Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6XKW3P7IR1W-Xn15DBhSKLc11OQ.roa
File: 6XKW3P7IR1W-Xn15DBhSKLc11OQ.roa (raw, json)
Hash identifier: 1vo6ZPLWfZBz+wT7qLCSvP/qh3R4HMhYa/Mv5w9qwvg=
Subject key identifier: E9:72:96:DC:FE:C8:47:55:BE:5E:7D:79:0C:18:52:28:B7:35:D4:E4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 206C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6XKW3P7IR1W-Xn15DBhSKLc11OQ.roa
Signing time: Fri 25 Nov 2022 04:38:42 +0000
ROA not before: Fri 25 Nov 2022 04:38:42 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.216.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8300 (0x206c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:42 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E97296DCFEC84755BE5E7D790C185228B735D4E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:23:1a:50:4c:60:97:48:56:7b:db:e9:62:
4e:37:af:1b:76:c7:90:f3:78:b5:07:50:4c:47:d3:
e7:11:eb:e3:51:2b:7f:4c:74:b2:56:d4:39:05:d4:
c8:a4:07:7d:dc:ce:82:9d:14:e5:be:b8:b0:80:05:
eb:f2:31:b8:92:a7:eb:35:35:f3:2b:c9:b8:4c:40:
8e:b4:22:70:55:ce:53:3d:22:1b:c1:20:70:18:4b:
5b:39:d9:7b:4e:6f:9a:a3:e8:6c:ed:09:f5:c6:60:
02:45:28:3e:c5:32:55:ef:32:3c:f8:b1:82:71:97:
11:f6:d8:20:08:09:2e:6f:0e:dc:8d:0c:73:ff:f5:
94:7c:0d:80:cb:6a:d9:08:1c:bc:63:33:d9:02:ef:
3e:50:7c:29:d6:88:09:d2:6e:35:ae:ab:2e:f6:14:
d3:3a:0b:52:9d:4e:2a:90:fe:9c:e0:ea:ef:50:06:
a9:7f:52:f1:23:f0:74:83:1d:a8:e1:bd:bd:7c:3f:
fd:e2:80:d9:da:66:a6:19:85:0a:9b:35:97:69:88:
2c:54:6a:06:2e:79:51:68:0d:58:cc:28:81:7b:0d:
41:2d:d3:2d:fe:a4:89:7c:0f:42:b5:6b:bb:de:31:
ab:4e:32:5d:b6:4e:c7:eb:8e:0e:56:bc:1a:6b:f0:
50:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:72:96:DC:FE:C8:47:55:BE:5E:7D:79:0C:18:52:28:B7:35:D4:E4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6XKW3P7IR1W-Xn15DBhSKLc11OQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.216.0/23
Signature Algorithm: sha256WithRSAEncryption
64:eb:37:78:96:32:25:68:82:d4:d4:4a:a4:96:6b:9d:10:ff:
6b:20:5c:8f:3f:f3:71:5f:5e:86:09:9b:54:6e:cc:c5:8f:0b:
ea:53:bd:60:53:ba:57:7e:44:1b:5e:d4:d5:28:1a:ab:f0:4f:
4a:6b:89:83:b9:fa:a5:3e:41:e0:60:58:05:d9:e2:84:a2:3a:
86:1e:49:54:47:7a:97:62:47:51:a7:f0:e7:c7:4d:97:91:e2:
e2:56:af:5d:2b:d3:46:ae:c1:96:e2:58:26:5d:0c:e5:ee:84:
71:a6:21:5e:62:d6:18:7a:ef:8c:92:85:dc:1d:c1:37:3b:1e:
4b:9a:0c:5a:37:5d:b3:dd:f6:97:73:67:25:bf:c3:62:45:51:
6e:85:15:b4:5f:6b:2b:a4:1b:88:18:61:95:12:be:94:3d:c3:
38:43:1d:b6:99:10:d6:7b:f1:b1:ce:d5:f9:a9:e7:50:bc:e3:
70:f6:3a:84:51:76:41:8f:95:a5:14:0c:d5:86:10:a6:01:ce:
27:0d:3d:c0:ef:20:f4:d6:67:81:98:b1:3a:f1:80:61:9d:66:
aa:96:1e:81:56:ea:95:42:b4:ec:53:39:c0:cf:a6:13:6c:9f:
bf:f5:11:28:d8:7f:f6:c2:1b:af:74:f8:6c:7d:18:1e:65:56:
d8:12:19:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:21 2023 by rpki-client on console-ams.rpki-client.org