Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ACDs7Xf8zwjpQ0GlsEDxxLrx7lA.roa
File: ACDs7Xf8zwjpQ0GlsEDxxLrx7lA.roa (raw, json)
Hash identifier: W1SHgePbQqRvD6k2WZKibYa5of0l9sigeJirNNjC69s=
Subject key identifier: 00:20:EC:ED:77:FC:CF:08:E9:43:41:A5:B0:40:F1:C4:BA:F1:EE:50
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ACDs7Xf8zwjpQ0GlsEDxxLrx7lA.roa
Signing time: Thu 15 Sep 2022 02:53:05 +0000
ROA not before: Thu 15 Sep 2022 02:53:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.224.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0020ECED77FCCF08E94341A5B040F1C4BAF1EE50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1f:23:fc:c3:71:ca:bc:29:52:64:ec:7b:59:
91:3f:73:6f:ce:d6:ba:b3:5f:97:e3:b0:5f:20:a9:
29:dd:37:69:24:19:73:f8:43:cb:3f:39:a2:9c:08:
d2:95:88:6e:58:7e:a1:52:b9:0b:f1:34:27:77:89:
28:3e:03:f9:2d:8e:4b:31:92:00:a3:ad:3d:6e:94:
2e:f6:59:be:28:b5:1d:e9:ed:b6:e8:7a:c4:1f:36:
dd:e9:bc:09:bd:9e:1a:40:bd:ca:69:c6:f8:66:56:
66:1b:23:00:35:ea:9b:48:48:fe:dd:d0:44:c2:2a:
2d:68:7c:46:84:f6:a2:fa:71:68:da:d5:76:99:cf:
ea:ee:80:e7:d7:49:f4:06:89:04:8f:9c:0a:c4:cc:
4b:43:9b:48:52:79:c2:61:ed:72:ff:e5:c0:71:eb:
dd:7f:a1:a4:6c:a5:c8:bb:04:37:65:45:dd:ea:9b:
15:4f:72:d7:38:10:9b:f7:db:cb:cd:f2:67:b2:a0:
1f:66:f8:ac:7e:25:ec:57:ae:ad:ec:71:3b:8e:62:
2d:71:55:7b:8b:1b:9f:36:8d:91:67:bd:53:22:42:
74:71:41:df:5f:1c:9d:23:55:24:9e:2f:68:05:05:
7d:ec:6e:f0:5b:ba:d3:64:5a:d1:e8:e9:ba:c7:aa:
c1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:20:EC:ED:77:FC:CF:08:E9:43:41:A5:B0:40:F1:C4:BA:F1:EE:50
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ACDs7Xf8zwjpQ0GlsEDxxLrx7lA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.224.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:df:ac:07:99:8f:ff:e0:b7:a3:04:91:92:bc:d1:4d:18:99:
8c:00:79:06:82:0f:7d:61:da:0e:c4:9a:1b:5c:fb:c3:e2:9f:
61:09:97:a0:f0:98:67:fe:ad:b5:95:86:3c:d0:14:07:2f:39:
61:56:91:7e:f1:b7:51:0c:7f:10:24:95:14:a1:7e:8f:40:ab:
df:f0:9a:50:c1:d2:d5:fb:c6:61:2a:5b:4f:91:fd:21:7e:8e:
5c:1c:fe:6e:22:35:8a:e6:34:50:da:09:d4:62:0e:be:e8:e1:
03:8c:93:34:c6:65:af:7d:80:a4:07:65:18:54:74:20:0d:a5:
91:1f:82:bd:98:56:38:5b:6a:6d:da:f0:ec:2e:60:ed:bd:96:
72:10:99:9f:53:43:7c:41:77:94:20:91:f8:2e:bd:b2:b3:b6:
82:6a:1b:3d:5c:92:02:f1:52:a3:fb:33:2d:8d:35:a7:77:c4:
0c:f3:1f:7b:33:10:6e:ea:d0:e9:2e:c1:a5:88:b5:d3:2f:d4:
16:e3:61:07:a8:c4:77:79:00:0f:0b:39:33:60:55:f0:96:b7:
3e:70:e3:4e:eb:af:31:1b:89:7f:75:53:86:89:31:62:22:3b:
4e:71:40:56:9d:99:53:5a:c9:f5:83:f7:8c:46:34:03:c5:ef:
2f:3c:37:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:23 2023 by rpki-client on console-fra.rpki-client.org