Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6UDa3Zw5BT0HIA-Yf6ujPUGBMGA.roa
File: 6UDa3Zw5BT0HIA-Yf6ujPUGBMGA.roa (raw, json)
Hash identifier: SeyR/IQgvQuPNcnGCK7j4B8AfPEryZKA1Fa5oooISHg=
Subject key identifier: E9:40:DA:DD:9C:39:05:3D:07:20:0F:98:7F:AB:A3:3D:41:81:30:60
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6UDa3Zw5BT0HIA-Yf6ujPUGBMGA.roa
Signing time: Thu 15 Sep 2022 02:53:04 +0000
ROA not before: Thu 15 Sep 2022 02:53:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.240.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E940DADD9C39053D07200F987FABA33D41813060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:14:53:6a:e2:8e:18:31:93:aa:02:34:a6:1f:
4d:fc:50:68:11:8c:81:db:19:68:9c:18:76:1c:e1:
14:15:40:ac:b0:bd:bb:3e:d3:a4:1b:76:72:58:1b:
20:55:e8:7c:b4:d5:bf:24:1d:fc:c5:1c:18:b9:76:
97:c9:81:c6:3d:e0:9a:7b:f9:ee:34:48:d3:f7:18:
80:03:b0:2b:ed:96:96:8b:7d:eb:82:05:c7:81:00:
20:29:5c:a9:da:92:87:ea:3a:47:f0:58:ab:20:dd:
b7:38:d0:a1:1e:c6:13:e4:04:b4:8a:a5:23:f3:d9:
68:62:47:6c:44:31:0a:95:c8:73:77:9e:f5:1b:71:
b1:11:01:a6:c0:20:71:85:89:38:1d:c0:52:c8:ac:
c9:eb:87:9a:95:19:70:99:4d:cd:0b:dd:73:34:ce:
91:77:b1:52:00:06:4c:f9:49:bd:22:db:e8:b2:b5:
f5:d8:62:79:9c:3f:1a:38:96:12:87:16:d3:f0:a3:
22:42:d4:a2:d0:e1:02:9b:92:72:9e:cd:38:73:6d:
1d:07:8a:44:09:bc:b9:93:84:a1:a9:82:47:83:d9:
74:be:bb:a7:3b:cd:0b:08:f6:5d:76:62:9e:2a:e6:
c6:a8:a3:11:8c:70:1f:27:45:b5:54:a2:01:b7:fc:
90:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:40:DA:DD:9C:39:05:3D:07:20:0F:98:7F:AB:A3:3D:41:81:30:60
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6UDa3Zw5BT0HIA-Yf6ujPUGBMGA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.240.0/23
Signature Algorithm: sha256WithRSAEncryption
15:2a:12:74:1e:56:8f:a0:c7:93:93:9a:d5:9e:2f:52:a7:73:
97:04:53:de:53:b7:4e:3f:a9:59:6d:72:1e:67:9a:c1:37:3c:
e3:c9:15:ce:e1:95:42:ee:91:90:ca:36:92:d0:63:ca:9e:58:
50:db:f3:93:ec:b0:dd:ee:80:83:bd:cf:66:9e:3a:62:c9:c6:
8a:3d:5d:15:81:ce:84:5e:c3:3c:48:a7:79:5d:99:cb:00:cc:
40:11:57:d3:66:9b:c4:39:b4:c0:d6:b7:b1:78:e9:63:66:95:
3a:1d:89:92:aa:b7:f9:d0:70:6c:b7:91:09:0b:1e:13:fd:50:
7d:86:6f:0a:7f:9f:63:58:d2:d3:6f:9a:e9:ad:c2:8c:15:6d:
e1:ad:1c:9d:30:92:c8:0f:01:70:01:06:39:df:1c:fb:0f:a4:
1e:25:29:37:ac:8a:e9:de:52:1c:e8:3e:26:56:38:47:09:3a:
1b:d8:a5:d2:01:fc:54:5c:8e:fb:c4:8e:e7:f9:91:fc:e4:72:
68:fc:ec:67:f5:51:bd:de:4d:02:31:d5:0e:49:33:8d:9e:97:
f5:30:13:f7:a4:4e:f6:57:6c:98:da:b8:f8:c3:31:d6:21:4d:
66:96:78:74:9c:36:e8:c8:ca:f8:db:d8:70:3c:6c:ba:cb:7d:
0a:f0:30:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:22 2023 by rpki-client on console-fra.rpki-client.org