Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/789T_5KgjVcRHgKFNNcluQErB0Y.roa
File: 789T_5KgjVcRHgKFNNcluQErB0Y.roa (raw, json)
Hash identifier: +r+4+nLJHglyRjynO/b5QmYZQV1tOvD1c3QmcXb58/4=
Subject key identifier: EF:CF:53:FF:92:A0:8D:57:11:1E:02:85:34:D7:25:B9:01:2B:07:46
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2297
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/789T_5KgjVcRHgKFNNcluQErB0Y.roa
Signing time: Fri 25 Nov 2022 04:41:22 +0000
ROA not before: Fri 25 Nov 2022 04:41:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.60.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8855 (0x2297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=EFCF53FF92A08D57111E028534D725B9012B0746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:b0:49:fe:aa:9b:da:2e:e9:32:5f:2f:0d:
d8:09:a0:4c:44:da:75:b4:64:ed:3c:b1:92:94:98:
ab:62:fc:07:0c:b2:da:bd:0e:d2:b7:02:79:bd:97:
06:45:79:95:d3:8e:cc:0e:b1:8a:fe:86:ba:d7:ed:
56:82:4c:90:39:28:d8:5e:c1:a9:91:48:d6:f1:dc:
ab:35:69:63:b4:bc:ac:93:f2:da:84:20:6a:82:18:
d1:87:3b:b5:2a:ec:c7:1e:b2:b3:04:cd:23:49:db:
66:65:52:86:05:e6:b4:dc:bd:04:6e:72:4c:f9:d8:
8d:a7:42:b7:5a:ab:bb:a4:7d:60:3f:4a:f5:1b:fd:
bd:b4:5a:89:66:8c:80:f4:1d:06:92:cb:1b:76:e5:
61:c3:dc:52:66:e9:47:b4:bf:a4:5b:48:e3:7e:1b:
c4:35:b2:f8:3e:44:46:c7:de:e9:58:1d:87:99:e8:
96:bb:be:92:ae:94:7d:c9:dd:68:46:60:e1:60:f5:
48:44:81:0a:89:5e:37:23:4b:1d:93:73:09:e8:85:
37:d6:f8:f1:8a:8f:c4:8d:c0:ef:07:5d:21:0b:93:
ec:98:05:75:63:c6:40:d3:84:90:f9:5a:36:cb:f0:
00:09:34:e0:7c:7f:a1:6a:d5:77:7f:1c:07:ee:58:
62:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CF:53:FF:92:A0:8D:57:11:1E:02:85:34:D7:25:B9:01:2B:07:46
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/789T_5KgjVcRHgKFNNcluQErB0Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.60.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:9a:0a:c3:2c:bb:10:ca:d4:39:fb:ed:bf:bf:75:97:99:e4:
33:3c:02:72:b3:21:86:9c:db:ed:10:fe:fa:c9:86:91:1f:56:
a1:12:b9:14:c2:f3:cd:2c:63:3a:06:6d:81:e2:3c:e4:97:c7:
da:13:87:38:f4:0e:9e:7b:00:31:a8:26:c3:e5:17:c2:0c:39:
d4:8d:da:7d:22:b4:70:b4:d2:70:5b:2b:3e:ab:03:1b:de:6a:
83:19:73:62:9e:c7:a9:f5:e0:90:99:1b:ff:a8:de:e1:2a:15:
e8:57:df:fe:5e:86:44:25:ce:10:f7:00:aa:d5:90:ad:31:31:
ba:a2:20:9c:66:c7:fc:0f:51:cf:2a:23:9e:16:f5:02:37:07:
1b:bd:32:67:39:fb:42:bc:33:34:65:19:74:07:2e:5d:a2:1e:
c1:f4:81:46:80:35:42:7a:ba:68:ee:25:f7:6e:e2:30:ac:e7:
13:2a:1b:35:41:9d:1b:17:66:d8:2e:b6:08:3a:65:33:9f:6f:
30:a5:1e:04:2d:20:80:ae:66:ab:6c:ef:59:f2:2e:cc:3b:d1:
e9:58:d2:57:ed:6a:1c:42:98:2e:cf:eb:3a:20:7c:32:78:0a:
92:28:1e:35:58:17:96:56:0e:13:81:ba:9b:1a:bb:7e:52:aa:
94:3f:27:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:00 2023 by rpki-client on console-fra.rpki-client.org