Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BRHUwji_uPK43LQfIdnCpMmUE-c.roa
File: BRHUwji_uPK43LQfIdnCpMmUE-c.roa (raw, json)
Hash identifier: Zu1H8KRBSVTGhAYRwPJE9RC6pQqGYD4nGXhZ8wwxm6s=
Subject key identifier: 05:11:D4:C2:38:BF:B8:F2:B8:DC:B4:1F:21:D9:C2:A4:C9:94:13:E7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2215
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BRHUwji_uPK43LQfIdnCpMmUE-c.roa
Signing time: Fri 25 Nov 2022 04:40:45 +0000
ROA not before: Fri 25 Nov 2022 04:40:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.192.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8725 (0x2215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0511D4C238BFB8F2B8DCB41F21D9C2A4C99413E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:d0:b6:96:76:5b:29:4e:27:4c:24:e1:7d:9c:
11:fe:c2:82:99:b9:9b:5a:26:9f:67:69:0a:a7:84:
84:ef:94:54:5d:ae:fa:63:c0:4d:f6:d4:49:b0:83:
e1:cb:f6:65:a0:42:1b:6a:3d:a2:8e:ec:53:27:b0:
2a:92:5a:52:bc:a9:9e:a8:07:43:98:6c:10:b1:b0:
45:b9:81:f8:aa:47:c6:5f:6b:75:dd:4d:61:27:3f:
d0:6b:c9:f5:d5:68:df:e0:61:f7:29:3d:f5:42:04:
38:b7:76:17:e7:6a:2a:f2:86:03:93:8d:64:b6:32:
4b:56:1e:5c:49:ff:b7:b1:b1:f8:73:8b:5a:69:60:
02:dd:22:20:c2:02:9e:51:44:06:dd:f4:8f:29:ca:
5a:f4:67:5b:b1:38:8e:5f:e9:d7:9f:54:7d:0c:d3:
5b:e7:65:42:e3:64:11:4a:99:ef:54:6f:76:84:a7:
05:ab:6c:73:1e:68:15:73:78:84:12:66:78:59:41:
56:c1:fd:95:6a:2f:ae:86:a1:a2:fe:19:ea:f0:b6:
8d:85:32:a9:66:51:65:51:40:1c:a3:92:45:6c:0c:
6f:69:03:1d:48:fa:aa:f4:7d:76:22:b0:f7:1c:2f:
c4:73:ba:6f:b8:09:13:3d:fc:67:1a:40:b5:13:ac:
5c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:11:D4:C2:38:BF:B8:F2:B8:DC:B4:1F:21:D9:C2:A4:C9:94:13:E7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BRHUwji_uPK43LQfIdnCpMmUE-c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.192.0/22
Signature Algorithm: sha256WithRSAEncryption
03:cb:d3:24:4c:9b:c7:9c:fb:b0:2f:45:1a:8c:58:4a:93:cf:
16:a3:d4:6e:aa:20:12:b3:1b:b8:af:fa:a5:72:06:44:90:9d:
0f:dd:cb:6d:4f:1e:ce:6c:dc:ab:8a:00:6a:93:ee:51:cd:7c:
24:48:66:e9:7f:93:b6:3d:63:de:c9:8b:49:da:3f:9f:a8:97:
35:c3:cf:c2:1c:4f:36:96:df:ad:79:be:11:54:3c:17:bd:e1:
7a:90:af:2b:6c:aa:a0:d2:79:e6:c8:d1:25:b0:01:85:ab:fc:
a8:9e:b4:99:a5:c9:af:2b:5f:56:92:bb:fb:bc:79:c6:11:f5:
9f:8d:99:b6:77:25:91:4f:57:c8:fd:5a:2a:57:30:fc:fc:0c:
63:c7:21:02:ba:af:6a:63:1b:0e:73:12:0d:2a:b0:3c:0e:e1:
0e:36:04:28:ae:2a:3f:e7:85:51:69:a3:87:42:28:3d:d3:71:
4d:d1:4e:6c:53:3e:2c:fc:17:4c:ba:2f:e9:7f:c7:12:77:76:
cb:6c:44:7a:71:85:e5:57:1c:8e:65:7e:bc:86:4d:29:ca:da:
e7:ec:69:04:e2:79:80:5b:99:94:78:29:f6:35:81:4c:31:b2:
a4:53:8e:e8:b3:1a:99:f9:80:8d:42:8b:9f:b9:b7:18:96:bb:
c6:ba:31:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:01 2023 by rpki-client on console-fra.rpki-client.org