Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AMiB1D6YMiXVOah9ZsMjng4UlWo.roa
File: AMiB1D6YMiXVOah9ZsMjng4UlWo.roa (raw, json)
Hash identifier: 5IjtTOukeDf3RK8qepn63Cseavgae2bYrmUWLm6ZNbY=
Subject key identifier: 00:C8:81:D4:3E:98:32:25:D5:39:A8:7D:66:C3:23:9E:0E:14:95:6A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AMiB1D6YMiXVOah9ZsMjng4UlWo.roa
Signing time: Thu 15 Sep 2022 02:44:49 +0000
ROA not before: Thu 15 Sep 2022 02:44:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 211.76.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:49 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=00C881D43E983225D539A87D66C3239E0E14956A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:48:11:a6:5c:98:c1:a1:ae:08:0d:2b:7e:0b:
87:55:2e:f2:94:3f:05:31:69:49:55:7e:f8:25:33:
d7:05:4c:01:1d:6b:78:e2:aa:6e:f9:f4:4f:92:c6:
5a:ed:47:90:e0:34:7f:0b:d1:ea:82:9e:14:ef:57:
2f:20:d4:a7:d4:40:5f:b0:c9:71:f5:ed:9a:c1:88:
0e:15:33:16:f5:9d:02:44:6c:6c:29:07:89:6b:5c:
14:a3:61:b2:01:ad:11:1f:45:da:ef:44:8c:c9:61:
87:dd:ac:45:4e:8a:18:ec:95:3a:e5:9e:4f:2e:dd:
cf:62:9c:97:e1:38:37:60:ee:f3:fe:1d:d9:fa:8e:
38:df:73:3f:ea:39:4d:61:ef:ff:82:52:a0:b1:ef:
29:e7:c1:9b:f8:20:98:83:e6:d9:e9:6d:87:0c:88:
5d:d5:4c:8a:fb:49:13:02:10:53:d2:6f:f0:6d:3a:
4e:3f:a6:3d:be:8c:4d:c4:6d:53:0c:ea:2f:8c:8b:
6a:31:fe:de:81:c6:86:98:37:22:d6:b6:64:d2:7e:
59:41:99:25:63:3b:f4:3f:4a:79:9e:32:07:88:da:
78:36:61:86:c9:9f:55:60:e3:d3:42:eb:27:eb:0d:
38:7a:5d:ea:8c:68:2c:f6:0e:cc:6d:08:43:33:1d:
3a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C8:81:D4:3E:98:32:25:D5:39:A8:7D:66:C3:23:9E:0E:14:95:6A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AMiB1D6YMiXVOah9ZsMjng4UlWo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.113.0/24
Signature Algorithm: sha256WithRSAEncryption
16:1f:7f:3b:0f:fb:13:02:2d:ab:06:da:e8:7b:35:e7:91:f7:
27:5a:39:77:f7:c7:a7:fc:11:dd:35:52:71:47:bf:05:56:9b:
21:32:99:0e:05:35:52:cb:81:04:e3:3c:cd:88:cd:fb:f8:8f:
f6:d1:d0:16:3b:a1:e7:ac:d6:6f:a5:67:23:a1:74:47:ef:81:
c9:04:03:f5:87:cb:1a:c5:db:a0:cc:9d:58:ff:49:24:8f:a7:
61:9a:69:67:34:48:e6:d6:43:99:70:0f:5d:f4:3f:20:eb:06:
d5:82:41:91:19:1c:15:f9:8e:82:77:e0:ec:3b:a3:e5:67:82:
de:13:18:5e:55:da:74:03:28:85:6d:46:99:1b:48:db:4f:a9:
9d:d4:ad:b4:c6:b1:c3:6e:fc:f2:bb:16:f9:67:06:01:e8:32:
8e:1b:44:62:7b:f5:a0:49:ed:af:73:cf:77:17:55:ac:3a:fc:
5e:79:42:73:42:cb:d1:ed:d5:b0:61:0b:7b:e1:1b:86:50:09:
91:b0:9e:29:e0:01:c5:54:61:b3:2a:e4:bb:4d:58:fe:70:d4:
33:07:20:73:98:d0:91:a7:35:31:0d:b4:12:30:dd:7f:4f:3e:
61:55:76:db:ac:62:14:61:58:7c:82:2b:a4:34:fb:4d:56:ff:
03:f1:de:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:11 2023 by rpki-client on console-ams.rpki-client.org