Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9RppUmdC0WQ4NUoLxm62CXFMf40.roa
File: 9RppUmdC0WQ4NUoLxm62CXFMf40.roa (raw, json)
Hash identifier: CHDV6HYDYgOTOWgAs294GDkT5MxTERlr65UIgai9tP4=
Subject key identifier: F5:1A:69:52:67:42:D1:64:38:35:4A:0B:C6:6E:B6:09:71:4C:7F:8D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2116
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9RppUmdC0WQ4NUoLxm62CXFMf40.roa
Signing time: Fri 25 Nov 2022 04:39:29 +0000
ROA not before: Fri 25 Nov 2022 04:39:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.224.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8470 (0x2116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F51A69526742D16438354A0BC66EB609714C7F8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:47:76:d6:bd:7b:09:04:54:4d:03:6d:c1:33:
0c:1a:27:9e:e4:86:de:22:5c:9f:6f:44:2a:62:52:
52:5f:83:35:eb:c0:c0:bd:7f:67:6b:bb:30:3d:6b:
90:88:52:23:45:68:2e:7d:e3:20:b3:96:00:5b:9e:
eb:a0:ec:d5:c6:ff:de:e7:a3:9d:46:b1:7b:18:c9:
1e:4b:06:0c:92:fb:93:eb:c1:76:0a:31:f6:56:c1:
b1:f0:37:b0:28:be:ca:96:4a:55:29:c7:d3:7a:e0:
0e:ef:6e:d9:bc:34:bc:d5:1d:80:fc:6e:81:94:7e:
b6:62:cf:a6:87:bd:c9:75:52:dd:85:de:8d:b3:9b:
df:60:38:2e:4d:c8:6e:cd:4d:ea:dc:1a:25:1c:f4:
24:3e:55:d0:85:46:1f:f7:be:bb:8d:ab:1b:cf:cd:
28:dc:05:40:93:10:76:69:15:15:8e:f6:be:65:d3:
20:fd:ca:f3:0f:79:b8:af:86:10:a6:bc:d0:c8:9f:
83:b2:eb:12:4f:22:8b:90:4a:bc:7d:e4:77:b1:cd:
3a:48:92:fa:2c:59:6c:ef:23:be:98:1c:01:55:00:
88:7c:07:5b:0d:8c:a5:08:2d:67:5e:f5:4a:5f:3a:
69:62:bc:4c:bb:9c:47:40:86:42:f6:9b:c8:b2:69:
a1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1A:69:52:67:42:D1:64:38:35:4A:0B:C6:6E:B6:09:71:4C:7F:8D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9RppUmdC0WQ4NUoLxm62CXFMf40.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.224.0/22
Signature Algorithm: sha256WithRSAEncryption
56:91:bf:c6:1a:4b:8b:a6:af:76:74:58:1c:fe:5f:d8:71:43:
2b:d2:bb:22:6e:de:d1:7c:9b:31:d0:8e:f9:30:d2:85:5e:d1:
51:ba:b3:c4:47:64:82:df:f6:bf:8e:b2:ed:8f:65:6a:b4:e9:
8b:e2:cd:20:7f:b5:a7:45:8a:35:0b:85:bf:3a:ad:8b:b1:9c:
85:30:91:df:bb:20:31:13:3c:35:00:dc:26:02:54:78:dc:62:
b4:6b:54:20:83:ac:17:8e:2d:08:d9:48:b5:02:ee:37:ef:10:
99:f5:02:ea:4a:07:21:43:fe:0b:8b:35:77:e9:63:22:b3:a7:
6c:37:e8:af:42:c5:39:65:f4:8e:99:15:31:aa:18:4d:d7:33:
e9:e7:24:f6:a4:af:bb:b9:c1:d1:aa:21:0d:ae:7e:c7:ea:81:
15:15:de:5e:0b:70:be:c7:b8:22:68:4d:bf:28:40:c0:bc:d7:
e9:b6:ac:45:c3:44:71:b0:e1:70:20:36:ac:f1:d0:db:34:ab:
d5:7f:53:9b:d6:84:85:ba:d1:da:51:38:de:29:32:e5:85:14:
ba:66:d8:75:e2:fe:8b:e3:7a:3b:39:f5:90:ea:d1:7c:82:9d:
ae:a3:c4:52:a1:43:38:f0:0d:2a:76:42:b3:da:ac:b9:67:bd:
5b:45:d2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:21 2023 by rpki-client on console-ams.rpki-client.org