Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5nYPcG85nFPmp1rDWu9LOtv1P38.roa
File: 5nYPcG85nFPmp1rDWu9LOtv1P38.roa (raw, json)
Hash identifier: gJbhCFj/oRKLrf6deksW1tW1nF6QHcJjO5poIQEapwE=
Subject key identifier: E6:76:0F:70:6F:39:9C:53:E6:A7:5A:C3:5A:EF:4B:3A:DB:F5:3F:7F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5nYPcG85nFPmp1rDWu9LOtv1P38.roa
Signing time: Thu 15 Sep 2022 02:53:43 +0000
ROA not before: Thu 15 Sep 2022 02:53:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.64.0/21 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E6760F706F399C53E6A75AC35AEF4B3ADBF53F7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7e:37:00:b5:55:12:ec:8f:23:bd:78:cb:2e:
62:9e:a8:6f:cb:a4:23:40:94:d1:1b:95:0b:32:33:
e5:b4:c1:a9:99:30:01:3a:5f:ab:5b:15:b9:77:55:
d3:2d:ef:16:b9:18:08:de:21:82:bc:16:09:56:d7:
59:5f:55:56:3a:1f:da:9f:88:a9:56:8d:cf:58:63:
c6:46:4e:80:18:6a:54:70:51:fe:f4:8e:f9:c0:9f:
45:b3:1d:d2:17:d2:8c:0f:79:c7:90:fe:8d:95:92:
6a:c3:a1:67:79:4f:27:93:4d:58:dc:68:ff:71:29:
26:61:80:61:30:b7:06:5c:d6:cd:e3:f2:3c:6e:a8:
16:f5:04:62:6a:30:be:68:bf:16:68:47:ab:22:12:
f0:27:2f:91:37:59:59:8b:77:b7:58:d6:2e:03:a9:
70:78:e4:e9:06:e6:24:08:45:96:de:6c:18:2a:e6:
0b:f0:39:31:95:5d:0f:92:a6:1b:f1:d5:8c:01:11:
08:59:db:a9:d2:b8:c0:3e:79:38:56:90:1d:b8:6b:
7a:b4:8e:c6:fc:ee:64:08:1f:50:f0:93:b2:71:ab:
27:b6:07:a1:52:55:fb:c5:43:fa:b1:c9:0d:77:6e:
ee:b3:28:b0:f6:29:fd:a1:5e:20:ad:68:88:2f:a1:
31:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:76:0F:70:6F:39:9C:53:E6:A7:5A:C3:5A:EF:4B:3A:DB:F5:3F:7F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5nYPcG85nFPmp1rDWu9LOtv1P38.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.64.0/21
Signature Algorithm: sha256WithRSAEncryption
85:0b:a6:af:97:00:dd:66:2c:3e:8c:78:ef:49:0c:74:d2:d1:
7b:eb:b0:60:8c:69:7b:ce:f7:41:44:f7:d2:5f:6a:f3:62:4c:
53:5c:d7:65:de:80:72:71:7b:da:02:37:b6:77:1a:cd:68:8a:
e8:e5:c5:5b:cd:ef:1a:a0:da:4e:a9:70:c5:57:95:d0:6d:77:
2a:32:f4:4c:42:65:0e:0f:e6:e0:51:2b:7e:dd:59:07:fd:cf:
cd:85:4d:98:1f:14:93:91:8c:6f:ba:64:36:c0:a7:af:2b:1e:
0a:40:04:8b:fd:4f:5b:45:05:ce:85:6e:d6:82:48:a1:29:0d:
1c:79:80:f1:71:89:c5:1a:6f:a2:21:71:17:c8:4b:74:3f:db:
d1:b4:a2:44:b4:c2:51:e1:31:2c:dc:a7:66:0e:05:41:62:22:
d1:8f:0b:78:f1:2b:56:b4:a5:8d:27:47:bb:47:7a:54:58:6e:
36:d5:67:33:73:cd:33:56:fb:38:4c:7e:c2:5c:eb:00:34:29:
30:7a:3f:13:e7:a0:12:e1:58:6b:45:58:ed:d8:b2:8a:2d:c0:
91:25:99:69:e7:59:7c:d2:62:6c:58:23:62:37:5f:ac:52:b0:
de:fd:ef:a1:30:19:89:5a:87:89:5e:f5:7e:18:3e:c4:55:b8:
da:39:37:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:09 2023 by rpki-client on console-ams.rpki-client.org