Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4KTNcWAKnESGvHc7L6UkyusGazI.roa
File: 4KTNcWAKnESGvHc7L6UkyusGazI.roa (raw, json)
Hash identifier: Tuuso1KXHDAGqCuOIcIW1Rr/AfmVWeHFOZYHBbHDEB8=
Subject key identifier: E0:A4:CD:71:60:0A:9C:44:86:BC:77:3B:2F:A5:24:CA:EB:06:6B:32
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 201E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4KTNcWAKnESGvHc7L6UkyusGazI.roa
Signing time: Fri 25 Nov 2022 04:38:20 +0000
ROA not before: Fri 25 Nov 2022 04:38:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.204.96/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8222 (0x201e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E0A4CD71600A9C4486BC773B2FA524CAEB066B32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:58:f5:49:2a:3e:f1:82:b4:83:4f:3f:06:02:
40:bd:7d:fc:97:65:cb:e5:e9:95:da:c1:1d:6a:12:
d3:34:af:b6:10:af:8e:77:e8:f6:bf:c9:8c:aa:69:
70:ef:67:f0:00:3d:2c:b2:99:bd:aa:75:1f:d5:a9:
9b:39:58:52:e8:24:e8:bc:4f:55:7d:02:30:13:46:
18:ad:b8:34:dd:6a:5b:2c:b2:77:1d:30:0a:ad:f6:
0f:1f:43:de:37:86:9e:09:1b:20:99:85:05:6a:24:
43:47:9f:62:99:0d:fd:1d:6a:80:56:51:eb:d0:83:
b2:92:c3:ce:93:45:9c:95:6b:f5:8c:99:75:8e:0c:
fa:ed:c0:fb:23:97:30:32:fd:65:4c:00:fe:7c:96:
b4:0c:d8:a8:2d:a3:12:39:e1:cf:6f:bf:fc:9b:99:
76:1a:98:44:2d:ff:13:d9:68:a7:95:ef:ba:b9:ad:
6f:f8:a6:2e:90:64:05:d1:da:4f:aa:ba:b8:ce:99:
53:a6:e2:e8:da:ca:86:71:30:ef:a5:4c:25:90:26:
b3:74:3d:89:d5:18:a9:b8:24:53:94:ba:3b:cc:7a:
81:39:e9:6c:83:1c:fb:52:03:db:2a:b5:f6:e8:55:
cc:d3:c2:3f:e6:c6:1e:9c:69:7b:b0:88:67:6e:18:
be:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A4:CD:71:60:0A:9C:44:86:BC:77:3B:2F:A5:24:CA:EB:06:6B:32
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4KTNcWAKnESGvHc7L6UkyusGazI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.204.96/29
Signature Algorithm: sha256WithRSAEncryption
4d:63:ea:e0:4a:f4:14:df:f0:ee:17:b5:1f:24:0f:d3:26:7b:
e8:2b:b0:93:1c:43:59:ae:e3:29:05:e7:d9:2a:54:76:ac:c2:
ab:87:af:64:a5:da:fe:04:ad:bc:f4:3c:e3:41:67:b0:dc:00:
d9:74:2d:64:e8:fc:f7:d6:3b:6b:f4:46:2d:76:7e:07:4c:c0:
04:c0:05:85:26:e7:3a:e4:5c:01:a5:59:71:e8:a6:48:7f:44:
de:0d:57:ec:42:2e:22:08:1b:0f:3b:7a:dd:42:5f:a5:67:e3:
5b:cd:4f:0e:8e:d1:70:0c:fd:0a:b9:af:1b:49:19:f8:11:cf:
b8:68:aa:08:89:12:fd:bc:5e:02:31:64:a7:20:30:20:f8:e6:
1e:85:df:84:f7:7e:6b:f0:19:d4:46:42:50:a7:01:43:29:1a:
cf:52:2b:c0:e7:5e:52:52:fe:14:ac:8d:54:76:53:e3:39:80:
ce:7a:4d:b5:75:26:40:e9:18:36:a6:cc:2f:ab:b9:e7:45:32:
3a:7a:72:39:7b:f9:cd:21:1c:68:12:56:15:6c:29:a4:4e:cd:
7b:ca:c8:c8:c6:a8:8a:dc:2e:2e:6a:ed:4f:e1:7b:b3:58:3e:
80:e1:23:df:32:57:6b:cf:2f:71:14:9d:ee:7c:c3:d3:10:b4:
3f:5d:7e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:46:59 2023 by rpki-client on console-fra.rpki-client.org