Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-3UTddYdZ-4p-J8e9SUuqlTyj4g.roa
File: -3UTddYdZ-4p-J8e9SUuqlTyj4g.roa (raw, json)
Hash identifier: eApznKyPX87+hh0RdpnaIZ26/ll1uYnfW0sx+0LzCkI=
Subject key identifier: FB:75:13:75:D6:1D:67:EE:29:F8:9F:1E:F5:25:2E:AA:54:F2:8F:88
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21E9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-3UTddYdZ-4p-J8e9SUuqlTyj4g.roa
Signing time: Fri 25 Nov 2022 04:40:32 +0000
ROA not before: Fri 25 Nov 2022 04:40:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8681 (0x21e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FB751375D61D67EE29F89F1EF5252EAA54F28F88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:15:0e:5d:5f:76:84:14:81:d1:34:65:52:e7:
6a:b2:17:6d:5f:7f:5b:a2:b1:5f:c7:87:d4:0c:ef:
3a:02:63:88:b1:02:54:bf:e6:36:67:a0:b2:eb:28:
53:be:37:ff:ca:1c:e3:3c:d8:f4:fa:0f:0b:8c:53:
f8:fa:e6:5b:40:7e:0b:67:00:1e:92:1e:ea:4d:f1:
05:f8:09:13:e4:30:a0:e8:c9:1f:73:7d:72:6c:0f:
2e:6e:fc:c8:d4:5b:68:c0:3d:73:80:21:d4:b8:44:
49:40:07:bd:89:7d:ae:6d:15:19:69:ea:cd:fe:f9:
af:e9:56:8b:9f:80:9e:c5:c0:7f:58:cf:49:4c:9f:
b4:fe:f6:5d:21:f8:ce:42:17:d5:93:d9:e7:4b:a7:
4d:64:05:88:f4:96:c8:10:59:f5:34:94:4a:52:d1:
66:f6:1f:ce:1b:1a:51:c8:5f:aa:30:e1:02:29:8d:
9b:75:23:21:e7:b5:21:fe:ff:b0:d4:93:0b:36:f0:
02:c2:51:4c:8e:a6:52:a2:a8:4d:db:66:7f:de:4c:
2d:e6:be:ef:4e:ba:4b:47:c4:76:be:32:90:c6:84:
64:21:16:70:99:1f:68:b8:67:80:e4:77:dc:85:9c:
9d:ee:32:04:c2:ba:d9:a7:bd:99:c0:58:6c:0d:13:
c2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:75:13:75:D6:1D:67:EE:29:F8:9F:1E:F5:25:2E:AA:54:F2:8F:88
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-3UTddYdZ-4p-J8e9SUuqlTyj4g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.159.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:d4:9d:38:84:8c:56:ac:66:b1:d5:b0:19:2e:3b:0d:52:4f:
23:72:61:31:ab:3a:d6:a8:cb:b8:bb:aa:b4:80:03:d8:5b:c7:
3d:25:64:8e:26:87:a4:73:31:33:0c:d4:02:aa:d6:90:03:d6:
03:ac:b2:82:9d:9f:b4:08:91:96:18:c5:01:ab:ea:62:e3:25:
5c:37:87:ca:91:60:bd:f8:fc:12:c5:66:8a:dc:94:bf:de:59:
02:b1:29:42:41:a8:35:db:b0:d0:4d:68:19:85:0d:a9:60:d6:
aa:b5:41:22:25:f1:0d:a1:2e:b5:b9:99:2e:fd:6d:9c:c6:6c:
f3:fd:78:be:bc:d8:09:e2:8e:2d:f2:69:bb:3b:bc:6a:ab:c4:
e7:f3:15:ff:59:a6:1a:18:52:3c:ee:41:05:d4:44:60:0c:6e:
b8:87:8f:47:24:fd:c9:2c:ab:b2:b5:9e:ca:a9:e1:88:66:5f:
c5:87:e6:30:3d:0e:df:20:b0:60:55:b2:61:73:93:95:dd:1a:
79:36:1e:ec:b3:53:95:5b:fb:ee:93:3b:49:9f:61:f1:72:64:
45:ae:d5:7a:8d:62:7b:fb:df:09:cf:19:f9:60:85:50:bd:02:
0f:0e:4c:88:41:45:73:24:ec:09:29:18:ed:4b:17:e0:55:64:
2f:81:80:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:46:59 2023 by rpki-client on console-fra.rpki-client.org