Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9DpMW2vZuyrNo5na9o7DR33MqBY.roa
File: 9DpMW2vZuyrNo5na9o7DR33MqBY.roa (raw, json)
Hash identifier: IWYbxQPAieeQRYBBZ0OgmIbMayv7W/Y4iIn/kMuCe/0=
Subject key identifier: F4:3A:4C:5B:6B:D9:BB:2A:CD:A3:99:DA:F6:8E:C3:47:7D:CC:A8:16
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9DpMW2vZuyrNo5na9o7DR33MqBY.roa
Signing time: Thu 15 Sep 2022 02:54:10 +0000
ROA not before: Thu 15 Sep 2022 02:54:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.252.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:54:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F43A4C5B6BD9BB2ACDA399DAF68EC3477DCCA816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:c0:17:b3:c3:53:1d:64:1b:3b:16:75:d7:
72:14:e9:81:81:3a:58:d8:01:90:01:02:61:b9:72:
32:54:c9:15:f9:01:1b:93:76:42:8b:2d:a7:ef:48:
40:8c:de:e5:05:c4:d4:d3:c0:78:fd:9d:83:57:1d:
03:5d:4c:30:bb:ca:10:41:0b:5d:0f:ac:af:6c:38:
a5:c7:30:43:a7:a4:b9:b8:4c:73:1f:bb:1d:eb:d3:
b3:46:b7:28:53:bc:56:ca:cf:24:aa:e5:43:0d:ff:
9d:fe:4e:53:08:48:b2:0d:1d:27:6f:af:e6:15:d9:
1c:98:b8:0e:08:26:0a:91:63:48:fa:71:69:68:bf:
b3:14:c2:fa:4b:c0:fe:00:71:71:fb:ae:d4:d1:d5:
c5:b8:30:0d:5a:ff:0c:15:cf:96:60:56:f4:c3:23:
09:bc:f9:6a:aa:f9:cc:74:c2:5f:ee:ec:a1:86:12:
5b:2d:76:85:4d:86:cd:40:00:2b:b9:ef:9f:79:03:
25:69:66:af:c9:30:3b:11:c0:8c:71:93:63:c4:72:
4b:35:92:5e:71:5e:0e:1a:37:ff:68:bc:03:d6:0c:
46:f4:48:5c:3b:5c:7a:05:2e:cb:84:5e:74:03:02:
2e:cb:0d:2b:21:3f:b1:39:3b:df:dd:bf:18:43:b2:
d7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3A:4C:5B:6B:D9:BB:2A:CD:A3:99:DA:F6:8E:C3:47:7D:CC:A8:16
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9DpMW2vZuyrNo5na9o7DR33MqBY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.252.0/22
Signature Algorithm: sha256WithRSAEncryption
50:c4:fa:6e:4b:17:c0:8f:48:bd:5c:12:91:50:5a:49:53:9a:
1a:63:03:d6:00:65:ee:87:38:9e:3c:6b:d4:ab:f1:12:fb:2d:
72:79:90:7c:49:9f:91:f9:2d:d7:7d:82:dc:0e:9e:de:f1:74:
77:b9:4f:79:89:2f:47:78:fc:e3:2d:5b:43:50:01:b9:da:cd:
5c:27:0b:20:93:25:a2:e8:b2:03:5e:c8:89:0b:db:36:db:d7:
cc:8d:13:44:c0:e1:2f:fb:c9:ea:ae:2e:9c:54:3b:2f:44:c5:
ed:e9:05:ec:88:33:9b:18:0a:e2:ae:64:20:3e:2d:5e:9a:6d:
20:89:04:b0:8b:21:74:5e:5a:74:df:e8:4b:b1:ff:bf:2d:db:
33:af:d6:e2:02:b6:ac:85:6e:0b:78:68:33:82:e6:d3:dd:b5:
6a:af:7c:d2:73:a1:1f:32:e3:07:9f:75:3b:2f:0d:0e:f9:91:
6a:aa:6d:01:36:1c:b7:76:dc:ab:3d:24:4f:e7:c4:9c:12:a5:
ea:0e:f9:c8:87:66:d6:dd:85:66:b1:ac:32:99:46:8d:24:40:
16:29:47:f8:5a:ae:b2:58:6f:8c:6c:6d:58:0c:1d:a9:aa:dd:
db:57:74:2c:8e:40:8d:03:c6:5a:41:d9:30:59:07:30:71:19:
be:f8:e1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:22 2023 by rpki-client on console-fra.rpki-client.org