Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AerQQzvpM06tP7bEJvhIJJTt1Ts.roa
File: AerQQzvpM06tP7bEJvhIJJTt1Ts.roa (raw, json)
Hash identifier: cE1PR8EUFTEaiBiilqYeMsMiYkYKnWt6LM1eXEF8hBY=
Subject key identifier: 01:EA:D0:43:3B:E9:33:4E:AD:3F:B6:C4:26:F8:48:24:94:ED:D5:3B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2152
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AerQQzvpM06tP7bEJvhIJJTt1Ts.roa
Signing time: Fri 25 Nov 2022 04:39:47 +0000
ROA not before: Fri 25 Nov 2022 04:39:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.180.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8530 (0x2152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=01EAD0433BE9334EAD3FB6C426F8482494EDD53B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f0:6d:d0:46:2d:a1:c9:8b:5e:a5:94:cd:f5:
36:61:10:a5:29:c8:c1:cf:7b:b8:df:77:18:a0:24:
32:71:c0:92:64:8d:f2:96:41:c8:4d:0e:04:a8:32:
e8:87:14:15:ec:7a:b4:e8:01:2d:66:d1:f4:63:99:
51:29:1a:a1:ef:b7:c3:44:d7:be:36:e1:74:7b:53:
c1:cd:5c:22:e5:c3:ad:d4:59:fe:27:b5:56:68:b8:
34:91:9e:82:0c:9c:20:c9:4d:c2:42:f6:0d:20:6f:
26:3d:db:c2:bb:69:08:82:74:63:08:ec:0f:d3:18:
19:a7:fa:45:ee:57:8d:84:d4:40:82:ea:4a:9f:b5:
07:c4:b0:b2:4e:67:07:36:0b:a4:e4:2e:2e:a7:16:
e2:80:85:79:79:7b:90:62:ed:e5:80:aa:8d:7d:05:
a3:67:9c:4a:1e:8c:b5:df:33:15:dd:0d:3c:5e:8e:
fb:6d:b7:12:2a:ba:68:66:4d:35:ae:7a:2e:19:ff:
b6:d5:5a:91:10:cc:d7:fe:44:5b:11:fe:28:48:04:
d2:b6:b8:d5:9a:63:bb:87:5a:b0:d7:be:88:c8:ec:
5c:8a:e2:c6:58:ce:a9:cd:0f:56:83:91:11:d5:b7:
be:7d:01:b7:dd:50:79:60:dd:0b:9f:31:ac:34:47:
9e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EA:D0:43:3B:E9:33:4E:AD:3F:B6:C4:26:F8:48:24:94:ED:D5:3B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AerQQzvpM06tP7bEJvhIJJTt1Ts.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.180.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:e0:a4:2f:2a:61:eb:19:a5:8b:fa:cc:c1:a3:45:ae:6e:13:
cf:70:1c:68:c8:f5:73:9d:26:05:4b:c5:5c:4b:a5:b4:b6:c9:
cc:b1:59:0f:e8:c2:09:95:e2:2d:07:9a:e1:d8:bc:c3:b8:73:
81:b2:ac:a1:48:c8:0a:e0:df:75:6a:f8:31:4b:ae:e4:4f:b0:
06:75:1a:6a:02:84:9b:b1:bf:46:28:ab:81:79:60:40:b3:f7:
0d:42:51:a9:58:41:4a:b3:85:b1:4e:18:da:ce:c1:bd:db:bc:
bd:9c:ea:2e:b4:92:f0:a0:35:94:30:a3:8a:d0:e4:c5:bf:76:
36:08:67:2a:d0:6b:2c:13:e9:87:bb:c9:08:f7:7d:35:71:14:
91:8f:07:2d:1c:7d:ca:d8:03:bc:47:a9:c5:14:85:c0:4c:38:
0a:0e:a8:2b:a3:42:cc:65:98:73:24:36:53:72:6c:67:bd:52:
72:fa:84:cf:d3:81:9f:f7:43:5f:f0:9d:47:7e:95:73:c9:81:
67:be:25:79:74:05:77:03:cc:78:45:fa:a9:fc:1e:f5:b8:1a:
ca:93:66:a9:65:35:da:33:d9:62:2d:a2:97:27:c3:70:17:27:
81:38:cd:f1:fe:d8:61:7a:3a:a8:f2:96:ed:e1:1f:d8:19:67:
f1:10:6b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:22 2023 by rpki-client on console-ams.rpki-client.org