Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1PPAfolWNQ5270bzHxPf0rTRKMM.roa
File: 1PPAfolWNQ5270bzHxPf0rTRKMM.roa (raw, json)
Hash identifier: cOs4m28N+7ckhXIhsZBag5Gu5z6DD1UeO9h7WtUhBvg=
Subject key identifier: D4:F3:C0:7E:89:56:35:0E:76:EF:46:F3:1F:13:DF:D2:B4:D1:28:C3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1PPAfolWNQ5270bzHxPf0rTRKMM.roa
Signing time: Thu 15 Sep 2022 02:45:45 +0000
ROA not before: Thu 15 Sep 2022 02:45:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D4F3C07E8956350E76EF46F31F13DFD2B4D128C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:41:32:fd:6a:14:a2:23:81:fc:e5:a3:40:
fc:9d:7a:83:d7:39:2c:28:8d:15:dd:bf:38:e6:42:
46:af:ea:d6:ed:f8:f7:68:e8:56:ce:1c:62:31:5b:
3f:3c:10:38:e9:1f:cf:28:56:1c:6d:42:26:c7:81:
3b:c2:fe:08:81:bc:b5:2b:b9:0e:56:77:a0:dd:57:
68:1a:ce:62:03:a8:8f:4c:17:01:3e:cd:b5:0f:e2:
78:6a:b8:b9:38:93:e1:43:d4:2a:c2:02:88:a9:28:
76:db:bc:8b:87:2a:8f:ca:3b:0c:9c:dc:60:90:5c:
3e:a9:51:81:82:68:0b:8c:31:04:11:10:18:a6:a3:
18:83:ae:31:90:88:7d:5b:05:b3:23:82:ab:8a:ad:
70:1f:9e:ac:cc:cc:87:d1:b1:f5:ae:90:86:58:0a:
0e:85:db:80:e5:04:35:80:5b:fd:ca:12:47:b2:25:
8b:40:e2:62:8f:75:2f:a7:24:58:0e:2b:1c:84:73:
df:8a:4b:51:d4:79:04:c9:1a:ee:3b:1d:4e:fd:f9:
1c:ec:b5:42:8e:17:57:94:fb:98:f8:54:4f:d9:62:
05:ee:ec:91:95:24:a7:19:a5:2b:90:7a:c8:bb:ee:
b7:e4:fa:0e:54:b0:a8:bf:92:ff:75:a6:2d:77:3a:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F3:C0:7E:89:56:35:0E:76:EF:46:F3:1F:13:DF:D2:B4:D1:28:C3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1PPAfolWNQ5270bzHxPf0rTRKMM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.107.0/24
Signature Algorithm: sha256WithRSAEncryption
98:10:72:1b:4f:ec:e9:8f:03:6e:4d:f0:37:b9:9d:05:d0:85:
75:4f:3d:60:b2:79:5f:af:9a:20:f2:ae:10:b6:e0:04:f0:a0:
71:df:3b:49:f8:4d:f2:91:42:58:35:5d:02:3e:fa:20:0f:8f:
20:77:cc:6a:e4:b1:15:e7:5a:73:53:52:4e:aa:4f:bb:38:6d:
8f:84:3b:c9:f0:16:35:63:0c:41:ad:8f:03:da:27:4e:97:ce:
80:66:60:95:d2:4d:59:49:f8:a4:ce:99:8b:73:ed:14:86:5d:
b8:ea:cb:58:44:af:06:f8:c5:69:c8:c1:a4:d2:68:6d:0d:6d:
8d:81:6b:a3:65:d8:71:0f:ea:0a:3f:89:72:12:f6:e7:75:9e:
97:05:e5:c4:d3:ba:f1:e7:e8:e5:1b:5e:e1:95:59:00:39:8a:
2d:e7:df:0c:ac:f4:9d:db:e9:74:96:65:eb:c1:43:4e:91:d9:
12:9f:11:72:7c:6f:1d:23:9e:c3:14:b0:26:87:ca:bc:b4:c7:
19:c7:da:54:23:ef:93:33:c6:4b:d8:ed:c9:fc:72:95:91:e7:
db:e5:b5:9f:4c:4a:6e:b6:9f:8c:e8:ac:f5:64:c7:20:72:6d:
47:a6:c9:da:47:46:2b:fa:d6:17:53:dd:cf:84:99:e0:43:47:
c4:34:b9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:07 2023 by rpki-client on console-ams.rpki-client.org