Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7LACytWYPKNvq2Ra87JVBcgFMi4.roa
File: 7LACytWYPKNvq2Ra87JVBcgFMi4.roa (raw, json)
Hash identifier: jWK5lJ9duSdA9UkzXr+vfD/LBL0PyR/TEEvDnlt+6JM=
Subject key identifier: EC:B0:02:CA:D5:98:3C:A3:6F:AB:64:5A:F3:B2:55:05:C8:05:32:2E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 207F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7LACytWYPKNvq2Ra87JVBcgFMi4.roa
Signing time: Fri 25 Nov 2022 04:38:48 +0000
ROA not before: Fri 25 Nov 2022 04:38:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8319 (0x207f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=ECB002CAD5983CA36FAB645AF3B25505C805322E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:27:fc:17:38:22:e1:7d:7e:84:d6:62:a9:
a5:f1:f8:dc:94:ed:98:bf:10:0d:5e:8e:08:b6:63:
a1:16:6d:21:fd:3d:b6:11:93:61:2a:35:22:5d:4e:
93:c3:92:c5:e5:b4:df:0b:3a:10:dc:ce:6f:a4:34:
8a:53:6c:82:f9:41:f7:9b:a8:0f:c2:9c:7c:e4:5b:
c9:5f:d4:8a:67:ab:03:01:98:af:93:44:9f:c0:16:
66:14:1c:2b:13:7f:21:c5:73:bb:e4:a8:e3:66:aa:
3a:2e:6c:da:67:a6:9a:aa:e0:58:32:d8:27:e5:18:
23:31:9e:7b:a9:a5:27:ae:f5:7e:ea:fb:a2:c7:6f:
0e:7e:17:5b:3a:31:76:0a:cc:38:c8:ba:bc:8f:79:
a4:e5:2c:c9:4d:f7:25:88:fc:3b:7d:58:91:81:40:
2e:85:7d:ef:aa:ee:2b:96:69:d1:3e:3c:9c:0b:d5:
76:3b:05:b5:69:6f:1d:a8:81:48:08:d2:b7:e1:4a:
3a:90:c5:89:4f:40:42:2c:8a:24:c9:ae:fa:02:97:
07:d6:d1:03:e5:ff:84:5e:08:5d:ae:0e:7e:03:a7:
8a:e1:71:ac:39:2e:1d:0c:4f:d2:d2:a2:b3:ea:b7:
35:49:ae:09:d8:84:3b:90:a6:0f:12:33:7a:cf:48:
81:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B0:02:CA:D5:98:3C:A3:6F:AB:64:5A:F3:B2:55:05:C8:05:32:2E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7LACytWYPKNvq2Ra87JVBcgFMi4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.211.0/24
Signature Algorithm: sha256WithRSAEncryption
95:d9:7d:44:ca:cb:39:c0:61:63:3c:a1:80:e0:56:7e:81:e3:
04:27:65:ac:e2:ff:82:64:44:c1:fe:3d:95:7f:6e:56:a9:1c:
88:dc:e3:bb:1b:d9:b5:1c:59:7e:df:e7:1f:f6:dd:54:7d:25:
5e:b8:92:33:30:a7:78:f9:1d:e9:d4:f7:cd:c4:13:b4:7e:63:
79:ba:86:3b:b7:2b:73:13:59:64:6c:3f:4c:70:16:13:45:05:
4f:90:43:c4:e3:f7:03:55:aa:3c:0f:4b:11:9d:7b:da:1d:ae:
bc:9e:20:e4:b9:e3:c9:03:09:c0:62:e6:1a:19:0d:85:60:ec:
a9:93:27:2b:76:91:c0:19:37:ab:b7:ba:c5:19:36:5b:fe:76:
93:ba:de:8a:66:a8:17:72:e7:04:70:6f:b7:f8:73:db:05:cd:
27:c6:9f:e1:ce:f7:cc:48:49:41:80:b2:9f:d1:f1:ba:77:5b:
06:45:c2:bc:13:1b:81:d9:ed:bb:7f:c6:5c:d2:59:fd:f6:8f:
af:7b:36:58:48:59:11:9f:e3:76:60:8b:a8:7a:83:48:a5:cd:
96:de:1b:4b:fd:75:c4:d9:a6:5e:6b:c4:fd:28:12:af:48:f4:
79:76:bb:7e:fb:c9:2a:6c:6b:b2:0a:f3:73:e1:1d:f6:2d:e1:
d4:06:16:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:00 2023 by rpki-client on console-fra.rpki-client.org