Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8_lbkJqWHjxk6geCPLpO2-tJjoI.roa
File: 8_lbkJqWHjxk6geCPLpO2-tJjoI.roa (raw, json)
Hash identifier: KU7NYsj0vrKnGQ+1c9sn7LUhjeVKXJxyAfTNQjSirxQ=
Subject key identifier: F3:F9:5B:90:9A:96:1E:3C:64:EA:07:82:3C:BA:4E:DB:EB:49:8E:82
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8_lbkJqWHjxk6geCPLpO2-tJjoI.roa
Signing time: Thu 15 Sep 2022 02:46:33 +0000
ROA not before: Thu 15 Sep 2022 02:46:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.128.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F3F95B909A961E3C64EA07823CBA4EDBEB498E82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:38:50:e6:af:dd:e2:37:cd:af:36:75:20:3c:
37:e1:44:49:7b:34:7a:de:8b:cd:e5:d8:cf:fb:f1:
f8:23:49:39:66:99:5b:a2:8f:f4:4d:0a:a9:52:52:
35:87:b3:bf:40:0b:4d:5c:6b:f2:09:cf:eb:4f:37:
7b:6e:db:63:0d:c0:ab:f3:cc:46:56:ba:64:b1:0d:
6f:7f:47:a4:06:3c:0f:b6:9a:de:d4:06:9c:f7:3b:
0c:33:a8:15:8a:b8:c9:43:b5:1d:b0:f5:52:28:93:
d6:7f:95:89:b7:bd:33:36:de:80:dd:f0:aa:de:16:
9e:61:a4:6e:09:a3:37:98:56:49:98:4c:a3:54:9b:
1f:90:40:b2:2c:fa:99:b5:55:14:d4:16:d4:b4:c7:
7d:5b:84:15:0e:f3:3f:66:64:77:6f:ba:38:16:49:
da:a3:68:c4:37:7b:1e:b5:09:ec:bf:89:b7:e5:95:
ba:19:bf:78:46:a2:37:c2:e7:fa:53:40:14:4d:cc:
0f:26:8a:81:46:77:fb:fb:a1:4e:4f:33:8f:9c:07:
0e:50:cb:97:d6:e3:bc:bc:67:59:59:57:c5:bd:b4:
2d:0e:d5:08:6f:49:ba:99:1d:e1:7c:31:40:38:65:
eb:ed:90:59:99:10:7b:5b:b8:b7:3b:23:5d:c9:f7:
cf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F9:5B:90:9A:96:1E:3C:64:EA:07:82:3C:BA:4E:DB:EB:49:8E:82
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8_lbkJqWHjxk6geCPLpO2-tJjoI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.128.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:4c:ba:2e:3c:d9:8e:df:b6:a0:88:61:71:0d:38:90:ce:37:
26:1f:39:18:82:a2:72:1e:8c:b3:2b:2b:b9:04:77:0d:8d:57:
dc:17:de:2b:64:1d:43:fe:c6:97:89:4c:29:5b:6d:8a:92:ab:
2d:48:9d:08:de:76:d6:ae:68:fd:87:79:78:58:61:6e:40:02:
31:2f:05:32:05:bf:ec:7f:cc:8b:8d:2e:15:c4:72:e6:1e:8b:
04:b3:92:92:27:93:40:95:10:2c:4e:3e:aa:94:fe:98:0e:d9:
22:c7:4b:c3:04:f4:0c:de:a9:ee:81:3a:a7:ba:30:a0:69:e2:
1d:9a:d7:e7:93:5a:23:f3:4d:e7:da:2e:70:87:09:04:65:53:
3e:6d:f6:06:03:b9:53:70:a8:f4:0a:35:ef:a4:39:c4:7e:3d:
28:4d:f3:a0:89:9c:bc:9d:bd:5f:c1:5a:d4:fc:50:e8:bc:6c:
16:2c:11:71:fc:bd:e8:d5:f0:f4:fc:4a:23:f1:09:fd:13:52:
53:f9:1c:04:a8:54:7a:54:f0:c7:37:bd:47:f9:2c:12:45:f5:
89:ad:d9:d4:7d:86:a9:7a:60:a8:bd:c6:61:c8:3a:ea:0f:d0:
05:63:24:0d:73:cd:75:45:b8:93:d0:aa:d1:2a:62:9b:24:d3:
0c:27:c1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:10 2023 by rpki-client on console-ams.rpki-client.org