Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3lL0sLHu2M1KsRH1cRa0zpDnLcA.roa
File: 3lL0sLHu2M1KsRH1cRa0zpDnLcA.roa (raw, json)
Hash identifier: us7T45HF3IXcnCa9WN6pCJnocF4OBkEfoykwlbRbB1I=
Subject key identifier: DE:52:F4:B0:B1:EE:D8:CD:4A:B1:11:F5:71:16:B4:CE:90:E7:2D:C0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 215D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3lL0sLHu2M1KsRH1cRa0zpDnLcA.roa
Signing time: Fri 25 Nov 2022 04:39:50 +0000
ROA not before: Fri 25 Nov 2022 04:39:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8541 (0x215d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DE52F4B0B1EED8CD4AB111F57116B4CE90E72DC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:60:9b:4f:61:29:30:b2:e4:06:8b:dc:98:f6:
e0:43:0f:5a:d7:ce:8e:70:03:66:bf:82:e4:9c:3a:
6b:c0:d6:7b:10:c2:f2:00:4f:4a:25:e8:92:f1:78:
de:46:b0:4d:19:25:72:d9:6c:41:1f:c0:bb:52:dc:
b4:a0:85:0b:55:5b:1e:5a:ad:86:7f:65:0e:ce:b6:
04:34:3a:9b:20:2b:22:89:81:47:8e:b9:2d:90:77:
eb:47:e8:2b:69:ed:8c:98:4c:d8:3a:57:41:9d:61:
bd:78:3c:c7:77:e7:39:e4:34:20:c1:24:74:3e:99:
0f:0d:98:dd:8d:95:d9:99:29:f8:ef:19:a8:b3:91:
fa:7c:4a:71:1a:a8:52:a6:2c:b4:2f:e0:b1:56:b0:
7e:9b:29:96:0a:82:58:3a:f0:2b:89:89:64:db:42:
81:aa:33:b2:3d:1e:39:61:a0:01:fc:8c:c2:ce:d1:
0c:bd:ef:42:70:5b:5c:0d:41:15:42:34:1b:09:0f:
ac:3c:83:1d:a4:40:44:64:9b:37:6d:d5:67:62:fd:
8e:d1:64:5f:13:78:df:b8:2f:c9:bf:1b:ac:d5:2f:
77:21:6a:5b:61:c2:71:d7:74:a3:7e:97:fc:bf:44:
e4:f8:39:e0:8e:a9:29:7e:cb:39:f8:a9:e2:f9:26:
f6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:52:F4:B0:B1:EE:D8:CD:4A:B1:11:F5:71:16:B4:CE:90:E7:2D:C0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3lL0sLHu2M1KsRH1cRa0zpDnLcA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.238.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:48:79:01:5d:50:24:55:f3:c3:ba:4f:c4:5d:a5:36:4f:55:
2f:d8:aa:3b:8b:86:73:f2:3f:83:53:3d:58:a4:f1:95:0f:83:
b1:2d:0e:2d:31:f3:ad:57:05:47:94:40:83:f6:95:93:62:f5:
64:a3:04:35:74:eb:96:4a:e1:7a:33:a6:38:78:c4:e0:7d:8e:
43:91:e6:27:3b:01:ff:9f:9e:89:05:65:bf:38:3e:ca:eb:ba:
d0:85:8a:f9:e1:9a:c3:fb:0a:ff:54:38:08:69:af:da:f6:9e:
e7:37:bb:93:4a:07:55:86:d3:d4:7e:06:12:e2:14:be:5c:fc:
4a:c8:b6:92:68:4d:59:0e:67:66:99:ab:94:28:31:cf:aa:3d:
e0:a8:3b:1b:70:b9:e1:a1:2f:2b:72:b6:f5:53:98:db:8c:00:
e1:70:97:29:a9:64:65:2f:8e:54:7a:81:7b:36:bd:a9:8c:27:
2e:a3:78:bc:ac:72:7c:87:55:c6:1a:09:d4:41:dd:dd:15:a3:
b8:92:60:ff:37:70:d2:e0:c7:42:08:07:14:1c:60:9f:e0:5f:
17:1b:e8:34:60:ba:59:c8:86:c2:5d:b1:d7:e5:e5:64:8e:4f:
97:0d:36:e9:79:09:37:d2:c4:f9:bf:51:ba:d4:fa:b8:f5:a7:
9d:4b:c9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:20 2023 by rpki-client on console-ams.rpki-client.org