Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3XwAmae0d_lSC2hLoWPz-WHStYE.roa
File: 3XwAmae0d_lSC2hLoWPz-WHStYE.roa (raw, json)
Hash identifier: d2EXxpmIpAm8kEKQqNFTepKZ8R7f08LI24GCWAY+fqE=
Subject key identifier: DD:7C:00:99:A7:B4:77:F9:52:0B:68:4B:A1:63:F3:F9:61:D2:B5:81
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3XwAmae0d_lSC2hLoWPz-WHStYE.roa
Signing time: Thu 15 Sep 2022 02:45:01 +0000
ROA not before: Thu 15 Sep 2022 02:45:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.152.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DD7C0099A7B477F9520B684BA163F3F961D2B581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:7f:3d:67:cb:d1:74:3e:fe:eb:4a:a0:12:
d1:59:23:f3:37:d6:bd:f8:0b:37:3a:22:30:50:4d:
67:06:27:83:39:a4:47:16:19:70:42:ab:a7:7c:fe:
8c:59:d9:b1:a4:bf:8e:3e:9a:63:0a:d3:71:7c:60:
26:51:1f:92:d8:c5:45:7f:8f:d5:2f:a2:14:67:04:
4f:79:77:0f:6e:5f:fe:68:ec:6d:07:0f:68:10:82:
0c:4b:9e:1e:52:b9:1c:48:52:87:f9:21:f9:8e:bf:
b4:5b:b7:cb:ac:d9:7a:fc:ad:75:a0:c0:c3:8a:39:
78:1b:0a:3f:1e:1c:12:31:d3:e9:10:23:cc:5b:c6:
cb:42:bf:b8:d2:f9:fe:71:c6:60:25:da:f3:b3:ca:
5e:43:97:39:3a:f0:a4:f4:0e:a3:c3:89:fd:b1:27:
bf:69:31:67:02:ff:20:9e:21:31:1c:74:4e:0d:dc:
f4:e2:3b:06:bc:73:22:dc:65:f1:5f:87:cb:e0:82:
ab:f1:67:62:18:ce:15:7b:38:a3:2b:61:9f:e9:48:
6d:2c:d4:ca:96:b3:b1:55:71:cd:f4:6d:87:6a:90:
d0:f6:a7:7c:48:ba:70:60:b0:ff:4d:ff:71:14:c1:
ae:97:36:d2:00:f8:d8:e5:7a:94:3d:a6:59:34:15:
d8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7C:00:99:A7:B4:77:F9:52:0B:68:4B:A1:63:F3:F9:61:D2:B5:81
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3XwAmae0d_lSC2hLoWPz-WHStYE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.152.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:29:1b:16:5c:2d:e7:27:c2:a9:c3:2a:1a:1c:10:2a:fe:06:
71:c3:2c:fd:21:59:1b:3c:df:e2:63:7c:0e:da:b2:14:1f:5f:
5d:07:00:d3:54:e5:05:38:36:fa:51:5d:95:f0:a3:ea:fc:0c:
d2:8c:9c:f6:c4:03:fa:a8:c3:6c:89:3c:ea:ce:0f:55:21:c5:
59:5f:f6:61:a0:d6:de:4b:e6:3b:83:9e:e7:0f:f3:a0:b0:65:
38:6d:89:4c:da:ce:31:71:89:13:49:96:5d:0f:37:f6:79:ca:
6e:8b:e3:a7:8e:21:cc:62:8d:70:57:ee:b0:2e:8a:cd:85:08:
d6:50:6b:f0:b4:d0:95:64:c2:e3:25:bf:23:9a:a6:b8:de:ab:
38:f6:49:eb:3b:33:09:82:16:31:4c:99:5d:67:fd:3e:cc:7e:
14:e6:3b:ce:9d:ba:22:cb:23:9b:5a:3e:85:ed:aa:12:17:3a:
d8:0d:be:e6:ca:73:86:b8:63:1e:5b:3a:86:a7:5b:98:44:5f:
65:3a:c1:6a:8d:50:1d:b3:80:e9:f2:a3:52:63:76:3c:b7:84:
cf:08:ba:e5:a5:25:5c:df:7f:6d:b6:18:6e:9b:c1:f4:14:25:
d3:df:49:0e:ed:a0:47:73:86:08:d1:a8:fc:e1:20:c8:1f:2e:
b8:a5:2d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:08 2023 by rpki-client on console-ams.rpki-client.org