Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k-7d8PgBBzyzI_YcCsC0X3yQ05w.roa
File: k-7d8PgBBzyzI_YcCsC0X3yQ05w.roa (raw, json)
Hash identifier: 1U+gMz9rGBlIKh9hcj3JP6dXLltByrv5Q+19sc587nk=
Subject key identifier: 93:EE:DD:F0:F8:01:07:3C:B3:23:F6:1C:0A:C0:B4:5F:7C:90:D3:9C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k-7d8PgBBzyzI_YcCsC0X3yQ05w.roa
Signing time: Thu 15 Sep 2022 02:44:48 +0000
ROA not before: Thu 15 Sep 2022 02:44:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.240.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=93EEDDF0F801073CB323F61C0AC0B45F7C90D39C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:44:1d:9a:89:ff:c7:59:c4:16:e6:1e:38:
d4:9c:87:81:f9:f1:24:8c:3c:8b:a0:fd:ad:9f:92:
f3:1e:5e:4b:be:f7:61:c6:ea:b5:18:7a:ac:c1:6a:
1f:36:2a:38:5a:b5:9d:df:17:92:cc:81:b7:be:8e:
18:61:6d:ff:58:6b:64:74:ba:a4:09:8f:bf:87:87:
12:bd:19:0f:13:90:ed:0f:39:31:6e:e2:68:83:f4:
4b:f5:00:0f:8a:19:0d:8e:29:08:ed:4b:11:2b:6d:
de:0d:0c:4d:32:aa:73:48:a8:03:20:cd:a5:b0:d9:
35:dc:7e:17:c4:6b:0b:e9:54:9a:d7:a9:62:37:0c:
dc:80:5f:46:72:c3:38:d6:a2:e0:2e:77:18:8d:99:
3e:bf:96:1d:b8:48:57:e8:4f:35:12:a5:65:f7:02:
3e:ed:44:a4:89:0e:bf:48:11:85:22:39:62:64:27:
47:ee:b7:3f:0d:2b:77:1f:ba:2f:c5:5f:ca:4b:d3:
5f:b6:3b:4a:a3:5b:54:58:5a:7d:f0:6d:92:b3:07:
af:6c:fd:47:ec:18:be:93:21:45:f8:2d:8f:b1:1c:
c6:18:01:01:52:a6:6c:25:16:1b:d6:bf:3d:a2:e2:
f2:2f:01:56:26:9e:32:59:b2:35:17:73:fc:f3:06:
b9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EE:DD:F0:F8:01:07:3C:B3:23:F6:1C:0A:C0:B4:5F:7C:90:D3:9C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/k-7d8PgBBzyzI_YcCsC0X3yQ05w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.240.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:2a:1b:f5:13:55:8d:06:89:d0:9b:d0:9b:e2:d4:e1:f4:a6:
7f:1a:cd:2c:52:3b:94:db:30:67:2e:36:68:8d:d4:ec:2b:54:
c1:89:c2:4e:81:80:1f:dc:9e:08:66:70:74:57:98:fd:2d:c9:
10:33:ba:9a:d7:00:3a:21:25:39:b2:29:ce:ba:57:e0:42:29:
35:bd:ed:f6:fd:b4:87:60:6c:e3:69:b6:2c:78:5a:99:1f:0b:
81:5b:e6:92:6f:40:81:ee:d4:17:48:9d:40:d2:dc:5c:00:21:
e3:d9:66:f4:e9:a8:1b:df:72:a3:e0:8f:02:73:f8:0b:55:e8:
db:1e:67:39:d5:27:c8:3a:13:41:72:a3:b5:72:e0:09:12:9c:
d3:1f:1c:35:7d:67:b3:60:7b:38:e6:3c:43:e5:1e:78:74:42:
49:bc:db:2d:ea:a1:70:ea:d5:9d:ab:a8:30:99:e3:63:d4:87:
c1:52:b0:2e:a5:db:67:3b:3a:36:6b:93:d7:d2:2e:4c:2e:a2:
e6:82:93:5e:0c:d1:f5:1b:0e:fa:5a:4e:69:ff:13:74:91:03:
70:94:5d:01:ac:ab:8d:42:8f:db:f2:8d:ef:5d:2e:22:f3:8a:
b6:f4:5d:2e:15:09:c5:46:cf:34:f0:c6:87:e1:6a:10:e9:0b:
5a:95:af:d4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ0NDhaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDkzRUVEREYwRjgwMTA3
M0NCMzIzRjYxQzBBQzBCNDVGN0M5MEQzOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAREQdmon/x1nEFuYeONSch4H58SSMPIug/a2fkvMeXku+92HG
6rUYeqzBah82KjhatZ3fF5LMgbe+jhhhbf9Ya2R0uqQJj7+HhxK9GQ8TkO0POTFu
4miD9Ev1AA+KGQ2OKQjtSxErbd4NDE0yqnNIqAMgzaWw2TXcfhfEawvpVJrXqWI3
DNyAX0ZywzjWouAudxiNmT6/lh24SFfoTzUSpWX3Aj7tRKSJDr9IEYUiOWJkJ0fu
tz8NK3cfui/FX8pL01+2O0qjW1RYWn3wbZKzB69s/UfsGL6TIUX4LY+xHMYYAQFS
pmwlFhvWvz2i4vIvAVYmnjJZsjUXc/zzBrk/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUk+7d8PgBBzyzI/YcCsC0X3yQ05wwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2stN2Q4UGdCQnp5eklfWWND
c0MwWDN5UTA1dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wfAwDQYJKoZIhvcNAQELBQADggEBAI4qG/UTVY0GidCb0Jvi1OH0pn8azSxSO5Tb
MGcuNmiN1OwrVMGJwk6BgB/cnghmcHRXmP0tyRAzuprXADohJTmyKc66V+BCKTW9
7fb9tIdgbONptix4WpkfC4Fb5pJvQIHu1BdInUDS3FwAIePZZvTpqBvfcqPgjwJz
+AtV6NseZznVJ8g6E0Fyo7Vy4AkSnNMfHDV9Z7NgezjmPEPlHnh0Qkm82y3qoXDq
1Z2rqDCZ42PUh8FSsC6l22c7OjZrk9fSLkwuouaCk14M0fUbDvpaTmn/E3SRA3CU
XQGsq41Cj9vyje9dLiLzirb0XS4VCcVGzzTwxofhahDpC1qVr9Q=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:26 2023 by rpki-client on console-ams.rpki-client.org