Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mzKeEhDekLwM98_zyVYmKaGCbRw.roa
File: mzKeEhDekLwM98_zyVYmKaGCbRw.roa (raw, json)
Hash identifier: qMSeo8ENhENdRT9SwkJ5zYZFjB2w1FmRcV0+HsqAGU4=
Subject key identifier: 9B:32:9E:12:10:DE:90:BC:0C:F7:CF:F3:C9:56:26:29:A1:82:6D:1C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mzKeEhDekLwM98_zyVYmKaGCbRw.roa
Signing time: Thu 15 Sep 2022 02:45:17 +0000
ROA not before: Thu 15 Sep 2022 02:45:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.64.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9B329E1210DE90BC0CF7CFF3C9562629A1826D1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:8e:cb:d8:2a:84:ca:fe:bd:02:0d:35:ef:
d5:4e:b9:a7:24:70:45:0a:c2:28:ec:38:16:91:ea:
1b:c7:bc:a7:32:ae:e8:3c:97:22:b6:01:a5:3a:57:
af:25:73:ac:4b:e4:b3:98:94:b0:50:92:61:f8:73:
cd:d2:84:de:fe:ef:ce:ac:5c:3f:e6:e4:08:ec:9c:
ee:7a:aa:c8:7a:1e:17:de:39:b8:6a:08:8a:ae:56:
9d:c6:29:96:91:3a:b6:b7:07:e5:f8:99:b4:38:9c:
7b:9d:76:4a:a6:aa:3a:d1:5b:3d:91:d0:05:68:5a:
e3:c4:38:c6:e0:a8:0f:78:26:4f:a3:10:40:a0:e8:
c9:dd:a8:89:c2:9a:1d:43:80:b3:55:28:9d:71:dd:
d2:75:6d:32:46:0f:62:31:1f:0d:80:a6:e4:08:6c:
ee:58:94:6a:85:ad:09:6e:31:30:06:9b:21:65:f6:
d8:c0:b1:19:5d:67:7c:6f:de:c0:67:81:60:82:c1:
f4:df:18:12:94:3e:7a:b3:35:58:39:7e:e5:c8:89:
b1:9a:1b:df:6a:fe:75:29:0f:bc:2f:e1:4c:2a:85:
f6:c2:6c:bc:4d:c1:7d:7e:eb:31:18:f7:93:1a:55:
04:a7:8e:b6:8a:7e:c9:2c:ef:5a:44:b0:29:9a:73:
c6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:32:9E:12:10:DE:90:BC:0C:F7:CF:F3:C9:56:26:29:A1:82:6D:1C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mzKeEhDekLwM98_zyVYmKaGCbRw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.64.0/21
Signature Algorithm: sha256WithRSAEncryption
25:a8:21:33:ce:1f:c9:9f:2e:e9:59:01:20:0b:79:bd:c1:2b:
ca:d9:05:c8:73:e7:66:fe:83:89:a4:fd:2f:16:e8:2b:e4:0d:
60:fd:04:d4:77:5d:21:58:7f:45:2a:8d:ec:e5:b5:ce:4a:0c:
a0:42:51:52:6b:49:41:97:d5:c1:43:14:0f:76:af:94:9a:b7:
41:3f:b6:73:e6:5e:cb:dc:18:15:f2:bd:d1:b1:7e:92:b8:ee:
5d:b6:86:ae:eb:33:77:50:c5:e1:a9:73:71:8e:01:d7:03:8e:
9a:a8:d4:82:ea:81:e8:1d:8a:e9:3f:3a:c4:d9:ec:07:e8:d5:
6b:aa:55:c4:43:76:71:7b:ec:cb:f9:0e:2f:e5:a6:01:a7:d1:
9b:cd:eb:e5:ac:cc:ef:f7:2a:9c:52:1b:c3:c9:c4:7b:8c:e8:
a9:80:a3:fd:cc:d9:2a:cd:84:d6:41:bf:98:a2:fc:10:a2:22:
f5:a8:12:45:ab:26:b2:0f:c7:c3:5c:0d:af:af:32:14:f1:1f:
2e:0f:ad:ec:5f:ee:30:20:49:e0:32:56:a5:2c:51:64:ce:66:
8c:c9:ad:ce:17:ca:3a:aa:61:cd:d3:73:c1:ab:e5:bc:4a:3e:
89:79:35:0d:3c:bc:1d:b6:18:3f:73:83:49:6c:89:4d:4b:2a:
bc:bb:44:32
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1MTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDlCMzI5RTEyMTBERTkw
QkMwQ0Y3Q0ZGM0M5NTYyNjI5QTE4MjZEMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6Z47L2CqEyv69Ag0179VOuackcEUKwijsOBaR6hvHvKcyrug8
lyK2AaU6V68lc6xL5LOYlLBQkmH4c83ShN7+786sXD/m5AjsnO56qsh6HhfeObhq
CIquVp3GKZaROra3B+X4mbQ4nHuddkqmqjrRWz2R0AVoWuPEOMbgqA94Jk+jEECg
6MndqInCmh1DgLNVKJ1x3dJ1bTJGD2IxHw2ApuQIbO5YlGqFrQluMTAGmyFl9tjA
sRldZ3xv3sBngWCCwfTfGBKUPnqzNVg5fuXIibGaG99q/nUpD7wv4UwqhfbCbLxN
wX1+6zEY95MaVQSnjraKfsks71pEsCmac8ZXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUmzKeEhDekLwM98/zyVYmKaGCbRwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL216S2VFaERla0x3TTk4X3p5
VlltS2FHQ2JSdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wEAwDQYJKoZIhvcNAQELBQADggEBACWoITPOH8mfLulZASALeb3BK8rZBchz52b+
g4mk/S8W6CvkDWD9BNR3XSFYf0Uqjezltc5KDKBCUVJrSUGX1cFDFA92r5Sat0E/
tnPmXsvcGBXyvdGxfpK47l22hq7rM3dQxeGpc3GOAdcDjpqo1ILqgegdiuk/OsTZ
7Afo1WuqVcRDdnF77Mv5Di/lpgGn0ZvN6+WszO/3KpxSG8PJxHuM6KmAo/3M2SrN
hNZBv5ii/BCiIvWoEkWrJrIPx8NcDa+vMhTxHy4Prexf7jAgSeAyVqUsUWTOZozJ
rc4XyjqqYc3Tc8Gr5bxKPol5NQ08vB22GD9zg0lsiU1LKry7RDI=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:39 2023 by rpki-client on console-fra.rpki-client.org