Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G29uELfIU-iKtLQu1KW-x7KTzZo.roa
File: G29uELfIU-iKtLQu1KW-x7KTzZo.roa (raw, json)
Hash identifier: wM2eBCqfYYjn0DyRUM5xZjLMBCBIEWttVD/fYhnEPAo=
Subject key identifier: 1B:6F:6E:10:B7:C8:53:E8:8A:B4:B4:2E:D4:A5:BE:C7:B2:93:CD:9A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G29uELfIU-iKtLQu1KW-x7KTzZo.roa
Signing time: Thu 15 Sep 2022 02:45:15 +0000
ROA not before: Thu 15 Sep 2022 02:45:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.48.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1B6F6E10B7C853E88AB4B42ED4A5BEC7B293CD9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a2:a9:c7:1c:2a:ef:d6:db:38:18:70:c3:3e:
15:cc:23:8c:b5:ce:35:32:30:3e:ad:15:fa:42:98:
53:10:6b:7c:86:40:11:e2:3c:ef:2d:53:6f:f5:98:
ad:e8:87:15:f2:09:0c:5a:1b:2e:13:9a:13:8c:bf:
9e:ff:a0:62:d3:e3:e0:fc:03:33:e1:71:00:82:69:
e5:3e:35:b4:7a:2a:1e:11:a2:7d:b6:d2:9d:a5:52:
9b:fd:c3:68:0c:cc:1f:1c:f6:9d:3a:cb:3f:77:3f:
21:a7:d7:99:11:bd:1b:89:86:cb:36:ea:69:da:f0:
eb:f0:f9:85:49:75:af:19:06:b9:06:98:25:e6:7b:
98:4d:20:7a:e7:a4:57:86:fa:f2:5e:e7:65:05:c3:
5a:85:ce:9e:74:03:2a:81:b1:f8:4b:e0:f1:ed:58:
79:b7:63:45:bf:2c:c5:11:17:a5:ff:60:ea:54:f5:
44:1f:3a:d9:27:aa:e7:72:03:9a:73:27:ed:ac:7d:
e6:ee:b0:ee:23:f8:4c:aa:65:dd:5a:57:7f:d9:8a:
b5:2b:40:cc:5e:b8:e2:90:9a:e7:b9:8e:e0:a4:17:
9e:fd:75:87:87:f0:4c:eb:b7:ac:4c:38:e4:c5:d5:
82:d2:b6:8f:8c:7c:68:05:89:67:e8:d8:de:88:24:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6F:6E:10:B7:C8:53:E8:8A:B4:B4:2E:D4:A5:BE:C7:B2:93:CD:9A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G29uELfIU-iKtLQu1KW-x7KTzZo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.48.0/21
Signature Algorithm: sha256WithRSAEncryption
37:e7:37:6d:94:eb:e2:bc:31:b2:52:c9:98:14:8d:7d:02:c4:
2a:8b:be:a0:ae:38:a5:33:95:0e:6a:7b:77:5e:4e:08:f3:cb:
cb:73:36:ca:7c:22:e6:37:ca:0f:d8:a4:41:52:b6:4c:a8:46:
7b:66:6c:df:57:49:c6:a4:8a:18:7a:f6:c5:87:7f:2e:c6:52:
08:88:73:27:fc:65:0f:d7:23:4e:1e:ae:08:ae:26:a6:a2:51:
ca:9a:ba:52:ed:ca:85:72:49:2b:87:8e:8c:90:cf:33:e1:52:
db:12:7a:77:a7:56:51:28:83:0c:80:bd:7c:ba:ad:98:7d:49:
0b:b8:2e:ab:49:d7:fb:1f:70:8e:e5:b5:4a:cc:c3:13:f3:91:
4f:e6:65:cf:8d:9b:93:8f:45:d6:36:c9:ef:04:41:ee:8e:16:
49:da:19:c5:5e:79:fe:1d:29:bb:10:41:88:a8:47:93:67:a4:
57:ae:30:88:d0:bc:4a:bb:19:a0:22:33:c4:25:c2:ce:2e:a4:
65:68:4a:9d:87:c0:f0:e7:77:f2:c2:63:40:90:af:80:b9:d4:
6f:7d:8d:e4:8f:51:19:71:21:72:f7:05:91:36:5c:94:b1:52:
e5:a9:39:f9:69:d0:54:1c:07:4b:ae:be:d9:64:4a:86:48:1d:
51:42:c5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:15 2023 by rpki-client on console-ams.rpki-client.org