Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wWDtIIV8Jl0bSuZyr-Qt9xTmFJA.roa
File: wWDtIIV8Jl0bSuZyr-Qt9xTmFJA.roa (raw, json)
Hash identifier: eLY9/oO5rAuHfPFFhac4fjd/5XR+ergj64r30eg/AUg=
Subject key identifier: C1:60:ED:20:85:7C:26:5D:1B:4A:E6:72:AF:E4:2D:F7:14:E6:14:90
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wWDtIIV8Jl0bSuZyr-Qt9xTmFJA.roa
Signing time: Thu 15 Sep 2022 02:46:30 +0000
ROA not before: Thu 15 Sep 2022 02:46:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.248.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C160ED20857C265D1B4AE672AFE42DF714E61490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:72:84:b5:a4:12:65:09:da:a7:d9:42:7b:
da:18:70:a6:b2:7a:d6:71:0c:30:60:5b:e8:39:52:
70:00:67:d0:5a:60:1e:9f:c3:98:de:c1:66:68:94:
6b:0d:16:d1:3b:42:18:f5:2b:ec:c3:89:39:61:ac:
84:ff:7b:98:01:c0:49:de:1d:59:f8:5c:ad:9c:09:
3c:95:aa:eb:0b:ba:5a:b4:43:51:ba:6f:26:52:37:
ec:53:65:6d:d2:66:f5:49:91:d2:97:c1:e6:81:8f:
22:31:eb:b9:d8:45:ab:aa:b3:54:24:d8:cf:db:ec:
75:4e:3d:b5:30:29:a5:ce:41:fb:b0:2c:f2:be:62:
c9:d6:c5:6a:df:f3:f3:09:ce:16:f1:84:6e:26:f8:
a5:e3:07:82:5c:d8:a6:4d:62:01:b4:ae:3a:5d:04:
9e:ef:0c:b6:59:9f:f2:d7:6c:d5:22:9c:53:34:4d:
70:1f:f8:e9:73:b4:c7:fc:06:0b:2c:56:7f:67:e4:
80:19:d5:ee:58:06:11:0e:ff:c0:7b:b5:17:a9:6d:
c0:8f:8d:2c:d4:65:e8:e2:10:e0:9c:a2:89:13:5b:
e2:6d:7e:7d:11:a1:3e:ca:d4:1f:7b:72:22:f6:25:
c3:5a:3f:d0:63:39:ac:f1:9e:67:91:d3:b7:c9:73:
c3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:60:ED:20:85:7C:26:5D:1B:4A:E6:72:AF:E4:2D:F7:14:E6:14:90
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wWDtIIV8Jl0bSuZyr-Qt9xTmFJA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.248.0/21
Signature Algorithm: sha256WithRSAEncryption
4b:9a:d2:6b:b6:5b:7b:b3:b2:a6:9e:e5:fe:b9:0d:02:35:7f:
ad:af:b5:f6:13:09:bc:61:79:5f:b4:08:63:24:e1:bb:d0:60:
14:7b:b1:31:0b:5f:a3:7f:0f:4e:f8:5f:99:2f:28:e1:df:bd:
5a:bb:6b:a1:cd:b8:ae:5c:ad:96:fa:85:18:c4:3e:ec:a4:63:
8f:ee:6a:83:cc:86:9c:14:ab:9e:c3:d3:e2:6c:ec:7f:62:04:
79:58:91:04:34:5b:e5:e9:5c:da:ce:51:da:f9:4c:32:03:27:
8a:17:38:ed:5b:1e:56:1e:13:ea:f8:02:43:a5:27:7c:66:52:
5d:29:14:20:83:30:44:f3:26:82:8f:51:ae:1e:1a:6b:33:ef:
b2:77:e7:6d:a3:82:c6:17:23:e3:2c:1d:4b:79:26:1b:4e:5c:
38:04:04:1f:d0:61:cf:2d:33:a3:c1:d4:49:d2:08:53:98:ab:
08:ad:bb:0c:03:51:13:ac:21:ec:f8:b2:14:f2:d8:82:ad:69:
d4:98:ef:ef:99:57:6e:44:3f:09:8f:f6:15:a4:d8:4b:42:40:
4c:5c:2b:7a:29:26:84:e9:bd:51:4c:26:b0:e7:2d:19:2c:3c:
78:25:b6:55:e7:4b:72:e0:8c:28:08:e5:f5:34:2b:6f:8a:4c:
8d:c9:e9:a6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICH6AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjA5MTUw
MjQ2MzBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEMxNjBFRDIwODU3QzI2
NUQxQjRBRTY3MkFGRTQyREY3MTRFNjE0OTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxmnKEtaQSZQnap9lCe9oYcKayetZxDDBgW+g5UnAAZ9BaYB6f
w5jewWZolGsNFtE7Qhj1K+zDiTlhrIT/e5gBwEneHVn4XK2cCTyVqusLulq0Q1G6
byZSN+xTZW3SZvVJkdKXweaBjyIx67nYRauqs1Qk2M/b7HVOPbUwKaXOQfuwLPK+
YsnWxWrf8/MJzhbxhG4m+KXjB4Jc2KZNYgG0rjpdBJ7vDLZZn/LXbNUinFM0TXAf
+OlztMf8BgssVn9n5IAZ1e5YBhEO/8B7tRepbcCPjSzUZejiEOCcookTW+Jtfn0R
oT7K1B97ciL2JcNaP9BjOazxnmeR07fJc8MjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUwWDtIIV8Jl0bSuZyr+Qt9xTmFJAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dXRHRJSVY4SmwwYlN1Wnly
LVF0OXhUbUZKQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wvgwDQYJKoZIhvcNAQELBQADggEBAEua0mu2W3uzsqae5f65DQI1f62vtfYTCbxh
eV+0CGMk4bvQYBR7sTELX6N/D074X5kvKOHfvVq7a6HNuK5crZb6hRjEPuykY4/u
aoPMhpwUq57D0+Js7H9iBHlYkQQ0W+XpXNrOUdr5TDIDJ4oXOO1bHlYeE+r4AkOl
J3xmUl0pFCCDMETzJoKPUa4eGmsz77J3522jgsYXI+MsHUt5JhtOXDgEBB/QYc8t
M6PB1EnSCFOYqwituwwDUROsIez4shTy2IKtadSY7++ZV25EPwmP9hWk2EtCQExc
K3opJoTpvVFMJrDnLRksPHgltlXnS3LgjCgI5fU0K2+KTI3J6aY=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:42 2023 by rpki-client on console-fra.rpki-client.org