Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q1jYiDXadOzV_aFAQ3Tc4iusVzY.roa
File: q1jYiDXadOzV_aFAQ3Tc4iusVzY.roa (raw, json)
Hash identifier: nZ8efPrlVdmy2L0bznvWfCQNMBhJlPWvoNrWz5+Jobs=
Subject key identifier: AB:58:D8:88:35:DA:74:EC:D5:FD:A1:40:43:74:DC:E2:2B:AC:57:36
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20A7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q1jYiDXadOzV_aFAQ3Tc4iusVzY.roa
Signing time: Fri 25 Nov 2022 04:38:58 +0000
ROA not before: Fri 25 Nov 2022 04:38:58 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.12.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8359 (0x20a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:58 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AB58D88835DA74ECD5FDA1404374DCE22BAC5736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:32:52:83:50:a7:f7:c6:74:c4:c2:e5:a6:
3f:49:12:e0:71:81:d5:11:81:96:65:e1:ef:a0:3a:
ba:73:1e:94:0e:ec:f3:ed:3e:2a:49:d9:af:27:cf:
77:55:22:47:da:c7:c6:6a:a0:70:5c:4d:59:2c:37:
96:0a:62:b9:5d:ea:7f:38:f7:e4:10:7e:15:f4:4a:
51:14:9f:36:0e:fc:44:bd:49:48:00:a0:da:f9:f5:
42:ba:f7:4c:03:1b:44:7d:d2:bf:33:2c:70:35:0b:
ea:bf:e6:dc:90:1f:4d:20:40:03:4e:46:70:ed:1c:
b5:ea:02:ce:d0:b2:24:26:51:ba:ef:9a:b4:60:43:
13:a4:32:76:2b:69:88:ea:4a:0d:73:bf:2c:f1:ef:
d0:9e:b4:60:c4:29:93:88:1e:45:0f:8b:6c:a9:d7:
1b:eb:c6:69:52:bc:2b:7f:46:4d:28:7c:1c:2f:f4:
79:88:81:37:31:07:27:9b:78:26:e7:c7:be:6b:2c:
a1:1c:02:93:22:90:95:f3:26:77:00:39:27:a7:b7:
4a:d8:4a:c3:4e:fd:5c:12:7f:cf:10:28:91:d4:50:
18:42:3e:ca:70:bf:02:8a:de:2b:79:93:a1:e9:f0:
33:58:11:64:ae:b9:61:31:f1:b6:12:0e:60:3e:56:
d2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:58:D8:88:35:DA:74:EC:D5:FD:A1:40:43:74:DC:E2:2B:AC:57:36
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q1jYiDXadOzV_aFAQ3Tc4iusVzY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.12.0/22
Signature Algorithm: sha256WithRSAEncryption
15:93:17:b5:58:31:cb:e0:7d:fc:4b:0c:22:47:b6:c2:99:af:
a9:78:4d:28:6a:e4:16:6f:37:e5:95:82:16:d1:90:3e:00:bc:
0e:b2:da:19:41:b9:99:b4:b0:79:0e:a7:35:f5:44:0b:5c:4c:
72:ab:59:43:4f:33:8a:12:4d:3e:14:39:bd:5f:8f:a3:b6:f4:
c6:5d:f6:76:ce:6e:55:2c:70:f9:d0:64:4c:54:38:49:e8:25:
84:49:da:64:c2:2d:48:6c:d0:e4:b8:e4:3e:1d:2e:ce:77:cf:
44:f1:ff:14:c1:f1:86:be:25:60:ea:c5:34:95:1c:da:51:f6:
e2:88:01:7c:6c:06:db:b0:98:d3:2a:bd:1a:c1:28:f1:41:2d:
20:89:2e:00:5b:66:70:23:45:07:fd:34:15:1a:99:29:63:8e:
3c:09:ef:2d:d5:3e:ef:62:40:9b:d7:b0:7f:72:a5:2e:8e:1e:
5d:7d:52:9e:65:db:ad:dd:cd:5d:79:23:d8:75:8c:64:e5:53:
d1:83:7f:dd:23:01:38:3e:a0:92:c5:78:08:27:e3:34:bb:38:
d3:fb:d4:fb:7e:ff:96:75:ca:c3:d7:f4:db:47:11:7b:1e:29:
47:7d:61:e0:7b:be:0c:bb:4e:15:a2:dc:c8:82:b5:a3:a7:3f:
cc:7e:ed:20
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIKcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4NThaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEFCNThEODg4MzVEQTc0
RUNENUZEQTE0MDQzNzREQ0UyMkJBQzU3MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNoDJSg1Cn98Z0xMLlpj9JEuBxgdURgZZl4e+gOrpzHpQO7PPt
PipJ2a8nz3dVIkfax8ZqoHBcTVksN5YKYrld6n849+QQfhX0SlEUnzYO/ES9SUgA
oNr59UK690wDG0R90r8zLHA1C+q/5tyQH00gQANORnDtHLXqAs7QsiQmUbrvmrRg
QxOkMnYraYjqSg1zvyzx79CetGDEKZOIHkUPi2yp1xvrxmlSvCt/Rk0ofBwv9HmI
gTcxByebeCbnx75rLKEcApMikJXzJncAOSent0rYSsNO/VwSf88QKJHUUBhCPspw
vwKK3it5k6Hp8DNYEWSuuWEx8bYSDmA+VtIjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUq1jYiDXadOzV/aFAQ3Tc4iusVzYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ExallpRFhhZE96Vl9hRkFR
M1RjNGl1c1Z6WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6AwwDQYJKoZIhvcNAQELBQADggEBABWTF7VYMcvgffxLDCJHtsKZr6l4TShq5BZv
N+WVghbRkD4AvA6y2hlBuZm0sHkOpzX1RAtcTHKrWUNPM4oSTT4UOb1fj6O29MZd
9nbOblUscPnQZExUOEnoJYRJ2mTCLUhs0OS45D4dLs53z0Tx/xTB8Ya+JWDqxTSV
HNpR9uKIAXxsBtuwmNMqvRrBKPFBLSCJLgBbZnAjRQf9NBUamSljjjwJ7y3VPu9i
QJvXsH9ypS6OHl19Up5l263dzV15I9h1jGTlU9GDf90jATg+oJLFeAgn4zS7ONP7
1Pt+/5Z1ysPX9NtHEXseKUd9YeB7vgy7ThWi3MiCtaOnP8x+7SA=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:34 2023 by rpki-client on console-ams.rpki-client.org