Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jx6P3HH1VAUXGPU5YbaCQOqwJ5s.roa
File: jx6P3HH1VAUXGPU5YbaCQOqwJ5s.roa (raw, json)
Hash identifier: RsO48nXIjkokhs7mp9iNsrSc5TioXs7nleQPC57gkiI=
Subject key identifier: 8F:1E:8F:DC:71:F5:54:05:17:18:F5:39:61:B6:82:40:EA:B0:27:9B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jx6P3HH1VAUXGPU5YbaCQOqwJ5s.roa
Signing time: Thu 15 Sep 2022 02:46:19 +0000
ROA not before: Thu 15 Sep 2022 02:46:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.60.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8F1E8FDC71F554051718F53961B68240EAB0279B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:96:5b:33:1e:56:ac:16:1e:32:07:96:a2:
af:8d:1c:4c:1b:f5:b8:52:3d:c4:a0:91:6b:df:29:
9c:9a:24:51:0e:61:a0:b0:8c:39:6c:98:8a:b4:fb:
a6:24:4d:c0:e3:65:cb:7b:f9:50:b4:ec:51:87:7d:
37:39:ac:f0:34:82:51:51:ea:26:d9:7e:27:fe:0f:
8d:c5:0d:8e:c5:06:c9:4c:0d:45:12:ea:6e:c8:e8:
2d:46:56:57:a1:6f:a3:da:18:85:24:40:22:50:9f:
ca:21:aa:bd:95:f1:c0:ac:45:d6:af:34:a5:50:07:
08:ad:05:34:fe:df:81:e1:15:b6:43:d7:cf:0b:42:
31:3f:ad:61:cb:00:fb:08:b9:53:dc:28:b0:6a:89:
b7:93:33:cc:41:fb:64:e0:1c:17:78:7d:c1:4a:be:
a1:26:95:b3:90:60:e3:2b:e0:fd:98:48:5e:5a:66:
59:1c:06:04:9f:57:50:35:a4:96:9a:da:1a:aa:ca:
50:40:0d:cb:99:72:ce:f8:a1:c8:67:7f:60:02:bc:
db:0b:20:c2:3c:79:c0:20:55:2e:44:18:58:71:ed:
3d:f2:0c:32:89:ce:77:64:83:93:37:d8:61:ff:53:
e2:2b:c0:4e:95:52:d8:2a:be:3e:87:6d:0f:46:67:
cc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1E:8F:DC:71:F5:54:05:17:18:F5:39:61:B6:82:40:EA:B0:27:9B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jx6P3HH1VAUXGPU5YbaCQOqwJ5s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.60.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:e8:cb:52:87:c7:ff:42:3e:ac:75:13:8d:0e:fe:81:ac:a1:
c5:b9:08:cf:4d:1e:bd:73:ec:89:fb:1e:73:cd:4f:31:b4:e7:
dd:31:e2:56:29:e4:f2:aa:7a:be:cf:74:be:9b:79:42:16:ac:
37:05:f9:70:76:0d:6f:22:b6:d2:ae:8e:05:20:2f:d3:35:7a:
45:eb:ce:b6:4d:4d:be:d9:a5:cf:03:07:fb:5b:c9:f4:27:2e:
79:4a:7e:33:19:aa:a7:0c:ae:6e:f9:d2:b7:7e:c9:c4:c9:45:
88:cd:46:59:14:61:73:47:67:76:dd:43:d4:14:c4:d9:7a:69:
89:5c:11:bf:54:be:b8:9e:1a:4e:7e:9b:b1:59:08:81:fd:45:
c1:89:03:74:88:e4:42:52:51:d1:85:66:d9:3d:04:02:45:cf:
d3:66:9a:c9:a2:32:b9:71:87:72:fa:db:c5:df:8b:fe:43:9b:
66:bc:a9:41:ed:1d:bd:79:5c:4a:ab:4c:a8:5e:cc:19:ea:06:
cb:5e:82:76:49:00:04:d6:49:b8:2e:72:29:94:1c:b5:ea:0f:
b5:42:be:a6:33:f1:d7:b2:fe:3e:29:88:85:16:32:7c:d3:e7:
a2:98:7c:40:f0:fb:73:b9:c2:2c:2c:17:1c:b7:20:e5:1c:8a:
56:79:f6:5e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ2MTlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDhGMUU4RkRDNzFGNTU0
MDUxNzE4RjUzOTYxQjY4MjQwRUFCMDI3OUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhfpZbMx5WrBYeMgeWoq+NHEwb9bhSPcSgkWvfKZyaJFEOYaCw
jDlsmIq0+6YkTcDjZct7+VC07FGHfTc5rPA0glFR6ibZfif+D43FDY7FBslMDUUS
6m7I6C1GVlehb6PaGIUkQCJQn8ohqr2V8cCsRdavNKVQBwitBTT+34HhFbZD188L
QjE/rWHLAPsIuVPcKLBqibeTM8xB+2TgHBd4fcFKvqEmlbOQYOMr4P2YSF5aZlkc
BgSfV1A1pJaa2hqqylBADcuZcs74ochnf2ACvNsLIMI8ecAgVS5EGFhx7T3yDDKJ
zndkg5M32GH/U+IrwE6VUtgqvj6HbQ9GZ8yVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUjx6P3HH1VAUXGPU5YbaCQOqwJ5swHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2p4NlAzSEgxVkFVWEdQVTVZ
YmFDUU9xd0o1cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wTwwDQYJKoZIhvcNAQELBQADggEBAJvoy1KHx/9CPqx1E40O/oGsocW5CM9NHr1z
7In7HnPNTzG0590x4lYp5PKqer7PdL6beUIWrDcF+XB2DW8ittKujgUgL9M1ekXr
zrZNTb7Zpc8DB/tbyfQnLnlKfjMZqqcMrm750rd+ycTJRYjNRlkUYXNHZ3bdQ9QU
xNl6aYlcEb9UvrieGk5+m7FZCIH9RcGJA3SI5EJSUdGFZtk9BAJFz9NmmsmiMrlx
h3L628Xfi/5Dm2a8qUHtHb15XEqrTKhezBnqBstegnZJAATWSbgucimUHLXqD7VC
vqYz8dey/j4piIUWMnzT56KYfEDw+3O5wiwsFxy3IOUcilZ59l4=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-fra.rpki-client.org