Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C-l9QIABI9w92QgBGaqoJ2L3YU4.roa
File: C-l9QIABI9w92QgBGaqoJ2L3YU4.roa (raw, json)
Hash identifier: 0QlKFjtqBcg1ObKwsUxvN21zX3PXWLQrnm1uSUUiwmA=
Subject key identifier: 0B:E9:7D:40:80:01:23:DC:3D:D9:08:01:19:AA:A8:27:62:F7:61:4E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2323
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C-l9QIABI9w92QgBGaqoJ2L3YU4.roa
Signing time: Fri 25 Nov 2022 04:42:05 +0000
ROA not before: Fri 25 Nov 2022 04:42:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.248.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8995 (0x2323)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0BE97D40800123DC3DD9080119AAA82762F7614E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ea:6a:cc:d2:4c:e5:23:3b:89:81:a6:58:bd:
cf:c7:51:0e:3f:bf:40:20:be:30:98:33:c1:26:27:
59:79:79:88:e8:34:46:06:33:d5:22:85:50:62:b1:
90:9c:2b:f3:80:99:48:43:5c:45:54:4f:fe:e1:6b:
ca:f7:cb:a4:94:e4:38:36:e2:5e:6e:20:d9:99:dc:
94:de:ba:94:0d:0f:b0:fc:f6:cc:d4:5b:74:ae:3c:
b8:f7:25:82:cc:9f:f5:6f:43:f1:ec:11:14:c7:e2:
59:dd:e9:d5:d2:96:fd:ad:3a:69:13:7b:75:52:e5:
aa:0d:9f:ec:06:12:8c:c8:50:e0:ea:fc:74:19:92:
dc:38:b3:1c:dd:7c:07:19:ed:f1:af:fe:8d:a9:79:
03:95:2c:a3:44:5f:fd:18:e6:fd:50:2a:bb:c1:f5:
8f:f8:af:a3:a5:83:cd:bc:78:ec:61:88:ef:fb:ac:
5c:28:0d:f0:d0:87:5f:b3:24:cf:de:2f:b0:0e:89:
ca:de:86:28:88:79:3d:4f:4e:a0:2b:b0:fb:f4:5c:
fe:63:0a:5a:af:62:d4:96:54:48:ea:b3:45:3d:55:
39:34:14:c0:7d:69:8e:48:ce:f3:8b:3d:15:5f:92:
c5:97:e0:7a:81:f5:52:24:f5:dc:52:0f:ea:ff:a0:
7d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E9:7D:40:80:01:23:DC:3D:D9:08:01:19:AA:A8:27:62:F7:61:4E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C-l9QIABI9w92QgBGaqoJ2L3YU4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.248.0/21
Signature Algorithm: sha256WithRSAEncryption
45:ff:4e:82:66:53:b7:93:34:c7:dd:79:f9:a2:cb:f3:bb:ae:
4b:0b:d8:87:70:21:00:38:d3:9c:8f:f4:48:a2:2b:95:20:e9:
a7:62:00:69:e8:6d:24:9d:69:b7:b5:cb:13:a2:94:41:c1:b6:
e1:c5:a1:18:db:42:62:ed:f7:8c:a2:8a:8c:3a:f5:7c:1b:d3:
c6:5f:8e:3c:b3:3f:de:84:73:a5:8d:f6:3a:4e:f1:e3:cf:f8:
5b:af:00:a6:de:ab:8b:19:c9:36:96:74:9d:f8:1a:8c:9a:66:
c6:ac:3e:75:96:e1:40:4f:32:1c:4e:5c:af:d1:39:67:ed:cf:
cf:27:62:4a:75:f8:e3:01:0d:c9:d2:7b:b8:f9:e5:a0:dd:f5:
3f:4d:68:50:0c:bd:76:cd:f3:17:fa:8a:7a:30:22:8d:1e:1f:
04:a4:57:a0:55:42:94:9d:a9:d1:46:59:ec:04:73:fe:51:6b:
c7:c2:7c:13:a6:11:82:86:a8:29:eb:62:ce:41:72:16:46:bc:
8c:ec:5a:d7:04:0d:b0:5d:94:da:c0:27:50:44:0e:1c:4b:85:
1e:cd:f4:bc:c8:69:35:ba:12:3a:3a:b4:c8:19:4a:4d:32:e4:
35:51:d4:0c:34:44:63:59:42:93:b1:4d:fe:fd:75:33:bc:1f:
73:2b:e4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:22 2023 by rpki-client on console-ams.rpki-client.org