Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qHAovNI1BRyEWRhHLpj40bpxdhY.roa
File: qHAovNI1BRyEWRhHLpj40bpxdhY.roa (raw, json)
Hash identifier: 19C2GtxsT8O5L1y3Tr+rwjU0OOACI5RR9cusqt6Hvm4=
Subject key identifier: A8:70:28:BC:D2:35:05:1C:84:59:18:47:2E:98:F8:D1:BA:71:76:16
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qHAovNI1BRyEWRhHLpj40bpxdhY.roa
Signing time: Thu 15 Sep 2022 02:53:12 +0000
ROA not before: Thu 15 Sep 2022 02:53:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A87028BCD235051C845918472E98F8D1BA717616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:0e:84:15:1c:17:4f:8f:68:78:b1:3b:a3:
9f:c5:08:d4:ee:89:76:68:e6:e7:b3:e1:86:9f:0a:
6a:cd:b9:b4:53:71:f5:f6:c3:3a:09:59:db:ae:7a:
73:8b:6d:7a:ac:5f:49:b5:57:d9:02:86:dc:58:e4:
c2:32:ab:e1:36:b3:6d:ea:7d:d2:df:82:ae:5a:67:
02:41:de:63:73:0f:a8:92:aa:9a:7a:23:fa:42:12:
ad:f7:9b:c1:2b:17:4c:0a:5c:0f:a9:5e:6e:cb:31:
b6:64:a0:ff:4d:87:3c:9e:84:7b:44:c5:8b:f6:60:
dc:38:ab:30:5e:ba:7a:1d:6a:db:cc:13:63:63:ad:
87:d7:a8:81:be:f8:fc:80:c6:9d:b3:cf:4c:6f:8c:
87:d6:17:d9:4a:47:36:d1:1d:ea:84:63:8b:a8:f2:
2a:db:55:68:eb:77:1d:5c:bf:b6:ad:c4:07:af:aa:
aa:4f:cb:60:e8:34:8a:30:67:8a:a6:2f:10:7c:39:
90:c5:23:10:ea:71:25:82:5b:26:dd:75:2f:8e:79:
33:2b:3d:65:c8:a0:81:59:b6:1a:51:79:49:86:48:
cb:23:62:89:e2:fa:82:6d:1d:cd:07:2c:95:72:de:
45:6f:54:b6:7e:f2:1d:b4:f6:0e:cb:4d:44:4b:b3:
ea:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:70:28:BC:D2:35:05:1C:84:59:18:47:2E:98:F8:D1:BA:71:76:16
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qHAovNI1BRyEWRhHLpj40bpxdhY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.180.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:63:1b:6f:40:f2:f6:86:ca:2a:8e:da:7d:a3:e5:b4:f9:7e:
71:a0:7b:0d:77:e3:a1:7c:9c:6b:db:88:90:01:99:c5:de:6b:
49:f4:7f:88:49:be:ba:62:fb:5b:31:2b:f8:36:c9:0b:f7:c8:
5f:ee:b6:bc:b1:9e:8e:4f:b7:7b:d7:46:ab:62:c0:16:77:47:
42:6f:15:a1:65:58:0b:a8:6d:4e:f8:5b:94:62:49:92:5d:99:
2b:30:b1:6d:e9:9c:f3:4c:c1:43:db:7e:30:40:e3:03:52:ba:
e2:9c:3c:be:6b:c3:b1:56:a2:f1:9a:f4:cb:f3:85:4d:69:a2:
04:cd:65:7e:af:2f:a5:fb:8f:0b:25:cf:33:14:4f:e9:fe:84:
c3:32:a7:fc:b7:ed:ce:99:33:01:06:13:d0:f5:e8:9f:1f:4d:
1e:3f:40:a7:2e:96:54:64:96:b6:ab:f5:df:82:a7:43:7d:f1:
51:09:be:73:e0:be:03:21:9f:5c:03:ff:0f:46:5f:e4:ca:09:
2d:6a:e6:39:59:2c:76:23:f6:b3:ea:4a:c7:be:dd:e3:e4:58:
e2:3e:f9:da:2d:9f:9c:b9:39:0c:90:32:d5:88:6b:df:62:0e:
58:3e:d5:41:14:8f:5a:28:b8:9f:6a:f2:d5:61:ea:40:1a:88:
aa:ce:4e:a1
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUzMTJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEE4NzAyOEJDRDIzNTA1
MUM4NDU5MTg0NzJFOThGOEQxQkE3MTc2MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF/w6EFRwXT49oeLE7o5/FCNTuiXZo5uez4YafCmrNubRTcfX2
wzoJWduuenOLbXqsX0m1V9kChtxY5MIyq+E2s23qfdLfgq5aZwJB3mNzD6iSqpp6
I/pCEq33m8ErF0wKXA+pXm7LMbZkoP9NhzyehHtExYv2YNw4qzBeunodatvME2Nj
rYfXqIG++PyAxp2zz0xvjIfWF9lKRzbRHeqEY4uo8irbVWjrdx1cv7atxAevqqpP
y2DoNIowZ4qmLxB8OZDFIxDqcSWCWybddS+OeTMrPWXIoIFZthpReUmGSMsjYoni
+oJtHc0HLJVy3kVvVLZ+8h209g7LTURLs+rVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUqHAovNI1BRyEWRhHLpj40bpxdhYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FIQW92TkkxQlJ5RVdSaEhM
cGo0MGJweGRoWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AbQwDQYJKoZIhvcNAQELBQADggEBALJjG29A8vaGyiqO2n2j5bT5fnGgew1346F8
nGvbiJABmcXea0n0f4hJvrpi+1sxK/g2yQv3yF/utryxno5Pt3vXRqtiwBZ3R0Jv
FaFlWAuobU74W5RiSZJdmSswsW3pnPNMwUPbfjBA4wNSuuKcPL5rw7FWovGa9Mvz
hU1pogTNZX6vL6X7jwslzzMUT+n+hMMyp/y37c6ZMwEGE9D16J8fTR4/QKcullRk
lrar9d+Cp0N98VEJvnPgvgMhn1wD/w9GX+TKCS1q5jlZLHYj9rPqSse+3ePkWOI+
+dotn5y5OQyQMtWIa99iDlg+1UEUj1oouJ9q8tVh6kAaiKrOTqE=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:40 2023 by rpki-client on console-fra.rpki-client.org