Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DmbYsY3NTV80NjRXB6VOGaXJwgE.roa
File: DmbYsY3NTV80NjRXB6VOGaXJwgE.roa (raw, json)
Hash identifier: 0D2tWiCE7GkCWXn7vtfhslPzo0PVmnooQ9NYFdYzFS0=
Subject key identifier: 0E:66:D8:B1:8D:CD:4D:5F:34:36:34:57:07:A5:4E:19:A5:C9:C2:01
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2311
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DmbYsY3NTV80NjRXB6VOGaXJwgE.roa
Signing time: Fri 25 Nov 2022 04:42:00 +0000
ROA not before: Fri 25 Nov 2022 04:42:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.193.126.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8977 (0x2311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0E66D8B18DCD4D5F3436345707A54E19A5C9C201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:08:bb:65:ec:81:b2:ae:33:09:b5:4d:c5:da:
3a:bf:c6:5d:93:85:d4:7e:6c:85:dd:a0:79:1f:e5:
ec:ea:a7:b4:5e:f6:2f:59:79:a8:cc:05:e1:0e:aa:
66:e5:74:22:be:f7:a3:f7:23:8a:10:12:08:db:43:
d2:ba:99:dd:f4:95:0e:a1:c0:11:0f:2d:30:ca:50:
8e:e4:75:01:12:60:4a:e8:9c:cd:68:99:42:8c:a7:
53:8d:61:85:b1:96:51:f3:dd:83:3a:75:ee:8c:be:
4c:ef:07:49:29:d3:a2:91:f2:af:13:c4:a9:e5:64:
eb:fa:c0:da:ed:f1:d9:30:d1:55:bb:91:54:45:16:
8a:18:a6:fd:9e:37:7d:b2:f3:66:1b:66:ad:3d:42:
66:ce:d5:8d:c7:7d:23:f0:4c:23:39:f3:77:de:59:
e5:6d:37:25:25:cb:d0:bb:47:2b:9a:ba:0c:2c:0e:
eb:0f:9e:27:07:2b:cd:83:8f:d7:77:2a:2e:36:e8:
01:9d:56:91:aa:17:da:1d:65:c9:d6:75:2c:d0:d4:
c5:15:74:7c:55:f6:4a:2b:9c:5c:33:29:25:01:90:
80:0e:2b:75:0f:45:0d:70:80:19:c2:4b:8c:03:4c:
77:80:05:96:39:64:0f:6c:91:47:75:c4:b8:ba:dc:
21:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:66:D8:B1:8D:CD:4D:5F:34:36:34:57:07:A5:4E:19:A5:C9:C2:01
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DmbYsY3NTV80NjRXB6VOGaXJwgE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.126.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:22:30:5c:82:54:25:be:ea:f7:9f:a8:2e:ce:92:3d:66:a7:
33:75:20:f7:a7:da:dc:1e:77:18:cc:fc:17:95:04:73:fa:7b:
d2:fc:dd:41:4a:da:3d:ca:cd:70:4a:82:06:e1:0c:59:7a:c9:
75:47:68:35:c3:a5:9e:4c:ca:9e:13:ce:99:b1:e4:bd:32:be:
7a:2e:c3:ac:8b:35:a5:8a:30:37:17:82:81:a7:e1:6a:d6:57:
e4:56:5f:e8:f2:95:6b:d4:33:5b:92:6b:af:63:b2:97:45:c8:
7b:d9:32:c1:ff:2d:be:47:e1:87:f4:36:be:d4:3d:3e:ed:e7:
b1:b9:ba:84:e6:48:3e:b1:f1:34:b6:ad:b7:b2:7f:c2:15:18:
1b:b2:60:5d:f0:1f:57:01:fa:93:46:17:d1:45:d2:e4:b7:ed:
ec:7d:58:2f:ca:f9:4d:45:b0:fd:97:4b:46:9b:80:6a:bb:28:
d8:46:d7:5f:db:47:25:d0:61:9b:f0:98:b9:0a:d6:15:d0:33:
ac:50:d2:90:0b:c0:ef:8e:2e:db:64:20:d5:80:ee:dd:66:e3:
1b:f4:65:09:51:32:64:5b:1b:a1:b1:02:c4:af:00:1c:b0:f2:
3d:17:68:e0:e8:54:4c:1c:7e:42:e8:2a:64:28:db:88:f2:a1:
97:47:b0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:01 2023 by rpki-client on console-fra.rpki-client.org