Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tqLhArFJqQxlUtn-bF3wmb7Szrc.roa
File: tqLhArFJqQxlUtn-bF3wmb7Szrc.roa (raw, json)
Hash identifier: jOrV3y3Fdepicp9NWq9cAfxP4+vBbUj/rPF2ooVRAvw=
Subject key identifier: B6:A2:E1:02:B1:49:A9:0C:65:52:D9:FE:6C:5D:F0:99:BE:D2:CE:B7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tqLhArFJqQxlUtn-bF3wmb7Szrc.roa
Signing time: Thu 15 Sep 2022 02:52:34 +0000
ROA not before: Thu 15 Sep 2022 02:52:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.176.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B6A2E102B149A90C6552D9FE6C5DF099BED2CEB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:0f:07:4d:d2:8b:d0:4d:f8:91:47:28:6c:
6c:c9:50:d0:8f:20:02:ac:c8:33:0e:42:e9:cf:0e:
f6:25:2a:46:4e:e7:1e:75:ca:73:b6:02:98:c0:fd:
eb:30:60:1a:21:f9:01:c1:bb:8a:2e:30:c9:bc:1f:
a0:a2:ad:46:9e:c6:8a:54:f7:f0:2e:42:67:15:33:
49:53:ea:d7:99:6d:2c:52:48:d7:67:46:32:f1:81:
b9:7a:e1:e0:9f:7c:f7:d2:ec:c4:b8:a8:61:ed:16:
2c:e1:e9:35:db:52:31:79:ba:c4:a1:7e:c0:45:06:
e8:1c:83:49:89:dc:11:70:fe:df:e9:11:9b:34:e5:
a5:a6:3e:f8:8b:ed:0c:bd:63:b7:51:c7:c5:dd:de:
91:e0:19:58:26:08:6e:81:48:47:58:00:34:ee:e2:
33:f9:4f:65:5d:d6:7b:d8:cf:3f:af:0c:86:7f:d4:
e3:65:22:de:25:25:be:42:e9:80:33:4f:40:51:fa:
61:6b:ce:2e:ba:6a:e3:a0:69:42:8a:aa:a0:f0:e9:
02:5f:75:e7:0a:8f:e7:00:8b:af:d0:a6:b9:3d:0a:
c8:3d:a4:ac:51:62:c2:22:2a:a9:a3:2a:d8:ad:a4:
fa:6d:d9:08:3d:a0:9f:71:32:8c:0e:3f:e3:41:a5:
91:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A2:E1:02:B1:49:A9:0C:65:52:D9:FE:6C:5D:F0:99:BE:D2:CE:B7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tqLhArFJqQxlUtn-bF3wmb7Szrc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.176.0/21
Signature Algorithm: sha256WithRSAEncryption
7d:5c:a3:f0:20:0d:22:cb:86:f3:06:84:7c:89:11:9c:fa:fa:
95:35:b6:43:71:b8:21:12:5b:ed:79:98:a8:8a:1a:2e:0c:20:
4a:77:ea:ab:fd:80:77:ca:54:81:52:76:68:a6:7d:b4:6f:dc:
d5:f6:0c:57:e9:f8:0f:dd:b9:16:2b:6f:b0:a4:9e:59:8d:6e:
1a:b3:7b:e1:c4:23:a9:32:b4:17:0e:4b:1f:9a:b6:2d:fb:f9:
22:8b:99:f5:9a:7f:eb:cb:f1:13:33:ab:21:ff:29:05:93:73:
bd:6a:b0:34:b9:57:2a:87:64:ee:6b:9d:8b:0e:6f:da:04:f8:
3e:41:80:58:91:46:8b:44:a6:62:e9:11:61:f3:d8:40:87:90:
43:26:fc:a5:f3:28:d9:09:a8:ff:3c:cb:42:7b:7e:a5:f0:2c:
01:94:87:3e:ce:b4:80:bf:c1:13:2b:09:6d:97:26:98:ed:a6:
43:29:36:07:93:f9:87:36:12:ef:d7:56:e8:82:54:14:7a:bf:
4f:b5:b5:8a:d3:db:1d:58:ca:6f:41:f6:09:28:8b:be:bc:e0:
e9:21:3d:02:22:8b:74:b9:f6:e2:92:94:86:ba:34:da:e3:13:
30:77:d6:14:58:31:19:ad:c3:aa:e3:89:0e:8d:ef:f0:a8:68:
0d:7a:09:1c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjUyMzRaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEI2QTJFMTAyQjE0OUE5
MEM2NTUyRDlGRTZDNURGMDk5QkVEMkNFQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLxg8HTdKL0E34kUcobGzJUNCPIAKsyDMOQunPDvYlKkZO5x51
ynO2ApjA/eswYBoh+QHBu4ouMMm8H6CirUaexopU9/AuQmcVM0lT6teZbSxSSNdn
RjLxgbl64eCffPfS7MS4qGHtFizh6TXbUjF5usShfsBFBugcg0mJ3BFw/t/pEZs0
5aWmPviL7Qy9Y7dRx8Xd3pHgGVgmCG6BSEdYADTu4jP5T2Vd1nvYzz+vDIZ/1ONl
It4lJb5C6YAzT0BR+mFrzi66auOgaUKKqqDw6QJfdecKj+cAi6/Qprk9Csg9pKxR
YsIiKqmjKtitpPpt2Qg9oJ9xMowOP+NBpZEPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUtqLhArFJqQxlUtn+bF3wmb7SzrcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3RxTGhBckZKcVF4bFV0bi1i
RjN3bWI3U3pyYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wrAwDQYJKoZIhvcNAQELBQADggEBAH1co/AgDSLLhvMGhHyJEZz6+pU1tkNxuCES
W+15mKiKGi4MIEp36qv9gHfKVIFSdmimfbRv3NX2DFfp+A/duRYrb7CknlmNbhqz
e+HEI6kytBcOSx+ati37+SKLmfWaf+vL8RMzqyH/KQWTc71qsDS5VyqHZO5rnYsO
b9oE+D5BgFiRRotEpmLpEWHz2ECHkEMm/KXzKNkJqP88y0J7fqXwLAGUhz7OtIC/
wRMrCW2XJpjtpkMpNgeT+Yc2Eu/XVuiCVBR6v0+1tYrT2x1Yym9B9gkoi7684Okh
PQIii3S59uKSlIa6NNrjEzB31hRYMRmtw6rjiQ6N7/CoaA16CRw=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:41 2023 by rpki-client on console-fra.rpki-client.org