Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lxeEUojPUVTRq-13w8GnCv72hqw.roa
File: lxeEUojPUVTRq-13w8GnCv72hqw.roa (raw, json)
Hash identifier: 7yQ8GZJJyPZNnmYwq3r56S4D+TyC1j6cQSb/fyQao9g=
Subject key identifier: 97:17:84:52:88:CF:51:54:D1:AB:ED:77:C3:C1:A7:0A:FE:F6:86:AC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FCB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lxeEUojPUVTRq-13w8GnCv72hqw.roa
Signing time: Tue 11 Oct 2022 14:17:23 +0000
ROA not before: Tue 11 Oct 2022 14:17:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.208.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8139 (0x1fcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Oct 11 14:17:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9717845288CF5154D1ABED77C3C1A70AFEF686AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ae:b9:d2:0b:ba:6e:e2:da:6f:09:59:b1:8b:
fc:cc:4d:14:86:d7:ab:9d:9d:60:52:7d:e2:65:8e:
cc:67:11:d4:2d:19:b0:06:ed:64:0d:36:10:d3:7f:
dd:8a:7d:0e:17:a8:71:02:38:89:3c:89:3b:2e:05:
2a:2d:26:a7:ff:e1:d1:68:8c:1e:f5:3d:b0:ff:cb:
66:58:57:ba:4e:cb:59:3a:ac:20:29:da:4e:de:7a:
bd:33:bc:34:6c:31:94:f1:6e:0b:96:15:ab:f2:de:
bc:2e:5d:ed:1e:a0:51:8c:67:19:d9:18:16:97:58:
eb:27:c0:f3:33:4f:b8:9f:15:bf:38:c3:d1:27:4a:
25:42:87:e6:07:d4:ef:79:16:62:ac:a6:8e:d2:b8:
8f:df:d1:79:0d:10:8d:68:47:ae:2c:41:8d:9a:1f:
97:bb:84:2b:e5:81:2e:d1:6b:79:ac:d9:aa:ea:ed:
d6:dd:22:7d:01:8b:d5:a4:ef:47:e7:86:6c:81:42:
9f:07:ae:4c:85:20:23:02:d0:72:fc:de:87:c6:02:
07:6f:ce:ef:46:6c:aa:3a:83:bd:f1:df:83:3f:38:
7a:f3:33:c1:fd:98:c4:8f:4e:03:c1:18:f7:6d:d1:
b9:99:44:7c:15:80:f4:08:29:7d:22:9c:2a:6d:63:
b4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:17:84:52:88:CF:51:54:D1:AB:ED:77:C3:C1:A7:0A:FE:F6:86:AC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lxeEUojPUVTRq-13w8GnCv72hqw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.208.0/21
Signature Algorithm: sha256WithRSAEncryption
52:8e:cf:c4:9d:69:86:c7:e0:00:39:34:98:cf:f8:ad:d9:a4:
e3:7b:12:9d:89:2a:d6:10:f4:23:02:83:0c:2a:24:b0:64:6d:
c7:b8:99:f6:73:16:b8:d9:d5:05:4b:3f:b9:2c:f7:e3:ec:e7:
89:dc:88:b2:48:a0:17:03:b0:51:8b:74:06:c6:97:ef:1b:a0:
58:b4:a8:78:0a:69:f9:9e:24:ee:8d:51:ed:9f:80:78:e4:d4:
d5:fa:69:58:b5:d2:68:99:0d:ef:20:e1:c0:2c:85:4c:a1:78:
94:0a:da:21:1c:01:0d:fb:a3:67:ea:c3:51:0d:07:c7:75:eb:
bb:6f:42:35:2d:57:09:56:e1:55:55:12:57:79:8f:a8:1a:92:
1f:f1:ff:a0:83:f7:8c:8e:1e:4e:6d:89:90:35:ba:a2:0e:b7:
48:9b:a9:72:e6:3f:51:42:14:b1:23:aa:c3:7e:ea:f6:0f:ad:
bc:56:3b:1d:2e:f2:ad:cd:c0:4b:ac:3d:70:fc:93:cd:1b:64:
39:0f:80:24:5e:ea:ca:cb:5b:07:30:20:53:da:5a:da:c6:8e:
83:0f:2e:09:22:c8:ea:6a:42:8c:d2:96:61:e4:da:ad:37:13:
6e:d8:50:0a:03:d5:b8:61:cd:e8:c3:07:e6:ad:c0:f3:c7:72:
bd:33:18:f6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH8swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjEwMTEx
NDE3MjNaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDk3MTc4NDUyODhDRjUx
NTREMUFCRUQ3N0MzQzFBNzBBRkVGNjg2QUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQrrnSC7pu4tpvCVmxi/zMTRSG16udnWBSfeJljsxnEdQtGbAG
7WQNNhDTf92KfQ4XqHECOIk8iTsuBSotJqf/4dFojB71PbD/y2ZYV7pOy1k6rCAp
2k7eer0zvDRsMZTxbguWFavy3rwuXe0eoFGMZxnZGBaXWOsnwPMzT7ifFb84w9En
SiVCh+YH1O95FmKspo7SuI/f0XkNEI1oR64sQY2aH5e7hCvlgS7Ra3ms2arq7dbd
In0Bi9Wk70fnhmyBQp8HrkyFICMC0HL83ofGAgdvzu9GbKo6g73x34M/OHrzM8H9
mMSPTgPBGPdt0bmZRHwVgPQIKX0inCptY7R1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUlxeEUojPUVTRq+13w8GnCv72hqwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2x4ZUVVb2pQVVZUUnEtMTN3
OEduQ3Y3Mmhxdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wdAwDQYJKoZIhvcNAQELBQADggEBAFKOz8SdaYbH4AA5NJjP+K3ZpON7Ep2JKtYQ
9CMCgwwqJLBkbce4mfZzFrjZ1QVLP7ks9+Ps54nciLJIoBcDsFGLdAbGl+8boFi0
qHgKafmeJO6NUe2fgHjk1NX6aVi10miZDe8g4cAshUyheJQK2iEcAQ37o2fqw1EN
B8d167tvQjUtVwlW4VVVEld5j6gakh/x/6CD94yOHk5tiZA1uqIOt0ibqXLmP1FC
FLEjqsN+6vYPrbxWOx0u8q3NwEusPXD8k80bZDkPgCRe6srLWwcwIFPaWtrGjoMP
LgkiyOpqQozSlmHk2q03E27YUAoD1bhhzejDB+atwPPHcr0zGPY=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:39 2023 by rpki-client on console-fra.rpki-client.org