Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0zpdao6ZMayhh_T9FGhAgUmF_Nk.roa
File: 0zpdao6ZMayhh_T9FGhAgUmF_Nk.roa (raw, json)
Hash identifier: 5CsES7R3nt3BMOdI1Zzdu8aWs23fQ3E+kXAQUD0Qc5Y=
Subject key identifier: D3:3A:5D:6A:8E:99:31:AC:A1:87:F4:FD:14:68:40:81:49:85:FC:D9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2150
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0zpdao6ZMayhh_T9FGhAgUmF_Nk.roa
Signing time: Fri 25 Nov 2022 04:39:46 +0000
ROA not before: Fri 25 Nov 2022 04:39:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.152.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8528 (0x2150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D33A5D6A8E9931ACA187F4FD146840814985FCD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3e:c3:ba:a4:09:5d:b5:74:66:ba:aa:85:d4:
a3:32:cf:57:b5:87:63:1c:1b:81:0d:52:3b:d9:f0:
f0:0d:1e:3b:51:12:14:c7:d2:ba:d7:eb:df:35:a9:
c8:87:fe:75:77:14:eb:23:28:47:0b:79:72:37:c5:
c7:a2:a9:90:34:26:14:ae:3d:b3:43:07:9e:37:61:
a1:b1:23:08:14:38:a7:ef:da:21:f4:01:a2:0f:4b:
d4:9a:db:d9:52:28:b7:db:61:c9:5f:74:2b:9c:08:
c0:29:d9:fb:70:1d:57:1f:7d:58:af:ea:e7:b2:a9:
f5:97:20:0a:ad:8c:b5:aa:3d:16:9a:4e:5c:7d:fa:
9e:2a:a1:ae:3f:54:c7:f6:c1:c9:c4:8d:06:b6:34:
6e:7c:df:0c:07:a2:14:ee:7b:f9:18:15:d6:c7:3d:
23:17:c1:0c:fc:71:eb:92:7c:cd:39:ed:4d:04:69:
80:33:11:ea:67:54:fe:f3:01:1f:bc:1e:69:0b:77:
e8:6a:7c:66:6a:9f:dd:31:b1:5f:cb:a7:19:21:ed:
17:8f:9a:cb:3b:0e:47:2c:21:f2:90:86:21:af:b4:
ed:5f:9d:d9:ce:a0:02:48:f5:b0:af:e0:b6:35:3b:
9f:c4:ba:3f:30:04:f4:c2:ea:57:52:73:86:52:53:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3A:5D:6A:8E:99:31:AC:A1:87:F4:FD:14:68:40:81:49:85:FC:D9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0zpdao6ZMayhh_T9FGhAgUmF_Nk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.152.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:69:06:98:63:7a:6b:eb:40:38:3b:3b:63:32:23:27:c4:b5:
8e:30:4f:f1:b6:f4:e9:3f:2f:92:bd:c6:7c:8b:ba:db:9a:bb:
29:53:43:1e:eb:33:15:d4:cf:3e:58:3b:3a:c9:a7:39:89:b6:
1e:21:45:4d:c5:cd:96:64:15:4c:a6:8c:63:2c:e0:90:e5:a7:
60:f7:a4:5a:6e:07:52:d2:42:69:d3:a3:67:d0:9b:05:90:13:
6e:23:a7:52:df:cb:b1:7e:b0:d6:bb:28:3b:8a:ee:85:cb:93:
8f:16:75:aa:28:0e:cd:07:7f:9d:07:f7:43:1d:2f:d9:4a:64:
7c:54:19:ba:f7:44:68:dc:80:f2:b2:34:fc:f7:c2:fd:bf:05:
0f:d5:cc:8a:3f:60:b1:5d:11:c5:f4:8f:8d:bd:df:6a:0f:dc:
97:f9:35:d2:38:54:bc:ec:c8:f5:f5:a7:62:62:ce:df:9b:45:
58:3c:ba:44:a9:2a:2b:27:60:06:ce:7f:a4:db:8c:89:9e:b5:
a2:dd:0f:4d:3a:b0:20:a0:fc:c0:f9:ff:05:c6:fc:e7:d1:d2:
cd:ad:f4:30:f2:f6:24:95:0b:a8:b3:32:bb:d7:2e:30:1a:59:
d5:1b:6b:1c:e5:32:53:98:be:eb:66:0e:25:d4:7a:b1:a6:01:
72:2c:b0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:46:59 2023 by rpki-client on console-fra.rpki-client.org