Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/38O6wAK70XnoY1Au7JQJtPIZdsA.roa
File: 38O6wAK70XnoY1Au7JQJtPIZdsA.roa (raw, json)
Hash identifier: l4Cv+PDH6dWbp6d+FvZ7HSNmR4PwhuvrDT6WmmjhYNo=
Subject key identifier: DF:C3:BA:C0:02:BB:D1:79:E8:63:50:2E:EC:94:09:B4:F2:19:76:C0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/38O6wAK70XnoY1Au7JQJtPIZdsA.roa
Signing time: Thu 15 Sep 2022 02:46:31 +0000
ROA not before: Thu 15 Sep 2022 02:46:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.56.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DFC3BAC002BBD179E863502EEC9409B4F21976C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8b:ce:8f:27:16:58:6a:8e:ed:97:fb:d9:b5:
57:84:db:a2:ef:65:8e:b0:f4:8b:b1:74:26:2c:f0:
6f:2e:97:58:c2:f5:9d:3b:3c:79:03:80:08:53:3e:
dd:cc:29:dc:05:44:d2:21:91:7b:44:83:1c:77:85:
b3:c9:5a:aa:af:6c:50:a9:97:43:ec:7e:90:4f:d4:
7d:de:c8:43:60:c9:81:d2:87:fc:d8:8c:ff:73:66:
93:c2:6f:bc:dd:64:ee:5f:f7:1d:91:58:4b:ed:71:
83:23:5a:19:61:cc:02:6d:15:90:a8:1d:b2:6e:c4:
b2:58:89:4e:56:e1:e6:a4:71:bb:e3:d3:57:82:e8:
f0:7f:ca:28:ee:11:f1:ce:40:c3:a6:f6:b1:b7:ab:
64:2a:3d:82:a5:7f:20:4b:d2:8e:4f:d6:ba:da:34:
86:38:a5:ad:38:1f:34:a4:d8:15:bf:9d:a2:61:e5:
3b:40:fc:79:bc:79:9f:95:89:04:04:49:ca:84:6f:
e2:52:a0:87:cd:17:1b:72:f9:b5:ce:77:32:bd:78:
9b:dd:49:83:89:85:1b:a8:c8:0b:4f:44:49:ff:be:
fd:0f:75:8c:26:75:4d:e5:b1:8a:cd:1b:10:de:8d:
d5:37:08:a5:b1:c4:28:2c:05:54:57:97:77:58:78:
c6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C3:BA:C0:02:BB:D1:79:E8:63:50:2E:EC:94:09:B4:F2:19:76:C0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/38O6wAK70XnoY1Au7JQJtPIZdsA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.56.0/21
Signature Algorithm: sha256WithRSAEncryption
36:8f:26:a2:c6:1a:4c:9c:b1:72:90:4d:80:22:50:39:b7:5a:
7b:8c:8f:c3:69:02:c5:f5:a8:d2:41:da:82:13:74:67:fc:c9:
3c:f5:59:54:ae:c4:51:7a:70:7d:2e:09:06:37:25:cc:1e:09:
7f:8d:9b:24:ba:ce:bc:63:06:49:32:7f:b7:a0:be:49:55:b0:
f2:fa:fd:fc:ca:7c:59:26:ce:01:9d:e0:1c:20:7a:b9:dc:2d:
9c:22:7c:85:86:14:2e:16:40:8f:c0:9d:5f:14:19:46:32:c4:
b8:1b:85:dd:93:e0:7b:d2:85:34:13:3b:45:ab:18:a3:5e:0b:
e2:38:03:9a:fa:35:8b:26:ee:cb:85:9f:2c:05:91:37:a0:9d:
dd:b4:39:ce:5e:62:7a:60:0f:51:cb:30:ea:9c:45:c6:fb:58:
0f:78:d7:03:14:97:1a:53:05:69:f0:c6:3c:eb:05:ca:5c:09:
a9:6f:7d:92:e0:9e:ba:fd:7f:85:62:37:2b:0e:59:05:38:89:
13:e3:25:cc:11:b6:f4:18:d0:28:e5:d0:f4:8d:fb:02:68:25:
67:21:ed:23:48:f7:97:56:a0:bc:7c:c0:cf:2f:c1:a8:7f:b3:
ef:b1:73:a9:a2:29:40:71:6d:19:45:d1:50:71:82:0c:dd:69:
01:0d:55:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:08 2023 by rpki-client on console-ams.rpki-client.org