Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B_zTd6HfhtsyCRNfT3h5Z_3aC38.roa
File: B_zTd6HfhtsyCRNfT3h5Z_3aC38.roa (raw, json)
Hash identifier: 2NGFn5o6HWkXEM5JYtMnUwXE9rwA7cQVWqRX6JUQxUU=
Subject key identifier: 07:FC:D3:77:A1:DF:86:DB:32:09:13:5F:4F:78:79:67:FD:DA:0B:7F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B_zTd6HfhtsyCRNfT3h5Z_3aC38.roa
Signing time: Thu 15 Sep 2022 02:44:46 +0000
ROA not before: Thu 15 Sep 2022 02:44:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.160.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=07FCD377A1DF86DB3209135F4F787967FDDA0B7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e2:63:0d:76:71:a5:75:6d:c5:55:7a:0c:e1:
56:c9:e2:44:e9:5b:ed:d9:19:37:0a:40:2f:b6:83:
53:0f:98:e3:ba:56:f6:95:5a:8e:2b:f9:75:9a:93:
b5:03:f5:49:a6:4b:71:31:fc:06:ba:8d:ba:8c:9c:
5c:8c:f0:96:88:87:64:4f:70:f5:36:53:9f:06:e1:
1b:f9:60:a9:4a:88:6b:c3:59:dd:bc:35:95:3f:ce:
65:00:95:43:fd:79:ea:95:08:ea:66:71:77:a8:39:
38:d5:6d:03:e3:bb:15:bf:f2:d9:1f:61:45:5a:3c:
89:0f:64:0a:35:12:fd:16:d6:71:53:d2:8e:40:af:
cc:fc:02:3c:3e:da:51:11:30:1e:76:2b:6f:ec:be:
14:0c:8e:a1:3e:56:59:4d:bc:7c:80:c6:ff:e4:3b:
64:29:46:65:3e:93:a0:d5:45:2c:6f:b0:12:b7:7f:
87:49:52:22:58:7f:e0:76:47:db:42:7c:d3:91:55:
a6:bd:b0:38:78:1e:5f:68:6e:12:10:26:2b:58:eb:
9b:b8:63:d0:28:c9:0b:4b:1b:a4:fd:4b:a4:55:73:
9e:4f:87:d4:dc:27:4b:f0:f3:d1:50:b9:e2:24:f5:
5d:2f:89:ab:97:ec:75:1d:03:87:48:77:15:6b:06:
72:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FC:D3:77:A1:DF:86:DB:32:09:13:5F:4F:78:79:67:FD:DA:0B:7F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B_zTd6HfhtsyCRNfT3h5Z_3aC38.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.160.0/21
Signature Algorithm: sha256WithRSAEncryption
25:b6:ca:52:76:d0:16:53:87:01:59:95:ee:b2:3d:d6:5d:7d:
d6:fa:69:31:f3:33:6b:22:31:54:99:cc:9e:dd:14:d8:ee:b3:
a8:68:6d:5c:79:cc:9c:0c:40:ad:0c:20:82:e4:dc:20:f2:28:
b8:69:81:c0:d9:40:57:9a:ec:e0:cc:80:39:28:be:7a:4f:cb:
8d:29:64:7a:de:db:7e:99:07:d0:4d:b3:3e:00:20:d0:28:65:
93:b5:aa:4f:50:0a:a7:4f:5e:4f:78:d2:2f:f5:b8:54:8d:18:
45:c4:3d:ca:ae:ad:7a:af:23:57:d1:62:c6:d5:50:7f:ed:9b:
91:53:3e:45:60:70:71:fd:07:d6:1b:6e:7b:5d:33:c6:ce:3b:
35:6e:ca:40:02:1b:a8:d0:33:9c:a2:86:4e:a6:b7:11:7d:26:
64:f8:74:a0:2d:1e:d7:ea:51:8e:84:a7:fb:cf:24:8d:77:58:
7b:74:ac:22:96:a6:79:26:cd:44:41:44:28:c1:f1:24:0f:33:
58:89:f4:02:61:f3:af:c9:6a:43:9e:dc:fe:f3:a8:38:83:b5:
63:a9:c1:80:51:41:60:ca:9c:16:7b:32:a3:d6:de:ab:d6:99:
e9:77:49:c4:a6:08:86:15:c8:3f:27:9a:07:46:6d:ae:c1:f3:
19:d8:6b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:23 2023 by rpki-client on console-fra.rpki-client.org