Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qT9wb3HFnN_GQUID5z18KpVlhmg.roa
File: qT9wb3HFnN_GQUID5z18KpVlhmg.roa (raw, json)
Hash identifier: pz0aVpcI0VHzYN3V5ZE/6VlzPORh6qtG8Zp7Wkh+3Yk=
Subject key identifier: A9:3F:70:6F:71:C5:9C:DF:C6:41:42:03:E7:3D:7C:2A:95:65:86:68
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2036
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qT9wb3HFnN_GQUID5z18KpVlhmg.roa
Signing time: Fri 25 Nov 2022 04:38:27 +0000
ROA not before: Fri 25 Nov 2022 04:38:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.120.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8246 (0x2036)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A93F706F71C59CDFC6414203E73D7C2A95658668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:99:de:48:56:e1:f5:82:78:95:7f:9d:4b:
dc:6b:e1:d0:4b:9e:cc:b7:8e:c6:d0:83:da:2b:f7:
f5:83:18:95:86:79:ca:6c:cc:f1:20:ff:e3:4e:a2:
9e:85:ce:06:ee:9d:c7:59:2a:84:d3:91:4f:5e:b0:
4f:c8:b5:36:1c:cc:6a:0e:49:00:ed:66:2f:09:45:
01:6c:8b:31:db:7c:6f:b6:60:3d:cb:e3:df:25:b6:
91:2c:68:a6:78:47:5f:f7:71:99:6f:39:ed:07:f7:
60:5c:a1:71:73:e4:a2:4b:2f:19:71:c2:b5:4c:c6:
c6:92:0f:f1:82:16:02:ad:e0:d3:b5:16:69:21:07:
1c:62:5d:a4:31:2d:a9:cb:58:81:39:77:c1:d4:20:
fa:2b:1f:03:62:f5:1f:bc:e6:e9:98:b0:0b:7f:25:
0c:d4:b9:c2:95:b6:3b:e0:96:f2:90:a5:c4:b2:68:
d4:2f:7f:70:6e:f7:fd:27:7c:e5:0a:8b:b5:39:0a:
4a:21:bf:43:84:2e:31:91:27:dc:33:5d:bd:90:b2:
77:f1:22:9d:0c:51:9b:21:12:a3:63:71:97:2a:f8:
03:25:c3:04:07:97:8d:9f:2a:ad:dc:24:b4:be:85:
a9:b3:17:f0:fc:60:7f:1c:71:df:de:db:f1:0a:4b:
dc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3F:70:6F:71:C5:9C:DF:C6:41:42:03:E7:3D:7C:2A:95:65:86:68
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qT9wb3HFnN_GQUID5z18KpVlhmg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.120.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:b0:ea:4c:a4:a3:91:b2:57:fd:a2:10:1d:5d:c5:13:43:5e:
e7:9a:c3:22:3b:f9:ee:70:6c:a5:b8:d5:60:b0:e0:9e:3b:4e:
b9:0f:26:45:04:28:df:42:c4:73:7f:1e:1d:95:d3:d4:bf:44:
d6:b8:c4:f8:f8:fa:cc:bc:b0:aa:1b:27:85:8a:45:53:75:45:
46:a5:0f:65:2a:c6:5d:55:2b:0c:d7:d7:55:bf:6f:8a:84:a9:
a2:02:27:e9:88:27:59:64:17:ce:76:56:9d:80:96:3a:42:b3:
b9:51:57:b6:d2:3e:2f:89:f2:2e:86:d8:a9:62:0e:ed:22:54:
89:d9:6a:b3:5a:ed:af:1a:10:f6:c2:9a:81:c6:07:5e:af:de:
63:f8:f8:00:02:e9:31:9c:15:22:6e:08:ae:e3:6e:74:80:08:
e7:c9:95:40:4e:59:74:5a:a9:3e:70:10:20:d5:bd:c6:20:46:
be:8c:15:05:1c:28:b0:95:85:2d:f7:e4:1c:7e:40:71:23:a4:
f5:d8:62:64:3e:67:04:74:73:65:cf:ed:48:74:91:e3:81:40:
21:3f:48:93:54:f2:25:f0:8b:aa:5e:73:63:b5:9f:7c:72:91:
0d:12:49:e4:14:0d:ff:3b:dc:01:14:e2:42:1b:d1:4c:b9:75:
e5:60:37:a5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIDYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4MjdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEE5M0Y3MDZGNzFDNTlD
REZDNjQxNDIwM0U3M0Q3QzJBOTU2NTg2NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDA+ZneSFbh9YJ4lX+dS9xr4dBLnsy3jsbQg9or9/WDGJWGecps
zPEg/+NOop6FzgbuncdZKoTTkU9esE/ItTYczGoOSQDtZi8JRQFsizHbfG+2YD3L
498ltpEsaKZ4R1/3cZlvOe0H92BcoXFz5KJLLxlxwrVMxsaSD/GCFgKt4NO1Fmkh
BxxiXaQxLanLWIE5d8HUIPorHwNi9R+85umYsAt/JQzUucKVtjvglvKQpcSyaNQv
f3Bu9/0nfOUKi7U5Ckohv0OELjGRJ9wzXb2QsnfxIp0MUZshEqNjcZcq+AMlwwQH
l42fKq3cJLS+hamzF/D8YH8ccd/e2/EKS9yXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUqT9wb3HFnN/GQUID5z18KpVlhmgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FUOXdiM0hGbk5fR1FVSUQ1
ejE4S3BWbGhtZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wXgwDQYJKoZIhvcNAQELBQADggEBAKCw6kyko5GyV/2iEB1dxRNDXueawyI7+e5w
bKW41WCw4J47TrkPJkUEKN9CxHN/Hh2V09S/RNa4xPj4+sy8sKobJ4WKRVN1RUal
D2Uqxl1VKwzX11W/b4qEqaICJ+mIJ1lkF852Vp2AljpCs7lRV7bSPi+J8i6G2Kli
Du0iVInZarNa7a8aEPbCmoHGB16v3mP4+AAC6TGcFSJuCK7jbnSACOfJlUBOWXRa
qT5wECDVvcYgRr6MFQUcKLCVhS335Bx+QHEjpPXYYmQ+ZwR0c2XP7Uh0keOBQCE/
SJNU8iXwi6pec2O1n3xykQ0SSeQUDf873AEU4kIb0Uy5deVgN6U=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:10 2023 by rpki-client on console-fra.rpki-client.org