Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BMwiE4-i9M6wJ_sodKo7II-2ctU.roa
File: BMwiE4-i9M6wJ_sodKo7II-2ctU.roa (raw, json)
Hash identifier: YHjF43w+SMsd/L25wfKFypwh1k0DqxWc/0iNh+3ynQ4=
Subject key identifier: 04:CC:22:13:8F:A2:F4:CE:B0:27:FB:28:74:AA:3B:20:8F:B6:72:D5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BMwiE4-i9M6wJ_sodKo7II-2ctU.roa
Signing time: Thu 15 Sep 2022 02:52:53 +0000
ROA not before: Thu 15 Sep 2022 02:52:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.121.0/25 maxlen: 25
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=04CC22138FA2F4CEB027FB2874AA3B208FB672D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e5:3f:9f:7e:89:f7:e2:de:28:9a:35:d8:fc:
66:d3:24:4d:e2:48:a9:ee:e0:5d:27:f1:85:10:53:
eb:87:88:97:95:3c:0f:d7:aa:de:15:6f:2c:f2:07:
04:0a:48:3d:78:39:ef:69:77:47:65:9e:b4:58:af:
86:a4:0b:88:43:79:75:c1:7e:c2:b0:c4:53:e4:e9:
ba:54:dd:ce:e5:0b:45:2d:83:0a:d1:7d:fa:c4:bf:
d0:20:f4:62:12:b3:c6:d9:65:cb:9f:5a:17:30:ac:
97:0a:5a:46:64:e6:1f:cf:98:dd:76:c8:27:ec:7a:
0c:ce:6c:f7:ae:14:e9:7e:ac:05:25:a4:53:42:a3:
61:e8:b0:45:3e:6e:bd:65:21:2f:97:96:e9:a9:0f:
b3:65:68:4d:66:72:61:47:ff:7d:62:d1:6d:70:4e:
eb:7a:14:7f:a7:ea:b0:eb:0a:e9:8b:77:18:08:ce:
9c:2b:9f:b9:5a:9a:20:d0:06:fe:08:75:22:7f:ff:
ca:fd:4e:af:2d:37:f7:59:2c:b8:f5:61:e4:b8:bd:
c8:ca:54:08:e8:50:43:2d:26:7c:2e:04:9c:20:80:
4d:ab:02:f1:79:2b:43:ce:aa:db:26:59:32:bb:56:
45:3d:05:17:b8:f1:24:b5:e0:c1:76:dc:86:4c:7f:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CC:22:13:8F:A2:F4:CE:B0:27:FB:28:74:AA:3B:20:8F:B6:72:D5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BMwiE4-i9M6wJ_sodKo7II-2ctU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.121.0/25
Signature Algorithm: sha256WithRSAEncryption
a1:19:d0:1f:a0:86:b8:ed:f9:35:69:d7:46:7d:5d:7f:a2:96:
b2:cf:97:79:31:d6:c0:0d:04:ac:73:b4:4d:db:5d:db:87:ba:
bc:e5:ce:1e:7b:f3:1e:56:0a:b9:6d:50:93:65:b4:84:a2:4b:
0c:e2:9f:85:54:05:65:a5:65:58:6a:b2:5f:45:c8:a7:44:b0:
67:64:61:81:7c:b2:e5:c7:40:ed:b7:b5:e6:1c:82:98:c3:ad:
e9:3e:8c:9e:8c:3a:ec:49:00:fc:c2:0d:b3:dd:5c:7e:7d:a5:
11:b3:0d:58:e0:b5:e5:29:bc:e1:53:00:17:bb:82:3d:7f:43:
b8:1a:5f:3d:d7:2c:8c:73:da:6d:36:b3:d4:f0:19:f9:f1:be:
ee:b4:41:2c:5b:43:e6:cf:d3:78:ef:34:38:8e:86:98:bd:b2:
7d:ea:9f:58:eb:ee:80:d4:f0:16:b5:b5:d2:9c:bb:42:5b:20:
ae:1b:85:12:b1:db:71:11:66:ac:20:fc:97:a6:cd:a0:f4:1d:
73:9a:99:e4:93:03:dd:e9:ca:9a:49:7b:5d:36:ef:9a:29:dd:
b1:fc:81:34:93:e2:e7:6a:a3:ac:cf:c4:04:ad:60:66:ba:47:
c0:da:1b:20:83:d9:37:3a:8b:27:b5:7e:81:80:3b:49:92:50:
f8:09:12:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:11 2023 by rpki-client on console-ams.rpki-client.org