Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3y--tuItgqPy55TMFRDGNAGzj7c.roa
File: 3y--tuItgqPy55TMFRDGNAGzj7c.roa (raw, json)
Hash identifier: W5lsA1hmfaNl4vWKxPknEPIevh3oWI7Su4+Xub4LUDw=
Subject key identifier: DF:2F:BE:B6:E2:2D:82:A3:F2:E7:94:CC:15:10:C6:34:01:B3:8F:B7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3y--tuItgqPy55TMFRDGNAGzj7c.roa
Signing time: Thu 15 Sep 2022 02:52:47 +0000
ROA not before: Thu 15 Sep 2022 02:52:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.212.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DF2FBEB6E22D82A3F2E794CC1510C63401B38FB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:ce:83:90:55:e9:99:ce:e2:40:d8:38:b5:
4a:09:50:da:c3:ac:7f:cb:c6:5a:6b:d9:35:af:9e:
91:56:8f:9f:5d:33:33:55:3f:7e:d1:e7:77:ba:eb:
9f:d1:07:38:45:3b:70:2d:10:8c:3b:d4:85:a4:5d:
35:6e:89:41:38:e7:ba:ce:7b:d6:af:b7:0e:f4:f8:
78:38:ab:cf:0a:92:80:db:92:83:cd:38:03:b8:c7:
fc:a2:1d:66:47:48:01:73:7a:59:7a:04:28:93:47:
da:ea:89:5e:d5:a7:c6:17:66:7f:30:55:bd:b7:e2:
a2:1f:03:d0:c8:8f:0e:3f:2e:92:13:f7:df:ea:93:
6c:04:b4:ad:04:ce:00:47:fb:1b:86:3a:24:a3:f3:
36:31:af:ea:01:8c:3b:36:4c:97:5d:fa:82:44:03:
66:1f:0e:97:16:a5:3f:d2:56:e7:7a:89:87:41:4a:
66:e7:e5:3f:01:a6:75:7e:72:42:c5:a0:4f:21:fe:
fc:c4:74:78:19:f9:5a:32:27:de:fc:81:26:0e:e1:
bd:e0:d2:a0:b3:4c:2a:f3:71:04:16:cb:1d:1e:b2:
84:9c:21:56:93:67:c0:2f:2f:d0:cb:dc:42:6b:8f:
da:bc:97:d2:d2:01:80:c5:f8:9f:d2:54:6f:ec:d0:
9f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2F:BE:B6:E2:2D:82:A3:F2:E7:94:CC:15:10:C6:34:01:B3:8F:B7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3y--tuItgqPy55TMFRDGNAGzj7c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.212.0/22
Signature Algorithm: sha256WithRSAEncryption
10:9e:9c:c9:6a:08:0f:11:b1:2a:81:aa:50:24:bf:e4:2b:19:
f7:43:16:f3:61:57:57:00:2d:dc:0a:ad:46:7b:ae:7a:9a:66:
fe:64:e7:87:6e:e1:06:1c:f0:f4:57:27:60:5d:4b:8f:9c:91:
3e:52:73:c5:ef:16:f8:4a:03:7f:cd:72:8d:1f:f2:74:a7:3b:
ee:7d:d1:fe:d8:20:e8:85:b3:fc:6c:d1:92:bc:0f:ee:1b:73:
d3:9b:11:a2:f2:06:ea:31:77:98:0c:68:f8:09:74:80:c3:a0:
bb:14:6b:11:7c:96:b8:59:96:71:d9:87:79:4d:f2:91:77:cb:
f6:81:f3:00:68:e9:45:1f:28:3a:69:b6:ac:cf:ad:56:59:26:
2f:30:8e:09:e5:48:98:37:c7:fc:d6:e3:4d:0c:1b:aa:d2:a7:
64:54:16:2c:8d:40:51:66:31:74:7f:d7:14:01:bf:1e:ed:1b:
e7:d5:36:77:82:e5:04:ba:e4:43:b7:9e:1f:d9:06:b5:fd:06:
9e:55:fd:0a:66:fe:f0:5d:73:53:c1:94:2f:a6:71:78:f6:29:
a9:0b:3b:b2:8c:a2:a4:b9:15:a3:fc:a6:dc:ae:5f:3c:8b:4e:
f9:77:4e:64:0d:86:df:4a:3d:86:c8:34:b2:02:29:57:57:44:
c2:8e:32:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:08 2023 by rpki-client on console-ams.rpki-client.org