Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qevPUQgunb8aiSpdmjAlzVplx1U.roa
File: qevPUQgunb8aiSpdmjAlzVplx1U.roa (raw, json)
Hash identifier: 3MYTdkNsHeRg9OJ/YQ4bKHQjVWwWqGWCzSFVI0H1KOg=
Subject key identifier: A9:EB:CF:51:08:2E:9D:BF:1A:89:2A:5D:9A:30:25:CD:5A:65:C7:55
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2385
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qevPUQgunb8aiSpdmjAlzVplx1U.roa
Signing time: Fri 16 Dec 2022 03:44:10 +0000
ROA not before: Fri 16 Dec 2022 03:44:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.0.0/15 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9093 (0x2385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Dec 16 03:44:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A9EBCF51082E9DBF1A892A5D9A3025CD5A65C755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:be:a7:b4:96:17:ab:0b:10:3e:47:22:53:
81:19:72:be:f3:9b:2d:3d:24:00:23:cb:b3:38:eb:
d6:38:63:a0:ca:cd:06:aa:ed:45:32:69:a9:6b:b2:
95:1f:d3:3a:81:89:09:65:94:59:72:81:ea:67:11:
e0:18:87:a9:49:14:1c:34:51:83:86:b8:66:8e:d1:
c8:e6:1b:74:b9:cd:ad:43:ef:20:7a:61:25:9b:f3:
cb:2b:94:43:cc:59:ea:b4:a9:8e:f0:b1:bc:47:bb:
19:f7:64:c3:67:80:49:ab:17:76:d1:8b:5d:cf:e2:
ff:17:2f:51:19:4e:91:43:05:38:c2:aa:51:d6:92:
ba:63:d5:a5:a2:b9:db:6d:f4:95:79:6e:e6:90:12:
1f:04:21:9f:12:1b:ee:76:c9:24:3f:63:9b:a5:76:
24:4a:25:06:63:5b:01:3c:ff:d9:44:8d:80:6e:36:
c1:10:87:ac:63:d9:b2:60:55:02:ae:49:11:92:59:
bd:e1:bd:90:fa:13:d9:35:75:a4:a4:c8:aa:7c:b0:
15:c6:3f:4f:34:4f:eb:eb:7d:02:cf:8c:b6:55:37:
6b:b5:f6:11:4a:8f:eb:d0:76:4c:dc:68:cd:2a:c4:
20:ef:a5:ad:10:2a:93:81:d2:7b:88:24:7b:db:f9:
ee:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EB:CF:51:08:2E:9D:BF:1A:89:2A:5D:9A:30:25:CD:5A:65:C7:55
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qevPUQgunb8aiSpdmjAlzVplx1U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.0.0/15
Signature Algorithm: sha256WithRSAEncryption
57:56:18:b3:9d:f5:d5:20:82:4c:49:92:fc:5b:d0:69:81:02:
e9:a2:bf:fd:c9:08:1b:c6:80:d1:5c:ac:37:d1:8b:de:0d:6c:
8c:52:a7:cb:ab:e8:be:ed:74:e6:4c:4e:3a:fa:e1:7b:87:ba:
45:d2:11:25:71:fa:ef:0f:bf:fa:29:14:53:d9:4f:de:82:8d:
25:14:fd:73:b0:73:30:2b:8f:6b:52:d2:62:07:e3:fe:0c:d8:
59:2f:05:62:cf:79:78:f6:d3:44:a3:1f:60:92:e4:a6:47:3b:
87:7e:0b:f5:47:89:f5:64:71:9f:43:ef:9a:d9:54:7d:57:fa:
79:5c:9d:0f:70:fb:af:cc:15:e3:ed:f9:60:3f:bf:38:65:c7:
9c:ba:c5:b0:b3:bb:7f:2a:22:4b:ca:3a:47:b0:9b:11:3e:5a:
cb:56:34:82:b8:28:6c:3c:06:85:16:b1:1a:a7:20:ef:af:fd:
ed:5d:4b:83:74:8a:66:4c:86:cc:f2:8d:c0:0c:78:1f:9e:e6:
2a:87:98:aa:aa:6f:47:c6:4a:83:08:46:ea:e8:0d:33:ac:3b:
33:94:a0:1a:e4:1c:ec:8a:23:c5:66:c9:c1:0c:93:fe:0d:cf:
f8:5b:cb:32:e5:df:45:c6:70:05:b8:cd:d5:0c:de:6b:92:be:
9a:4c:c7:f1
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgICI4UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjEyMTYw
MzQ0MTBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEE5RUJDRjUxMDgyRTlE
QkYxQTg5MkE1RDlBMzAyNUNENUE2NUM3NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCrr6ntJYXqwsQPkciU4EZcr7zmy09JAAjy7M469Y4Y6DKzQaq
7UUyaalrspUf0zqBiQlllFlygepnEeAYh6lJFBw0UYOGuGaO0cjmG3S5za1D7yB6
YSWb88srlEPMWeq0qY7wsbxHuxn3ZMNngEmrF3bRi13P4v8XL1EZTpFDBTjCqlHW
krpj1aWiudtt9JV5buaQEh8EIZ8SG+52ySQ/Y5uldiRKJQZjWwE8/9lEjYBuNsEQ
h6xj2bJgVQKuSRGSWb3hvZD6E9k1daSkyKp8sBXGP080T+vrfQLPjLZVN2u19hFK
j+vQdkzcaM0qxCDvpa0QKpOB0nuIJHvb+e7zAgMBAAGjggHtMIIB6TAdBgNVHQ4E
FgQUqevPUQgunb8aiSpdmjAlzVplx1UwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FldlBVUWd1bmI4YWlTcGRt
akFselZwbHgxVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwF2
6DANBgkqhkiG9w0BAQsFAAOCAQEAV1YYs5311SCCTEmS/FvQaYEC6aK//ckIG8aA
0VysN9GL3g1sjFKny6vovu105kxOOvrhe4e6RdIRJXH67w+/+ikUU9lP3oKNJRT9
c7BzMCuPa1LSYgfj/gzYWS8FYs95ePbTRKMfYJLkpkc7h34L9UeJ9WRxn0PvmtlU
fVf6eVydD3D7r8wV4+35YD+/OGXHnLrFsLO7fyoiS8o6R7CbET5ay1Y0grgobDwG
hRaxGqcg76/97V1Lg3SKZkyGzPKNwAx4H57mKoeYqqpvR8ZKgwhG6ugNM6w7M5Sg
GuQc7IojxWbJwQyT/g3P+FvLMuXfRcZwBbjN1Qzea5K+mkzH8Q==
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:35 2023 by rpki-client on console-ams.rpki-client.org