Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9OwY71VUFlBD6oa9AJ2jgrX87fk.roa
File: 9OwY71VUFlBD6oa9AJ2jgrX87fk.roa (raw, json)
Hash identifier: DMYDZRJE1dtUcSlAuXY+Ky9stJA3J9XeCRQku+Vlwr8=
Subject key identifier: F4:EC:18:EF:55:54:16:50:43:EA:86:BD:00:9D:A3:82:B5:FC:ED:F9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9OwY71VUFlBD6oa9AJ2jgrX87fk.roa
Signing time: Thu 15 Sep 2022 02:52:59 +0000
ROA not before: Thu 15 Sep 2022 02:52:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.72.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F4EC18EF5554165043EA86BD009DA382B5FCEDF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7c:6b:75:5d:bd:74:99:21:34:9d:e9:c4:3e:
eb:f2:c8:b6:aa:05:b2:b1:82:44:ea:c8:83:02:20:
03:bd:9c:85:09:93:e1:e8:eb:79:0f:3d:50:36:96:
41:56:cf:7a:e5:0c:8d:8a:da:0e:f6:05:43:e1:89:
4b:ba:ed:27:ff:33:2c:4c:ba:41:8b:c9:8f:95:ee:
6f:98:f4:aa:5f:8b:0e:cf:fd:e8:34:2d:cc:44:dc:
af:10:94:b1:9b:4a:54:30:c8:1e:71:6b:8c:e4:2d:
cf:e9:6d:ae:4a:1a:21:84:55:b3:12:7e:5e:05:a0:
2f:27:97:c2:ab:6d:08:ed:8f:e8:98:e4:55:35:85:
cb:90:2e:69:77:73:c2:b8:51:7b:b3:e6:ce:a3:31:
2a:a0:40:14:ba:be:df:7e:98:ac:6b:d4:3c:27:b8:
1a:09:a2:97:fd:5a:82:92:c9:19:df:36:9b:43:69:
cd:74:b3:e5:88:fc:4e:e6:4d:0f:ed:91:6a:8d:fa:
14:42:d4:ca:0e:a4:c2:58:e7:98:00:7e:4e:69:aa:
61:f1:0f:8a:9a:47:db:b3:26:c0:42:4b:4c:21:f6:
8f:37:b2:45:41:fb:d0:df:61:ba:dd:27:38:29:c3:
5e:40:4b:0f:23:de:e0:cd:ca:2e:10:85:d1:fa:ae:
38:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EC:18:EF:55:54:16:50:43:EA:86:BD:00:9D:A3:82:B5:FC:ED:F9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9OwY71VUFlBD6oa9AJ2jgrX87fk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.72.0/21
Signature Algorithm: sha256WithRSAEncryption
40:57:01:37:a8:47:3c:85:e0:60:85:d5:18:11:40:57:55:75:
31:d0:23:0b:55:b9:ac:e4:2a:16:6e:b6:c0:d0:1d:b0:c3:5c:
bd:fe:41:a9:f5:0d:68:98:8a:94:6a:4c:30:30:2d:8f:e9:85:
2e:9d:0b:25:d2:ab:8a:13:e4:15:d3:1e:a7:a3:ff:3b:0c:87:
57:30:49:66:0b:e9:84:16:90:4e:cd:d8:35:dd:1c:ca:4c:28:
71:2e:38:b6:05:a5:74:a8:62:4e:ee:c8:bb:58:61:4b:ad:a1:
5c:d4:11:4f:67:97:bc:79:a7:1a:c1:36:a1:37:b9:27:ab:dc:
db:55:77:ab:03:fb:8c:2f:b5:ce:56:7d:de:5a:7d:39:e9:08:
a9:0a:90:b5:ca:53:a6:4c:41:ad:b0:d5:ba:6b:72:ad:e9:32:
b8:98:51:44:62:28:6b:e8:25:c0:91:f9:28:8b:62:d0:1f:0d:
d7:08:42:e8:55:ac:7d:fd:32:cd:ef:bc:e3:04:77:ce:92:3c:
ef:87:c1:38:1b:db:3e:0c:a7:c3:6c:6a:e0:c5:12:3e:18:3f:
36:59:e2:ce:99:3f:bc:05:a3:e4:82:7b:2a:b2:50:42:77:82:
7a:2d:3c:85:87:aa:25:f4:39:da:d6:7b:b2:f7:95:5d:23:aa:
ad:d7:d9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:23 2023 by rpki-client on console-fra.rpki-client.org