Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oMM8LRAKKYNCjEl9eR1bHCthguc.roa
File: oMM8LRAKKYNCjEl9eR1bHCthguc.roa (raw, json)
Hash identifier: VWAi8J3wIN9la72EMR+neaOIMK0Y2PVsCFJ3hXNafvc=
Subject key identifier: A0:C3:3C:2D:10:0A:29:83:42:8C:49:7D:79:1D:5B:1C:2B:61:82:E7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2225
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oMM8LRAKKYNCjEl9eR1bHCthguc.roa
Signing time: Fri 25 Nov 2022 04:40:49 +0000
ROA not before: Fri 25 Nov 2022 04:40:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.52.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8741 (0x2225)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:49 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A0C33C2D100A2983428C497D791D5B1C2B6182E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:9c:b9:bf:63:84:9c:6b:f6:d2:8d:7f:59:3a:
d9:0c:68:0e:ce:af:be:a3:c8:a1:30:63:3f:af:f0:
46:df:3c:72:3c:b5:44:fc:ac:f8:b2:8f:2d:1d:b6:
b4:0c:ca:8f:72:8d:d8:a9:d5:c6:29:95:38:b3:2a:
d6:26:65:df:ec:ce:a5:6a:3c:0a:5d:41:c3:31:cf:
20:db:f0:d4:4c:20:d8:23:94:5e:83:ab:ef:11:20:
36:65:f8:2c:3d:80:85:e0:8d:81:e4:6a:0a:c2:d5:
c4:20:5a:61:31:25:0a:e8:df:74:83:eb:ef:fb:06:
7b:b1:57:73:32:f7:0d:07:1a:f0:b6:7b:9d:25:ac:
a0:f6:07:17:95:c4:7c:dd:28:04:de:71:ff:e1:08:
ee:ac:36:25:95:fd:60:57:37:92:7f:dd:e4:36:2e:
dc:0c:5e:3e:3a:b6:2b:ae:1a:3d:f0:0f:59:19:fc:
ad:de:c2:7f:ce:f8:12:17:f1:c7:a5:51:ab:ca:cc:
8d:a1:20:c1:ea:0b:ef:f0:5b:5e:80:47:08:e0:28:
94:f9:d6:15:46:27:cc:a3:26:2b:e0:c9:dd:09:b4:
6a:dd:fb:61:da:09:a6:91:05:1e:2e:90:00:0a:78:
66:bb:0a:a3:65:9e:ed:53:e0:d8:3a:12:a2:2d:4b:
3e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C3:3C:2D:10:0A:29:83:42:8C:49:7D:79:1D:5B:1C:2B:61:82:E7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oMM8LRAKKYNCjEl9eR1bHCthguc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.52.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:b8:bb:0d:4b:3b:0f:9f:c0:5c:b9:48:5a:02:99:76:5b:74:
9f:4f:50:f9:bc:47:d1:eb:b7:a6:f5:c3:a2:46:98:ef:0a:3d:
f7:ef:9f:45:52:36:25:42:63:3f:07:a5:86:04:91:b4:4c:0c:
cd:4e:8a:27:1e:48:c1:e4:06:ba:6e:c1:9e:72:04:63:a7:6e:
4a:1c:b5:84:8e:c9:2d:a9:12:2a:c2:f7:85:ed:86:8a:92:cf:
09:ea:45:67:98:27:c0:99:72:aa:42:85:27:60:85:b2:a0:18:
0c:7b:c6:b5:c7:ba:76:85:75:23:10:c1:08:2c:1a:b3:59:3e:
6e:eb:26:3b:8c:3b:36:6b:9d:ab:05:76:07:a5:30:c0:3f:7d:
6c:97:77:e4:d8:3f:46:9f:f9:92:63:e1:05:ca:e6:7d:c0:5c:
3d:d3:fa:ea:a6:8d:35:a4:22:b4:d7:c2:78:a1:9b:83:eb:1b:
0a:26:ff:d8:b6:ab:3d:be:20:9e:07:f4:fb:5e:b3:bb:13:e7:
cf:5a:20:9a:89:3d:dc:d5:0f:85:ec:31:f7:7f:f3:e7:e6:94:
92:fa:4e:dd:13:85:28:19:6f:32:35:ba:57:58:5c:8f:d0:03:
3c:c0:25:34:41:d8:75:99:24:01:b8:5d:82:52:e6:cd:11:e7:
99:87:0d:58
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIiUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDQwNDlaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEEwQzMzQzJEMTAwQTI5
ODM0MjhDNDk3RDc5MUQ1QjFDMkI2MTgyRTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDrnLm/Y4Sca/bSjX9ZOtkMaA7Or76jyKEwYz+v8EbfPHI8tUT8
rPiyjy0dtrQMyo9yjdip1cYplTizKtYmZd/szqVqPApdQcMxzyDb8NRMINgjlF6D
q+8RIDZl+Cw9gIXgjYHkagrC1cQgWmExJQro33SD6+/7BnuxV3My9w0HGvC2e50l
rKD2BxeVxHzdKATecf/hCO6sNiWV/WBXN5J/3eQ2LtwMXj46tiuuGj3wD1kZ/K3e
wn/O+BIX8celUavKzI2hIMHqC+/wW16ARwjgKJT51hVGJ8yjJivgyd0JtGrd+2Ha
CaaRBR4ukAAKeGa7CqNlnu1T4Ng6EqItSz4nAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUoMM8LRAKKYNCjEl9eR1bHCthgucwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29NTThMUkFLS1lOQ2pFbDll
UjFiSEN0aGd1Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq
ATQwDQYJKoZIhvcNAQELBQADggEBAKu4uw1LOw+fwFy5SFoCmXZbdJ9PUPm8R9Hr
t6b1w6JGmO8KPffvn0VSNiVCYz8HpYYEkbRMDM1OiiceSMHkBrpuwZ5yBGOnbkoc
tYSOyS2pEirC94XthoqSzwnqRWeYJ8CZcqpChSdghbKgGAx7xrXHunaFdSMQwQgs
GrNZPm7rJjuMOzZrnasFdgelMMA/fWyXd+TYP0af+ZJj4QXK5n3AXD3T+uqmjTWk
IrTXwnihm4PrGwom/9i2qz2+IJ4H9Ptes7sT589aIJqJPdzVD4XsMfd/8+fmlJL6
Tt0ThSgZbzI1uldYXI/QAzzAJTRB2HWZJAG4XYJS5s0R55mHDVg=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:10 2023 by rpki-client on console-fra.rpki-client.org