Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5rfBuSCQXcNHPcQbz_8gSDfCWM0.roa
File: 5rfBuSCQXcNHPcQbz_8gSDfCWM0.roa (raw, json)
Hash identifier: oRE1fvEqhV8DP4xsErz7K5uA4s55AzanGV7lNs/mlf0=
Subject key identifier: E6:B7:C1:B9:20:90:5D:C3:47:3D:C4:1B:CF:FF:20:48:37:C2:58:CD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21FA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5rfBuSCQXcNHPcQbz_8gSDfCWM0.roa
Signing time: Fri 25 Nov 2022 04:40:38 +0000
ROA not before: Fri 25 Nov 2022 04:40:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.72.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8698 (0x21fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E6B7C1B920905DC3473DC41BCFFF204837C258CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2b:cd:ac:ea:69:3d:8e:13:6e:31:13:93:b2:
3c:03:19:bb:57:24:16:a5:00:b7:8d:7a:3a:5e:ea:
7b:63:8f:ba:70:62:73:82:20:5f:2c:97:ad:81:3f:
64:0b:87:43:fc:71:1a:28:20:a1:71:bb:b3:2d:7d:
ef:5e:27:79:58:64:0d:08:c3:6d:90:ae:b4:47:38:
55:88:80:61:c3:e3:89:15:56:b3:e2:33:54:c0:c3:
b9:7e:c3:35:f3:25:ca:cf:4d:01:90:e8:cd:06:d8:
af:1d:2f:7b:32:b1:11:9f:39:d4:cc:e0:9a:09:0c:
01:a5:1e:80:85:7d:39:d7:f9:bd:da:d3:de:bc:b4:
70:25:35:e9:0f:d7:d4:0d:b1:30:23:44:e5:2a:74:
1f:e7:f7:3f:5c:d1:4b:1a:05:86:80:ec:de:55:b2:
66:81:60:55:42:e2:76:d4:b1:a3:ee:41:f4:22:29:
11:52:14:0c:d5:b7:8b:4d:05:8a:7f:cd:32:b3:3d:
13:7e:a7:0a:6b:3c:75:6c:42:0b:04:ef:ca:21:10:
c3:db:dd:d2:7b:53:cf:8c:d8:fe:69:f4:ba:37:23:
05:ce:e1:4c:a1:9b:fd:ec:24:cd:32:db:13:e3:46:
9a:90:04:ae:bd:b5:f8:d6:5d:91:43:a6:09:ac:b7:
16:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B7:C1:B9:20:90:5D:C3:47:3D:C4:1B:CF:FF:20:48:37:C2:58:CD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5rfBuSCQXcNHPcQbz_8gSDfCWM0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.72.0/21
Signature Algorithm: sha256WithRSAEncryption
99:12:a3:6d:26:9c:a0:81:18:79:cb:dd:cb:c2:6e:0e:a6:33:
00:47:16:51:ac:d0:47:9c:7d:48:a4:b2:b5:77:af:bd:0b:b4:
67:11:46:9c:54:33:4b:7d:c2:ee:b3:c7:21:8c:7a:d2:67:76:
e1:8c:28:e6:1f:4a:ee:ed:9d:0a:61:79:7c:ad:92:0d:93:14:
24:ad:3b:16:28:80:49:5f:e7:2c:e8:61:bd:03:12:2a:f4:88:
a3:69:ea:f9:8d:ad:ff:82:30:9e:93:0c:b5:9f:8d:df:c7:41:
14:f6:0b:80:ba:ac:05:4b:50:62:2e:36:01:ea:ee:15:74:5c:
b6:d8:28:ba:9b:a3:ef:a1:d7:af:75:85:58:fa:3f:ed:9c:97:
10:10:76:76:be:d5:9c:83:f5:02:07:11:53:48:1a:ae:ef:39:
cf:b8:12:ea:9f:79:58:4b:84:e4:b6:9d:58:49:4c:9d:82:7c:
45:b0:fb:39:ad:3e:28:77:e9:20:7d:de:d5:1f:17:9f:39:04:
47:c0:0f:c1:79:4d:60:3b:a6:dc:95:07:df:78:42:a9:94:d3:
54:02:42:b8:3f:2d:1e:c6:e8:db:d3:5b:dd:26:a2:a1:b1:93:
a8:90:98:db:78:c4:5c:4e:07:4d:89:a6:92:93:5e:39:72:e5:
cf:71:73:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:00 2023 by rpki-client on console-fra.rpki-client.org