Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3zwsf8dLL4lw57YksdojlhvzB-0.roa
File: 3zwsf8dLL4lw57YksdojlhvzB-0.roa (raw, json)
Hash identifier: gCxwpACBBCyFTbiRJ8vCB3FsBzIqDMmxGEwPc+NDqWE=
Subject key identifier: DF:3C:2C:7F:C7:4B:2F:89:70:E7:B6:24:B1:DA:23:96:1B:F3:07:ED
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3zwsf8dLL4lw57YksdojlhvzB-0.roa
Signing time: Thu 15 Sep 2022 02:46:17 +0000
ROA not before: Thu 15 Sep 2022 02:46:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.92.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DF3C2C7FC74B2F8970E7B624B1DA23961BF307ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:9d:af:68:b4:6f:a5:ae:43:08:e8:b2:86:
b6:b9:28:38:86:0a:c8:60:f1:3e:56:c4:98:b6:d4:
bf:7e:7e:4e:e2:f8:6c:69:21:aa:b7:63:6d:5f:c4:
c8:ef:f8:c7:1d:00:60:59:0f:b1:5c:7e:f4:9d:ac:
49:44:92:98:b1:f7:9a:94:b5:73:9d:c9:e9:19:5e:
bb:90:a5:1a:c9:80:dc:1b:de:5c:d3:2e:5d:34:84:
65:eb:39:4d:64:0a:4c:6b:8d:83:d9:5d:9d:26:be:
6e:36:89:37:61:4a:55:a3:bb:99:ec:05:d6:c8:4e:
df:00:af:1a:23:ab:73:8b:28:9c:f7:df:3b:fc:ac:
fa:d1:85:42:48:ae:b8:77:88:ca:1c:67:58:9e:05:
02:43:4d:7b:75:b7:3a:b2:a4:f4:f5:02:99:8a:5a:
0e:b8:dd:54:ac:3d:4e:ac:ee:92:06:d1:78:63:1b:
51:88:f6:f2:7b:62:75:de:63:3f:e1:29:7b:be:51:
f8:8f:c7:8f:cd:ee:b6:76:d7:6f:58:6d:d5:f7:58:
72:9e:73:65:66:f5:7d:b8:38:ad:ec:d7:69:41:95:
8b:d5:0c:5e:51:87:b3:9a:43:20:a3:82:f4:78:d4:
2e:2c:a3:0b:95:d8:d6:2a:33:6b:ae:7a:95:cb:6c:
eb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3C:2C:7F:C7:4B:2F:89:70:E7:B6:24:B1:DA:23:96:1B:F3:07:ED
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3zwsf8dLL4lw57YksdojlhvzB-0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:0d:34:57:7c:d8:04:16:b8:00:33:1c:e6:f3:02:e3:ba:92:
36:b8:7a:c8:fa:65:d6:df:43:b8:a7:3f:cc:38:7a:43:87:60:
bd:e8:15:7a:63:86:8d:7e:b8:22:a0:c7:95:23:02:6b:37:92:
b2:f3:41:b2:94:03:90:61:f5:f3:1a:9f:4d:ab:70:44:94:8b:
f0:c2:d4:bb:a8:2a:41:06:da:72:02:bc:96:e2:d0:55:b9:03:
a7:93:a7:8c:14:f7:1c:c9:e4:e5:d5:07:f5:a2:31:7d:10:91:
8b:17:3f:4b:50:e0:ff:35:8f:5e:44:be:55:be:7c:8c:44:f4:
4f:b0:f3:25:25:8c:15:01:75:f7:5a:88:e8:23:b6:bf:2f:ad:
14:37:ee:6b:42:3b:95:f7:eb:b7:b9:3c:0d:89:2b:b5:f3:2e:
8d:8f:b3:67:44:be:71:35:f3:42:e8:c2:64:93:e3:e1:53:2a:
d8:67:fa:46:19:11:81:37:f6:fb:54:a2:82:87:c0:18:36:07:
cf:f3:7e:bf:56:cd:76:bc:7b:4f:a1:ed:45:6e:0c:11:1d:37:
3a:08:42:67:5f:8d:c7:11:49:d2:97:72:74:77:35:68:45:56:
c7:d9:27:c3:10:7d:e5:74:9c:23:52:0c:20:f4:1f:c3:e5:a0:
68:5a:8c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:08 2023 by rpki-client on console-ams.rpki-client.org