Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8VYcRAuaifz3P5GntrefZMpVKzk.roa
File: 8VYcRAuaifz3P5GntrefZMpVKzk.roa (raw, json)
Hash identifier: e48UTeNmM3TmAodbcTAgxafD04UhPT6Dgjm3tsgFieM=
Subject key identifier: F1:56:1C:44:0B:9A:89:FC:F7:3F:91:A7:B6:B7:9F:64:CA:55:2B:39
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21B7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8VYcRAuaifz3P5GntrefZMpVKzk.roa
Signing time: Fri 25 Nov 2022 04:40:19 +0000
ROA not before: Fri 25 Nov 2022 04:40:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.252.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8631 (0x21b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F1561C440B9A89FCF73F91A7B6B79F64CA552B39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:72:6d:af:b4:62:59:35:89:8a:0e:85:79:62:
aa:4b:f0:d9:62:5f:07:1e:80:02:32:35:3e:a9:59:
51:03:82:64:c8:d1:1c:65:76:19:a1:2b:a1:70:7b:
3b:3d:96:73:1a:1a:83:38:2a:c1:88:44:af:59:50:
82:1c:54:39:04:7f:3f:6d:bc:59:4f:55:ec:e1:44:
91:de:11:4a:55:6f:9d:df:f0:45:ab:60:07:4d:3f:
aa:ab:73:05:31:43:ee:94:a0:06:6f:09:46:63:c1:
a9:47:49:22:b9:5c:cd:85:a7:78:c0:6c:0c:e4:16:
89:18:ec:c0:1d:d5:54:f3:70:ff:9c:ca:53:d7:16:
cc:1d:6c:19:69:46:42:20:ba:95:93:7c:17:9f:ca:
6a:c2:49:fe:c0:cd:7e:ed:07:a4:20:46:4f:3e:49:
f7:aa:df:b4:89:3d:87:18:d0:2d:8a:2f:3d:15:07:
74:43:60:e2:fa:d1:17:6d:46:df:c3:71:3e:81:4f:
b4:8a:52:56:ce:71:a3:68:a1:a7:ec:5e:c0:0c:3f:
3b:50:a7:fd:5b:fb:37:e5:f3:d1:9c:d1:3c:1d:68:
bb:23:ca:95:ae:31:2a:eb:6a:06:0b:be:e3:5c:76:
dd:76:42:88:47:5b:ae:a6:25:b6:87:c8:d0:2d:9e:
22:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:56:1C:44:0B:9A:89:FC:F7:3F:91:A7:B6:B7:9F:64:CA:55:2B:39
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8VYcRAuaifz3P5GntrefZMpVKzk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.252.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:01:cf:ad:32:65:1a:16:05:76:38:2a:72:fa:ef:e4:2b:70:
01:94:d9:3e:f4:f1:c4:a6:ef:5b:13:b8:18:95:0b:7b:45:e7:
f9:07:ed:d0:a0:7d:13:7e:ea:c0:fc:39:d9:84:5a:a1:69:9b:
13:c2:69:95:3e:88:66:8f:90:5c:05:e8:f0:25:51:3b:bd:04:
f1:99:b1:0e:21:bf:4e:53:b2:a7:74:3c:95:9a:8c:29:4a:67:
c7:41:d8:c6:f6:94:da:0d:2f:91:ba:55:e2:4f:e2:e5:06:11:
de:6c:75:c6:97:fa:f5:4b:e7:3a:b1:54:e6:ab:94:3b:a4:a6:
4a:63:ae:1f:6e:43:ef:05:e3:9f:68:9f:40:41:26:f3:4e:a7:
af:d9:d4:90:8f:1d:fc:cc:ad:5b:15:ed:d5:41:8e:40:cc:52:
60:2d:b0:84:7b:76:0e:ba:92:f7:db:74:28:5a:22:0b:1c:11:
3b:39:dd:c7:38:4d:37:f1:55:70:7f:b6:c8:3e:b6:b3:cd:cb:
3d:31:fe:95:9f:9b:f8:a7:ee:1e:17:ff:09:11:2c:1a:80:e3:
6c:1f:60:7e:5d:9d:5f:86:27:3b:39:01:dc:7b:26:dd:cf:ea:
08:be:90:2a:a5:80:cf:66:95:c1:2f:f7:47:d3:5f:66:a3:97:
88:cb:84:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:00 2023 by rpki-client on console-fra.rpki-client.org