Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AsuE6r4Qa2mCzQ-DcLt1H2zxETk.roa
File: AsuE6r4Qa2mCzQ-DcLt1H2zxETk.roa (raw, json)
Hash identifier: RNqSW8KGDrkP/GMWO+vetos/i+2MBI9+VNFKz/ytF2c=
Subject key identifier: 02:CB:84:EA:BE:10:6B:69:82:CD:0F:83:70:BB:75:1F:6C:F1:11:39
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22C0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AsuE6r4Qa2mCzQ-DcLt1H2zxETk.roa
Signing time: Fri 25 Nov 2022 04:41:36 +0000
ROA not before: Fri 25 Nov 2022 04:41:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.16.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8896 (0x22c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=02CB84EABE106B6982CD0F8370BB751F6CF11139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:38:74:f7:7c:c7:2a:f2:d8:6f:a5:53:32:
eb:71:57:60:d4:a5:8e:58:d9:ff:cc:fa:a8:eb:38:
f8:9a:0f:72:0f:6b:56:6c:d2:e8:0f:e4:30:07:2d:
b4:ca:e7:e5:e7:6c:b0:32:bd:d3:4f:7d:13:ca:42:
b1:95:f5:6e:4f:e7:0e:1b:bc:c2:40:18:38:fd:f9:
9c:a3:14:d1:5d:0b:ad:da:d5:e0:38:2c:91:3e:df:
5c:c3:d3:43:bf:80:4e:36:49:4b:2d:1e:a1:89:20:
b3:d6:ef:9f:0b:56:64:0b:02:05:f4:90:ef:87:15:
ab:8d:6d:22:d8:e0:7f:49:3a:40:f9:40:5f:4d:cc:
0e:28:63:0c:83:55:cb:62:1e:25:26:d3:e6:7f:68:
6b:ad:b0:f4:54:55:7d:c9:8a:68:84:22:dc:c4:e2:
3d:27:ff:99:1d:5f:4d:b5:9f:d7:e8:35:45:1d:1f:
9c:f4:7f:2f:99:97:63:e9:d2:4b:d4:1c:35:c2:79:
4b:58:6f:dc:a1:49:08:9a:c5:fa:07:4e:fd:9b:bc:
fd:ec:c2:d9:87:0d:9c:63:7a:17:63:ea:1c:5e:a5:
65:5b:f8:68:54:46:b7:79:0d:01:f2:e8:b3:34:9e:
b5:6f:2a:4e:1a:57:87:9f:02:82:73:72:ab:05:69:
23:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CB:84:EA:BE:10:6B:69:82:CD:0F:83:70:BB:75:1F:6C:F1:11:39
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AsuE6r4Qa2mCzQ-DcLt1H2zxETk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.16.0/21
Signature Algorithm: sha256WithRSAEncryption
92:54:8f:a6:84:01:26:4e:c2:cd:43:54:99:5b:5a:1d:b7:3c:
cd:fd:a0:0a:c8:b5:7e:e4:05:6f:00:1a:9b:b2:b9:87:c3:70:
80:3b:bb:6a:f7:71:e6:be:e0:3b:f1:b2:80:52:18:6d:dc:11:
df:ef:e1:93:f6:47:be:7f:d2:8e:c4:31:bf:02:41:e7:ce:95:
91:12:ef:c3:e4:75:91:7f:c3:37:c0:cd:65:f9:5c:7d:48:e0:
c1:0c:64:78:bf:1b:37:66:4b:cb:0d:f6:72:65:f8:97:fb:91:
e6:3d:bf:51:95:59:31:85:19:19:7f:79:96:1b:7a:24:7a:c7:
7f:a8:df:52:4c:3d:8b:4a:cc:1b:aa:e9:87:be:ca:07:88:93:
dc:8e:73:dc:be:f0:81:e9:50:59:60:b2:83:77:63:3f:da:4b:
bb:cd:8e:c9:00:0e:6a:7e:ef:1c:19:e6:fa:34:42:e1:e5:b8:
6c:4f:e0:37:da:20:a3:e6:8c:eb:63:c9:0b:ba:cf:56:cf:7e:
b6:c5:f2:c7:15:18:bd:70:b1:44:05:4d:d1:bf:88:bd:7a:0a:
5a:ea:2a:a1:4d:9d:09:77:30:84:e9:7a:b3:83:94:7f:ce:05:
d3:9b:3f:9c:a5:8a:1e:8c:3c:22:47:21:d9:bf:ab:90:b6:f9:
21:25:e0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:22 2023 by rpki-client on console-ams.rpki-client.org