Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Eelra5BQ0kJ1lJqjZa2pdBESLYA.roa
File: Eelra5BQ0kJ1lJqjZa2pdBESLYA.roa (raw, json)
Hash identifier: MjGpaacN0hBtGr8j1cqZfemP5IF5YjuRdaCH5ida/PI=
Subject key identifier: 11:E9:6B:6B:90:50:D2:42:75:94:9A:A3:65:AD:A9:74:11:12:2D:80
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 235E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Eelra5BQ0kJ1lJqjZa2pdBESLYA.roa
Signing time: Fri 25 Nov 2022 04:43:30 +0000
ROA not before: Fri 25 Nov 2022 04:43:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.176.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9054 (0x235e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:43:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=11E96B6B9050D24275949AA365ADA97411122D80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:00:c5:1b:8f:46:ad:77:d2:4e:42:b5:46:02:
d8:56:c4:7e:e3:8e:fa:7a:ac:5d:b8:7d:15:eb:39:
22:3d:41:4b:e8:06:88:6b:6c:3a:31:5d:9c:36:95:
13:36:cf:21:57:f9:4e:6a:85:03:dd:5c:09:d7:4d:
e2:31:60:14:8f:26:e5:21:4a:83:9e:62:cd:48:26:
70:2f:ec:22:cc:4c:9e:3b:f8:6c:35:25:9e:57:03:
05:33:6c:9d:1d:96:e2:4a:41:7f:a7:be:61:99:78:
73:e7:19:27:8b:88:c8:81:7e:26:e0:f1:24:f3:86:
8b:1e:a8:e4:b6:73:56:f9:22:97:43:57:3b:56:b5:
9c:70:cc:70:81:29:c4:e4:be:0f:b2:98:ce:40:3f:
e9:16:39:ee:5b:d4:0b:34:1c:b4:ca:20:1a:db:25:
91:f9:2d:e0:ac:fd:ff:2d:41:42:9e:aa:4c:55:53:
55:96:b5:02:0a:ff:fa:09:c9:f4:a5:ce:23:3a:17:
97:dc:a6:f2:73:8e:88:58:fb:a9:e6:01:3a:0a:a6:
bf:ba:87:20:c4:14:83:58:c4:7a:e1:65:65:64:c8:
b7:a3:4b:1e:ed:6e:4b:1a:85:fe:1d:6c:ba:39:b5:
c2:59:a1:0b:c0:c9:c3:9d:0b:81:cf:f5:75:22:4f:
2f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E9:6B:6B:90:50:D2:42:75:94:9A:A3:65:AD:A9:74:11:12:2D:80
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Eelra5BQ0kJ1lJqjZa2pdBESLYA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.176.0/22
Signature Algorithm: sha256WithRSAEncryption
92:c8:47:d7:fa:de:3d:72:00:78:e5:59:a5:ef:78:a4:7d:f8:
9f:b6:2d:01:5d:89:40:33:77:6a:c8:76:da:1d:6e:9a:ce:4f:
2f:11:79:a7:28:99:76:33:00:ac:a8:15:4c:b2:26:a5:e5:ec:
a8:7d:55:26:39:38:dc:47:bc:39:ea:44:f7:b6:e4:52:23:e8:
57:e0:aa:71:ba:c1:09:9f:2a:05:e7:0b:6d:99:b2:02:ab:31:
7f:6c:35:74:f5:fc:d9:a5:d9:ff:39:43:08:22:73:d0:39:dc:
12:5e:9a:22:1e:15:fc:a3:a0:8a:43:2a:3d:1b:b9:12:c4:ba:
9e:bc:ce:54:5f:46:92:f2:d4:3e:ac:d8:93:51:19:86:79:5a:
28:0b:10:44:78:3e:79:c0:68:fa:1a:da:47:15:38:81:8f:1b:
33:4e:ed:cb:a9:af:30:ba:05:09:c0:d4:91:9d:a5:0a:b1:07:
a4:96:8b:bc:33:df:0b:e5:66:1b:9e:bd:8a:94:bc:b1:35:45:
5c:71:e2:ad:d3:f9:8c:ab:4f:ef:1c:a6:12:e1:61:b7:48:da:
d0:c0:9e:7f:09:39:e3:e0:33:77:bb:dd:e2:e8:eb:04:f0:00:
13:fb:6b:28:f5:f2:c1:71:ee:e4:db:39:5d:93:90:bd:10:16:
7f:95:3b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:02 2023 by rpki-client on console-fra.rpki-client.org