Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iIZS3xhfRVpf2v9r7HPE4IOO6i8.roa
File: iIZS3xhfRVpf2v9r7HPE4IOO6i8.roa (raw, json)
Hash identifier: SR3BSf/kFoEINFFgnMgwC7jISzJwu9fGcgjnOpQhUQc=
Subject key identifier: 88:86:52:DF:18:5F:45:5A:5F:DA:FF:6B:EC:73:C4:E0:83:8E:EA:2F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iIZS3xhfRVpf2v9r7HPE4IOO6i8.roa
Signing time: Thu 15 Sep 2022 02:52:48 +0000
ROA not before: Thu 15 Sep 2022 02:52:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.52.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=888652DF185F455A5FDAFF6BEC73C4E0838EEA2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f0:34:a2:54:24:ae:99:98:e7:ff:59:83:8a:
25:41:05:dc:c9:2a:39:65:d8:d7:28:9e:7e:91:ca:
5d:90:3d:1b:26:2a:2f:0d:e0:fc:c5:8b:fb:7d:41:
bd:02:db:30:60:59:0e:42:c1:68:76:25:fb:06:00:
80:d8:dd:e3:7b:32:93:2d:b3:eb:f8:b6:2c:83:fb:
82:df:a4:ec:0a:6d:4b:04:de:ed:81:0a:0e:e9:d6:
88:e5:0e:99:c5:ff:1a:35:76:6e:6c:0a:92:14:7f:
23:f4:0d:2e:6b:8d:64:64:3d:59:e5:37:e6:a0:69:
f9:d9:c5:5a:0b:9e:3f:96:82:27:8b:b2:78:f5:a1:
f2:2d:44:66:3b:97:e6:0f:dc:ef:0d:4a:1e:d1:58:
83:8f:75:03:e6:b8:ec:6a:b6:71:c0:07:1e:80:60:
d1:c9:f1:a3:a7:66:ba:29:85:2f:5c:cb:07:fa:7f:
27:40:8b:91:e1:fc:c5:97:e2:79:69:20:e2:27:b5:
9c:0b:a5:22:50:38:56:d7:0f:58:ca:dc:69:7c:74:
8a:3b:32:6e:12:a2:4b:1c:40:fe:df:b9:c6:78:62:
40:b6:e2:11:72:71:3c:f4:c7:0d:88:b5:6e:58:08:
5a:41:74:25:a6:66:70:de:97:19:15:2a:7b:82:b5:
c9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:86:52:DF:18:5F:45:5A:5F:DA:FF:6B:EC:73:C4:E0:83:8E:EA:2F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iIZS3xhfRVpf2v9r7HPE4IOO6i8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.52.0/23
Signature Algorithm: sha256WithRSAEncryption
30:df:d8:87:fe:46:bf:9f:9e:75:83:bb:32:f2:61:ed:23:08:
2f:3b:13:2d:e9:a5:9e:31:c7:c7:e0:77:e2:31:05:69:da:07:
ea:c4:72:bb:8c:08:1c:f4:9a:e6:e6:c7:0e:70:dc:12:f2:d5:
5a:16:3b:48:83:6f:e1:60:b8:da:34:cb:aa:f2:74:50:90:0d:
a2:d1:81:4b:cf:1f:57:14:d6:20:ad:87:e7:14:30:0a:49:64:
bd:4c:93:f4:29:17:22:da:d7:04:c0:3c:87:a6:d2:a3:c8:e4:
b6:d3:1b:33:a7:d5:a1:b0:55:5a:2d:4c:f1:eb:d1:5f:6e:49:
40:b9:be:c7:2a:7b:24:e0:90:02:ed:64:5d:af:05:d8:68:0b:
93:10:cf:51:09:9b:d5:56:cf:e5:e3:d6:c4:7f:96:a1:78:f0:
45:7f:5a:6c:79:6c:59:4d:c7:22:7a:65:26:5a:f6:99:5d:b8:
e5:35:22:db:74:b1:49:fd:62:2e:58:49:fa:6e:17:a5:20:70:
3b:a1:f1:d4:66:fb:7d:c0:72:4a:f8:dc:59:9d:5d:07:a6:0d:
d7:a0:be:d7:29:7d:35:31:b6:27:4f:97:1e:52:82:80:7c:45:
8c:2d:7f:a2:99:02:92:94:fa:16:63:f9:83:3b:1e:26:e3:b5:
72:06:4a:95
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUyNDhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDg4ODY1MkRGMTg1RjQ1
NUE1RkRBRkY2QkVDNzNDNEUwODM4RUVBMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJ8DSiVCSumZjn/1mDiiVBBdzJKjll2Nconn6Ryl2QPRsmKi8N
4PzFi/t9Qb0C2zBgWQ5CwWh2JfsGAIDY3eN7MpMts+v4tiyD+4LfpOwKbUsE3u2B
Cg7p1ojlDpnF/xo1dm5sCpIUfyP0DS5rjWRkPVnlN+agafnZxVoLnj+WgieLsnj1
ofItRGY7l+YP3O8NSh7RWIOPdQPmuOxqtnHABx6AYNHJ8aOnZrophS9cywf6fydA
i5Hh/MWX4nlpIOIntZwLpSJQOFbXD1jK3Gl8dIo7Mm4SokscQP7fucZ4YkC24hFy
cTz0xw2ItW5YCFpBdCWmZnDelxkVKnuCtckxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUiIZS3xhfRVpf2v9r7HPE4IOO6i8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2lJWlMzeGhmUlZwZjJ2OXI3
SFBFNElPTzZpOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq
ATQwDQYJKoZIhvcNAQELBQADggEBADDf2If+Rr+fnnWDuzLyYe0jCC87Ey3ppZ4x
x8fgd+IxBWnaB+rEcruMCBz0mubmxw5w3BLy1VoWO0iDb+FguNo0y6rydFCQDaLR
gUvPH1cU1iCth+cUMApJZL1Mk/QpFyLa1wTAPIem0qPI5LbTGzOn1aGwVVotTPHr
0V9uSUC5vscqeyTgkALtZF2vBdhoC5MQz1EJm9VWz+Xj1sR/lqF48EV/Wmx5bFlN
xyJ6ZSZa9plduOU1Itt0sUn9Yi5YSfpuF6UgcDuh8dRm+33Ackr43FmdXQemDdeg
vtcpfTUxtidPlx5SgoB8RYwtf6KZApKU+hZj+YM7HibjtXIGSpU=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:26 2023 by rpki-client on console-ams.rpki-client.org