Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iwLO83CNEWAjIdpj2Pe9B2jPfxY.roa
File: iwLO83CNEWAjIdpj2Pe9B2jPfxY.roa (raw, json)
Hash identifier: kQz8Y/7v02JrAlW8PoK+8P1DHzmB/TeEU6yx+fwC9aI=
Subject key identifier: 8B:02:CE:F3:70:8D:11:60:23:21:DA:63:D8:F7:BD:07:68:CF:7F:16
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20AA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iwLO83CNEWAjIdpj2Pe9B2jPfxY.roa
Signing time: Fri 25 Nov 2022 04:38:59 +0000
ROA not before: Fri 25 Nov 2022 04:38:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.88.0/21 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8362 (0x20aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8B02CEF3708D11602321DA63D8F7BD0768CF7F16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:0c:99:f0:15:dc:88:dd:d3:59:bb:04:1b:
1f:d1:bd:ad:37:1b:2e:0a:97:cf:5f:5d:b4:29:b9:
c1:f0:fb:5e:83:b8:d6:a9:21:7c:f9:72:28:5e:39:
f8:b1:21:4d:c5:21:87:f8:95:2c:68:55:5b:f7:72:
11:ff:7e:f6:cb:7c:9d:c7:12:cf:28:76:d2:d7:ca:
78:34:a4:b7:fc:0f:4f:5f:5c:b3:71:d6:8c:a8:aa:
1b:11:0d:99:a1:2c:a2:0a:79:d6:b8:b7:8b:20:a9:
ac:23:ac:bd:1d:af:d8:16:d9:71:b4:8c:21:39:2d:
49:05:a2:71:50:c2:41:b8:d9:d0:43:4c:4d:43:c7:
22:27:7e:f8:29:2a:42:0d:e1:8e:b6:70:8e:f3:a9:
97:bc:fc:2e:7f:d8:fc:8c:48:04:60:12:7d:54:70:
f1:cd:9a:0a:25:3b:9e:96:f2:6c:17:7f:3f:46:27:
ab:d8:3e:73:26:5e:68:d0:fe:89:1d:e4:7e:cf:29:
23:43:bd:65:39:6f:6f:6b:64:ac:6a:ec:ef:4e:eb:
c9:8e:ff:df:f2:af:b6:51:87:0d:14:82:32:5f:50:
05:7e:83:a6:a6:e4:1d:08:15:66:32:7b:4f:81:d6:
9d:1b:22:6e:29:08:67:2d:77:52:92:d6:1d:aa:e8:
57:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:02:CE:F3:70:8D:11:60:23:21:DA:63:D8:F7:BD:07:68:CF:7F:16
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iwLO83CNEWAjIdpj2Pe9B2jPfxY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.88.0/21
Signature Algorithm: sha256WithRSAEncryption
21:2f:94:59:f4:42:8f:bb:5e:70:70:2e:ba:80:f8:bd:46:07:
5f:65:e4:b8:35:92:57:e9:5f:57:c0:1f:92:bd:70:2a:82:69:
4a:e8:17:8b:d6:7b:28:d4:66:ec:db:91:9f:2b:cb:7d:38:3b:
62:d6:a4:a9:43:bd:6e:13:bc:a2:f2:14:c2:bd:93:a8:f1:73:
06:4a:21:03:73:33:19:a7:c6:4e:34:46:7d:7a:d5:cc:bd:29:
e8:00:e6:13:7f:6f:a8:bb:db:63:97:ca:f8:d1:b1:f7:bc:fc:
bc:c8:85:42:9e:41:df:4b:b0:a2:04:46:52:e6:29:44:78:62:
ab:c3:14:72:f1:53:d1:a8:d4:07:a3:13:94:f3:67:a5:52:8d:
c6:d4:c5:ac:fc:69:3e:57:4f:f1:7d:19:f9:a9:7b:df:fb:b9:
b1:3c:c6:d2:99:29:03:82:85:3b:46:d6:63:ed:44:84:1c:26:
ee:5d:68:32:07:2f:2d:79:ed:37:8a:74:58:ba:1e:50:88:52:
45:34:a1:c0:9d:7f:d7:54:06:22:bd:e8:41:b9:45:52:c4:66:
ba:a3:c4:48:9e:93:02:13:18:77:ea:4a:6f:1e:88:46:d6:84:
88:8c:9f:66:cc:92:40:70:f0:19:f9:fa:6e:95:38:bc:75:33:
62:58:a6:c5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIKowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4NTlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDhCMDJDRUYzNzA4RDEx
NjAyMzIxREE2M0Q4RjdCRDA3NjhDRjdGMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaAQyZ8BXciN3TWbsEGx/Rva03Gy4Kl89fXbQpucHw+16DuNap
IXz5ciheOfixIU3FIYf4lSxoVVv3chH/fvbLfJ3HEs8odtLXyng0pLf8D09fXLNx
1oyoqhsRDZmhLKIKeda4t4sgqawjrL0dr9gW2XG0jCE5LUkFonFQwkG42dBDTE1D
xyInfvgpKkIN4Y62cI7zqZe8/C5/2PyMSARgEn1UcPHNmgolO56W8mwXfz9GJ6vY
PnMmXmjQ/okd5H7PKSNDvWU5b29rZKxq7O9O68mO/9/yr7ZRhw0UgjJfUAV+g6am
5B0IFWYye0+B1p0bIm4pCGctd1KS1h2q6FehAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUiwLO83CNEWAjIdpj2Pe9B2jPfxYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2l3TE84M0NORVdBaklkcGoy
UGU5QjJqUGZ4WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wFgwDQYJKoZIhvcNAQELBQADggEBACEvlFn0Qo+7XnBwLrqA+L1GB19l5Lg1klfp
X1fAH5K9cCqCaUroF4vWeyjUZuzbkZ8ry304O2LWpKlDvW4TvKLyFMK9k6jxcwZK
IQNzMxmnxk40Rn161cy9KegA5hN/b6i722OXyvjRsfe8/LzIhUKeQd9LsKIERlLm
KUR4YqvDFHLxU9Go1AejE5TzZ6VSjcbUxaz8aT5XT/F9Gfmpe9/7ubE8xtKZKQOC
hTtG1mPtRIQcJu5daDIHLy157TeKdFi6HlCIUkU0ocCdf9dUBiK96EG5RVLEZrqj
xEiekwITGHfqSm8eiEbWhIiMn2bMkkBw8Bn5+m6VOLx1M2JYpsU=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:09 2023 by rpki-client on console-fra.rpki-client.org