Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tfuGUyWseUuYTf6jtF5Ta1gB_OA.roa
File: tfuGUyWseUuYTf6jtF5Ta1gB_OA.roa (raw, json)
Hash identifier: xsD/0dO8+pn4uRqbMSzLaUAwSlDcqxcjBBHL/d0KF8U=
Subject key identifier: B5:FB:86:53:25:AC:79:4B:98:4D:FE:A3:B4:5E:53:6B:58:01:FC:E0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tfuGUyWseUuYTf6jtF5Ta1gB_OA.roa
Signing time: Thu 15 Sep 2022 02:45:06 +0000
ROA not before: Thu 15 Sep 2022 02:45:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.64.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B5FB865325AC794B984DFEA3B45E536B5801FCE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:7c:f7:3e:e4:96:13:53:ed:8b:21:94:a1:
d3:16:f2:8c:4a:da:29:83:e9:21:6e:b6:ab:10:a1:
72:71:2c:9f:45:78:2e:66:b4:6d:47:30:c5:94:df:
44:43:0e:6a:eb:69:b3:4a:dd:c7:80:70:bd:15:7f:
c9:5b:94:6c:58:74:e0:f8:82:51:84:86:60:4a:33:
25:6d:64:1c:c2:fa:e0:c0:0e:39:6b:18:a5:c9:a2:
52:b8:bd:d3:38:7f:65:0c:aa:e5:79:f1:2a:11:ef:
9e:d7:23:c3:3e:90:e4:47:08:c6:81:2a:2a:be:77:
f7:1c:88:c5:44:d9:93:92:30:ab:68:36:0f:4d:f9:
54:68:95:34:84:b2:f0:8c:da:9b:87:39:f8:a7:d7:
cf:dd:23:a6:c8:fd:03:3b:c9:4c:2b:22:a7:e9:c0:
c4:2f:12:ca:45:82:4e:4b:1e:3f:a1:55:ff:62:38:
61:71:27:1e:20:87:66:3c:e8:f5:3a:58:7e:60:b1:
1b:a8:1e:e0:fb:24:70:38:23:62:1e:39:1e:97:4e:
59:72:fd:5b:db:ec:04:df:3b:fd:96:01:a3:36:53:
e8:29:ae:2b:ea:67:4a:a7:a6:ba:47:32:b2:18:ac:
26:f6:4b:9b:19:9b:00:a3:75:aa:3d:f3:ed:14:ba:
45:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FB:86:53:25:AC:79:4B:98:4D:FE:A3:B4:5E:53:6B:58:01:FC:E0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tfuGUyWseUuYTf6jtF5Ta1gB_OA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.64.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:c1:f8:74:b7:0f:5f:79:43:07:71:58:a7:f9:7f:d6:73:2b:
de:f3:47:63:ad:bb:4c:e0:30:c4:9f:74:1d:d0:96:e8:25:ce:
a6:b4:06:40:72:0f:7e:1f:e2:e3:73:19:47:17:83:c9:1c:67:
d5:8a:f7:e3:d5:28:c0:f4:33:7f:3b:26:94:3f:ea:5b:27:ec:
f2:ac:ee:6f:c3:48:eb:9a:33:da:01:99:a7:d1:d6:da:7d:30:
49:10:9a:8d:cd:76:ad:a2:01:01:6c:8b:a1:53:f4:6f:b2:dc:
7b:d7:c5:7c:55:cc:da:b0:42:39:12:eb:6a:40:4c:ea:d0:d4:
78:38:8a:29:86:fd:90:f6:a8:88:10:82:d3:1b:9f:7d:cd:b8:
be:47:1e:87:11:f4:6d:ee:8e:f1:8c:48:d7:57:4b:48:0d:f9:
1f:31:31:da:3c:7a:32:05:de:34:f9:b0:25:a4:ca:dc:c4:3c:
84:e6:9b:b7:f9:46:a5:12:0f:3b:c2:d4:df:b7:4d:02:39:30:
5d:cd:01:0a:59:1b:4b:47:18:bd:7e:d0:c3:8a:7c:ca:ef:b2:
32:a4:ca:8b:a4:d9:60:22:c8:3d:0a:d0:e7:7a:9a:3c:1e:ca:
92:a4:23:59:09:ad:bf:28:f9:1f:95:99:fe:54:60:8e:ac:6f:
03:ba:7c:76
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ1MDZaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEI1RkI4NjUzMjVBQzc5
NEI5ODRERkVBM0I0NUU1MzZCNTgwMUZDRTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsJXz3PuSWE1PtiyGUodMW8oxK2imD6SFutqsQoXJxLJ9FeC5m
tG1HMMWU30RDDmrrabNK3ceAcL0Vf8lblGxYdOD4glGEhmBKMyVtZBzC+uDADjlr
GKXJolK4vdM4f2UMquV58SoR757XI8M+kORHCMaBKiq+d/cciMVE2ZOSMKtoNg9N
+VRolTSEsvCM2puHOfin18/dI6bI/QM7yUwrIqfpwMQvEspFgk5LHj+hVf9iOGFx
Jx4gh2Y86PU6WH5gsRuoHuD7JHA4I2IeOR6XTlly/Vvb7ATfO/2WAaM2U+gprivq
Z0qnprpHMrIYrCb2S5sZmwCjdao98+0UukW7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUtfuGUyWseUuYTf6jtF5Ta1gB/OAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3RmdUdVeVdzZVV1WVRmNmp0
RjVUYTFnQl9PQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wkAwDQYJKoZIhvcNAQELBQADggEBAE7B+HS3D195QwdxWKf5f9ZzK97zR2Otu0zg
MMSfdB3Qluglzqa0BkByD34f4uNzGUcXg8kcZ9WK9+PVKMD0M387JpQ/6lsn7PKs
7m/DSOuaM9oBmafR1tp9MEkQmo3Ndq2iAQFsi6FT9G+y3HvXxXxVzNqwQjkS62pA
TOrQ1Hg4iimG/ZD2qIgQgtMbn33NuL5HHocR9G3ujvGMSNdXS0gN+R8xMdo8ejIF
3jT5sCWkytzEPITmm7f5RqUSDzvC1N+3TQI5MF3NAQpZG0tHGL1+0MOKfMrvsjKk
youk2WAiyD0K0Od6mjweypKkI1kJrb8o+R+Vmf5UYI6sbwO6fHY=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:41 2023 by rpki-client on console-fra.rpki-client.org