Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DC_SppBVbyYY_XJ_b8cIxLSZ_70.roa
File: DC_SppBVbyYY_XJ_b8cIxLSZ_70.roa (raw, json)
Hash identifier: uqmYWyYYq+OgVAvPzcm8VjS9kped9vEREC71Co2wh6E=
Subject key identifier: 0C:2F:D2:A6:90:55:6F:26:18:FD:72:7F:6F:C7:08:C4:B4:99:FF:BD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DC_SppBVbyYY_XJ_b8cIxLSZ_70.roa
Signing time: Thu 15 Sep 2022 02:46:16 +0000
ROA not before: Thu 15 Sep 2022 02:46:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.224.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0C2FD2A690556F2618FD727F6FC708C4B499FFBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:cb:e6:a4:19:ae:10:ac:8f:a6:95:87:84:
70:0c:31:c0:d6:b2:cc:16:ae:81:c4:fd:bb:5e:76:
53:bd:1f:47:c3:56:7f:0b:34:8f:3c:5c:6e:7f:45:
a4:3e:8c:01:f7:5e:e9:06:4b:8d:ef:13:df:19:6a:
7f:bf:e8:fc:25:21:14:36:f8:c2:5d:48:95:f1:77:
b4:fb:82:67:c3:b5:8a:ef:82:ec:13:8c:8a:c1:1d:
bd:8e:b6:fa:73:c0:26:cf:4b:da:3e:63:e7:09:c2:
5f:d4:25:57:1e:3f:27:c6:d7:1c:1e:d2:4e:6c:d5:
4b:5d:da:0f:a7:39:94:60:48:54:ed:fa:dd:d3:5b:
dc:8a:dc:03:26:0d:da:6b:26:af:52:e9:2c:ad:dc:
d1:59:f0:06:1c:42:b2:a4:9f:e0:34:7f:5f:89:3a:
72:aa:25:b5:38:72:6b:48:f2:4a:3b:b4:13:4c:82:
4c:9b:5d:df:c1:2a:7f:b4:75:32:7f:5c:48:9c:a4:
19:21:cf:6b:ae:d9:28:2f:98:3f:2e:00:fc:96:4f:
49:f7:ee:23:95:2a:1d:4f:99:73:8d:a4:23:74:fd:
58:41:c6:8a:20:a3:8b:c0:a4:ed:70:e9:fc:8d:ba:
f6:93:6a:37:e5:e7:7a:cb:9e:eb:e5:a3:52:e8:6a:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2F:D2:A6:90:55:6F:26:18:FD:72:7F:6F:C7:08:C4:B4:99:FF:BD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DC_SppBVbyYY_XJ_b8cIxLSZ_70.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.224.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:ac:8b:17:6a:0e:f2:8f:40:71:36:e0:af:18:d2:46:7a:45:
5d:3a:b4:3f:0b:2c:7c:da:91:91:fb:aa:8a:91:37:48:a2:65:
f9:dd:a3:04:5f:94:b9:0e:95:55:1d:b5:b5:1c:1c:cf:57:52:
a3:e1:db:14:dd:75:16:d3:ec:53:c0:d3:6c:95:99:c7:c4:74:
d7:ed:ee:df:dc:40:d5:fe:a7:2b:70:99:90:40:98:4e:82:e4:
f7:23:b2:51:64:7b:69:bd:91:a5:77:36:80:61:e9:0f:1f:e2:
35:1f:39:2a:2c:b1:dd:4b:6b:85:a7:ac:50:10:60:c9:ff:e3:
c6:93:ca:e3:36:be:0b:6e:a1:91:0b:9e:00:62:61:0b:1f:fb:
1d:07:81:3d:be:73:cb:e4:2a:30:27:fe:91:e7:3b:c2:e1:fd:
ec:83:5c:d2:53:38:e2:47:11:43:10:1c:75:49:ed:7e:5f:5c:
68:04:f6:34:25:fa:d0:fd:37:89:e0:bb:4b:b4:b7:d4:a6:d5:
1f:81:e3:f5:11:b5:67:82:87:ad:ae:31:9b:66:70:eb:cb:84:
0d:dc:4b:15:4e:80:dc:13:9b:fb:3a:fc:e5:8c:0b:ab:e6:4b:
d5:c3:40:f0:d3:14:12:ab:8d:e0:f3:d1:c0:d4:1b:f0:1e:10:
45:d6:6e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:14 2023 by rpki-client on console-ams.rpki-client.org