnn5Wok.roa (raw, json)
Hash identifier: evQGYgW61pt2f7M8Qa8ua2jc5efvJ/yBjMBYOUWm+Jc=
Subject key identifier: 81:BD:C9:44:BB:6B:3C:5E:77:C9:D4:DB:9E:A9:BF:B6:79:F9:5A:89
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gb3JRLtrPF53ydTbnqm_tnn5Wok.roa
Signing time: Thu 15 Sep 2022 02:54:11 +0000
ROA not before: Thu 15 Sep 2022 02:54:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.16.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:54:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=81BDC944BB6B3C5E77C9D4DB9EA9BFB679F95A89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:c5:fb:7a:91:5a:ec:c2:c0:ad:ac:08:82:
11:3a:11:fe:65:06:56:4b:95:b6:86:93:6c:1f:fa:
21:ac:90:84:6f:d8:3c:a5:ec:55:a6:f4:e0:60:05:
e2:ad:97:1d:58:0d:34:b8:ad:b0:dd:30:e9:1a:4e:
11:eb:63:52:af:f2:99:62:f5:bc:32:db:7e:af:0a:
a8:c8:ce:1a:42:9e:76:3b:22:5f:c3:b5:d0:6b:08:
7c:02:55:87:5f:45:b5:45:60:45:47:46:8c:76:4c:
86:92:96:6d:28:14:b4:dd:a7:dd:10:ef:73:3c:45:
c6:ec:a7:ad:eb:75:e2:45:0d:cf:e7:3d:85:5c:aa:
b8:14:75:5b:89:27:31:52:d4:a5:c9:e3:ea:06:ca:
4f:0f:f2:0b:62:5e:44:53:cf:35:2c:5a:c1:b6:a9:
d6:df:20:fb:e8:20:46:7e:60:93:26:73:ce:42:e1:
57:10:16:21:c4:78:51:74:05:4d:e7:a2:53:2f:46:
0d:fa:a5:70:2a:04:6a:db:67:15:52:2e:0d:55:0f:
c9:02:4c:4d:43:80:3c:aa:3e:36:a0:b8:c6:63:ba:
87:a6:98:3f:81:05:bf:65:80:b5:f8:4c:5a:59:7a:
2d:2d:59:87:d2:ff:d3:5c:5f:9b:6c:8d:e2:89:d6:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BD:C9:44:BB:6B:3C:5E:77:C9:D4:DB:9E:A9:BF:B6:79:F9:5A:89
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gb3JRLtrPF53ydTbnqm_tnn5Wok.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.16.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:88:04:f2:2d:7e:7c:e7:34:85:4a:56:c8:d6:5c:4a:12:60:
f9:b2:c2:10:40:1d:a9:11:8a:08:8f:7b:c7:ce:e1:b2:02:1c:
4e:19:e9:12:55:47:5b:8d:9d:29:24:3b:6f:c7:5d:43:0c:30:
98:aa:37:ea:29:a2:f0:be:be:be:75:e0:5a:10:82:03:e6:57:
73:ad:83:60:57:90:40:0a:03:18:00:d6:e2:4a:b7:ad:1f:50:
30:5e:09:d5:cd:e5:0b:5c:57:aa:5b:e0:39:60:78:a5:b5:92:
1e:3a:9c:2c:5c:aa:90:8c:08:5a:76:66:92:22:81:78:5c:08:
3e:db:ff:c8:10:1f:55:5a:de:ae:7d:af:5a:14:9f:32:26:74:
a1:ff:3f:3f:86:8a:f1:2d:91:b1:9e:56:26:41:aa:1c:94:2d:
ee:8a:cf:cf:54:84:12:91:b1:ba:a5:6e:72:83:de:8c:a0:b3:
61:c2:3a:68:5c:3d:36:b7:96:10:49:21:76:db:8f:fa:ba:2d:
71:79:fc:13:43:1e:4a:49:30:3f:76:04:dd:02:d6:a4:36:ff:
a0:b0:4c:ee:d7:97:89:f5:30:91:cb:f5:56:96:20:87:c0:32:
4a:d6:27:ab:91:2f:f8:a5:26:6b:21:43:4f:6b:bf:8c:ce:22:
53:a5:9d:6f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjU0MTFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDgxQkRDOTQ0QkI2QjND
NUU3N0M5RDREQjlFQTlCRkI2NzlGOTVBODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDK8X7epFa7MLArawIghE6Ef5lBlZLlbaGk2wf+iGskIRv2Dyl
7FWm9OBgBeKtlx1YDTS4rbDdMOkaThHrY1Kv8pli9bwy236vCqjIzhpCnnY7Il/D
tdBrCHwCVYdfRbVFYEVHRox2TIaSlm0oFLTdp90Q73M8Rcbsp63rdeJFDc/nPYVc
qrgUdVuJJzFS1KXJ4+oGyk8P8gtiXkRTzzUsWsG2qdbfIPvoIEZ+YJMmc85C4VcQ
FiHEeFF0BU3nolMvRg36pXAqBGrbZxVSLg1VD8kCTE1DgDyqPjaguMZjuoemmD+B
Bb9lgLX4TFpZei0tWYfS/9NcX5tsjeKJ1vBTAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUgb3JRLtrPF53ydTbnqm/tnn5WokwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2diM0pSTHRyUEY1M3lkVGJu
cW1fdG5uNVdvay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
whAwDQYJKoZIhvcNAQELBQADggEBADuIBPItfnznNIVKVsjWXEoSYPmywhBAHakR
igiPe8fO4bICHE4Z6RJVR1uNnSkkO2/HXUMMMJiqN+opovC+vr514FoQggPmV3Ot
g2BXkEAKAxgA1uJKt60fUDBeCdXN5QtcV6pb4DlgeKW1kh46nCxcqpCMCFp2ZpIi
gXhcCD7b/8gQH1Va3q59r1oUnzImdKH/Pz+GivEtkbGeViZBqhyULe6Kz89UhBKR
sbqlbnKD3oygs2HCOmhcPTa3lhBJIXbbj/q6LXF5/BNDHkpJMD92BN0C1qQ2/6Cw
TO7Xl4n1MJHL9VaWIIfAMkrWJ6uRL/ilJmshQ09rv4zOIlOlnW8=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:25 2023 by rpki-client on console-ams.rpki-client.org