Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1dl0m_z_kdGu1L0b_QSOzdvM8cA.roa
File: 1dl0m_z_kdGu1L0b_QSOzdvM8cA.roa (raw, json)
Hash identifier: ELr0j4ghAnImTysbj7Oz788oGuPqJp8jFVlf9iZlrFo=
Subject key identifier: D5:D9:74:9B:FC:FF:91:D1:AE:D4:BD:1B:FD:04:8E:CD:DB:CC:F1:C0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22FB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1dl0m_z_kdGu1L0b_QSOzdvM8cA.roa
Signing time: Fri 25 Nov 2022 04:41:53 +0000
ROA not before: Fri 25 Nov 2022 04:41:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.242.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8955 (0x22fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D5D9749BFCFF91D1AED4BD1BFD048ECDDBCCF1C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d5:80:d7:00:36:e2:1a:80:f8:86:36:be:03:
4c:e3:be:67:66:0b:e5:fc:8e:7a:63:0c:71:ee:c5:
02:77:32:a1:42:fb:c8:c1:3d:c2:6f:a6:a8:17:ef:
d5:af:1f:f4:50:e1:fd:70:71:af:50:5c:ac:90:f4:
79:8c:2c:8b:9e:40:c1:c0:1f:82:ff:24:c0:63:57:
a4:b0:24:90:da:ca:8e:fc:5c:3d:c4:ce:92:78:c0:
8e:fd:77:80:1d:13:e5:36:52:88:c3:cb:a0:d4:72:
4c:26:3e:10:5f:a1:ee:52:12:8a:21:5f:5a:5b:16:
f4:7d:da:34:66:2a:e0:61:eb:0b:d9:17:9c:72:b2:
67:72:72:9f:ff:5d:7d:65:80:97:48:cf:1c:38:3c:
d8:db:4f:56:fc:d0:39:34:f7:c1:fc:1b:85:e4:fe:
24:6d:32:da:d6:90:13:ff:85:81:b3:69:a5:4c:0e:
e5:cf:71:2f:d2:95:fb:a1:04:81:6d:db:e2:9c:a1:
12:73:46:6c:a5:72:01:13:b9:fe:a8:4f:47:e1:f3:
da:2c:1e:3a:2a:4e:7d:8f:4d:16:c1:9f:59:53:c3:
9f:44:e4:20:07:07:60:2b:40:4b:f5:3b:1e:8e:74:
de:88:43:76:3c:09:74:ff:33:95:ef:f0:73:25:34:
05:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D9:74:9B:FC:FF:91:D1:AE:D4:BD:1B:FD:04:8E:CD:DB:CC:F1:C0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1dl0m_z_kdGu1L0b_QSOzdvM8cA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.242.0/23
Signature Algorithm: sha256WithRSAEncryption
96:0c:b0:b5:a1:a9:f1:55:3a:9f:2d:ef:84:b2:5e:06:30:10:
97:e3:2c:8e:d0:8b:d5:a0:00:6c:d3:fc:6c:01:5c:15:63:f2:
f8:3d:8f:56:5d:2c:aa:47:0c:ef:e9:85:ad:3d:d4:fd:b0:d6:
44:ec:30:a7:ea:fd:96:c6:7d:0e:73:9e:e8:75:35:e2:5a:38:
ce:0b:0c:cf:05:c6:b2:9f:c8:5f:aa:6d:93:f1:c9:51:31:2b:
ba:92:34:44:7a:5c:1e:37:6c:e6:89:e6:05:71:a4:4d:7d:f8:
48:67:28:59:3c:4f:2e:f3:03:7a:45:e1:20:b2:76:4e:36:13:
c0:ef:57:f0:74:cf:f7:2d:c4:90:e1:97:1a:57:da:bb:76:c7:
2d:ac:88:47:5f:f9:b8:91:85:d8:8c:b5:c1:02:10:c3:f9:12:
6e:40:94:93:53:68:e3:a7:3e:98:00:92:f3:58:46:7b:77:30:
a9:92:3e:b0:fe:c7:a5:4b:a2:c0:65:40:29:54:1d:e8:cc:d0:
93:fe:b1:2c:1c:ac:72:22:e1:d2:39:7a:8c:6e:fb:f6:83:50:
c7:e9:07:85:cd:31:36:43:a6:85:14:ff:83:9f:4b:34:83:dc:
42:c1:39:97:e0:17:63:b9:88:3c:82:72:25:4d:ba:58:4b:09:
2e:84:d5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:19 2023 by rpki-client on console-ams.rpki-client.org