Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/orWLKL_EGC8UhzYk9cPkfc8DV28.roa
File: orWLKL_EGC8UhzYk9cPkfc8DV28.roa (raw, json)
Hash identifier: e3TjppyQgx0vh8FbOuJ5+uH5Kq/O1GihMSYtdXatyiQ=
Subject key identifier: A2:B5:8B:28:BF:C4:18:2F:14:87:36:24:F5:C3:E4:7D:CF:03:57:6F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/orWLKL_EGC8UhzYk9cPkfc8DV28.roa
Signing time: Thu 15 Sep 2022 02:52:41 +0000
ROA not before: Thu 15 Sep 2022 02:52:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.56.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A2B58B28BFC4182F14873624F5C3E47DCF03576F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9e:a7:e0:0c:a6:d5:1a:5e:5d:75:27:0d:fd:
ad:b6:b9:52:37:37:ce:da:c5:b1:8a:ad:df:af:3c:
e6:b7:bc:5f:d0:af:d6:f9:36:8e:8c:ce:d9:3b:43:
23:ae:2d:08:16:c1:ed:74:30:9e:87:ee:32:28:29:
c8:31:52:cb:0c:81:25:2a:bb:f5:95:12:6e:74:3e:
84:1f:d0:81:34:fb:f6:e8:60:f7:4f:97:93:b0:0e:
aa:62:32:e9:fa:78:47:35:37:9f:bc:6f:56:d2:33:
c7:43:55:dd:d6:ed:17:d3:90:b6:8e:3c:b2:15:60:
fd:1c:70:9e:f5:ba:fb:68:d0:3a:18:1c:90:6f:93:
a8:cb:79:dc:00:15:ff:72:36:3b:ad:b6:d3:d3:1e:
81:70:89:2a:6d:98:87:d0:63:80:2f:63:da:0b:68:
3e:86:a9:a4:82:69:69:f2:71:9d:7e:8e:0c:3e:f5:
d2:72:56:09:18:71:81:2b:b5:db:85:4a:7c:c2:f3:
e4:ee:65:c7:fc:c0:1d:9f:04:ea:0a:97:7f:1e:12:
ed:69:e3:b9:5b:00:51:1b:6b:40:25:84:59:0d:43:
1e:78:b4:f5:8f:e2:81:f1:73:21:38:10:13:75:96:
15:7b:70:6b:7a:25:bc:97:40:8b:da:8b:97:cf:c1:
a8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B5:8B:28:BF:C4:18:2F:14:87:36:24:F5:C3:E4:7D:CF:03:57:6F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/orWLKL_EGC8UhzYk9cPkfc8DV28.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.56.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:9a:c5:7f:74:c4:7e:da:e8:bf:1c:70:0e:15:3b:f5:7c:89:
3e:22:e5:2f:68:0b:48:d1:e5:da:dc:c7:de:75:0e:6f:4d:ea:
dc:5a:86:cf:83:46:dd:fd:ee:dc:2a:a6:f8:c5:2e:25:56:73:
2d:ae:8c:ef:d2:e9:42:06:4d:ad:50:78:aa:49:0d:cc:23:9c:
d2:24:6c:4a:7c:10:a1:07:40:2f:5b:0b:6a:7d:fe:11:13:ab:
9f:26:e8:ec:9d:40:1c:65:98:88:48:40:21:00:ac:8f:05:0a:
00:ce:05:15:96:7f:71:4a:71:d5:02:6f:43:33:71:5f:b1:d6:
74:6a:de:74:17:9c:10:02:de:1d:3f:6f:16:49:4e:56:6d:a9:
4e:65:af:d1:36:c6:af:7b:26:8e:c4:96:cc:e8:2d:a3:47:b4:
5c:f8:92:18:52:77:b7:08:f1:0f:dc:b3:48:c7:d8:31:a6:f1:
b8:58:5e:88:c8:77:ed:d1:84:22:ba:59:de:ab:91:e6:46:c6:
0a:a9:84:5e:8f:07:37:8f:bc:4a:dd:7d:c6:6b:02:fb:73:7c:
60:71:e9:59:f9:6f:c8:d8:6b:72:bd:9d:4e:6e:a6:51:1e:8a:
e0:19:01:bb:73:f6:96:4a:2b:9f:38:36:31:fd:c1:92:6d:56:
fd:2e:dc:50
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUyNDFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEEyQjU4QjI4QkZDNDE4
MkYxNDg3MzYyNEY1QzNFNDdEQ0YwMzU3NkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPnqfgDKbVGl5ddScN/a22uVI3N87axbGKrd+vPOa3vF/Qr9b5
No6Mztk7QyOuLQgWwe10MJ6H7jIoKcgxUssMgSUqu/WVEm50PoQf0IE0+/boYPdP
l5OwDqpiMun6eEc1N5+8b1bSM8dDVd3W7RfTkLaOPLIVYP0ccJ71uvto0DoYHJBv
k6jLedwAFf9yNjutttPTHoFwiSptmIfQY4AvY9oLaD6GqaSCaWnycZ1+jgw+9dJy
VgkYcYErtduFSnzC8+TuZcf8wB2fBOoKl38eEu1p47lbAFEba0AlhFkNQx54tPWP
4oHxcyE4EBN1lhV7cGt6JbyXQIvai5fPwagPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUorWLKL/EGC8UhzYk9cPkfc8DV28wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL29yV0xLTF9FR0M4VWh6WWs5
Y1BrZmM4RFYyOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wTgwDQYJKoZIhvcNAQELBQADggEBAC2axX90xH7a6L8ccA4VO/V8iT4i5S9oC0jR
5drcx951Dm9N6txahs+DRt397twqpvjFLiVWcy2ujO/S6UIGTa1QeKpJDcwjnNIk
bEp8EKEHQC9bC2p9/hETq58m6OydQBxlmIhIQCEArI8FCgDOBRWWf3FKcdUCb0Mz
cV+x1nRq3nQXnBAC3h0/bxZJTlZtqU5lr9E2xq97Jo7ElszoLaNHtFz4khhSd7cI
8Q/cs0jH2DGm8bhYXojId+3RhCK6Wd6rkeZGxgqphF6PBzePvErdfcZrAvtzfGBx
6Vn5b8jYa3K9nU5uplEeiuAZAbtz9pZKK584NjH9wZJtVv0u3FA=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:28 2023 by rpki-client on console-ams.rpki-client.org