Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G3GHmvPxfzkGss8lBkEgeV84HKc.roa
File: G3GHmvPxfzkGss8lBkEgeV84HKc.roa (raw, json)
Hash identifier: Ftiow1DmRjUjJFJrOTYEd8qxo6zMlmtxwafHnFMpkpU=
Subject key identifier: 1B:71:87:9A:F3:F1:7F:39:06:B2:CF:25:06:41:20:79:5F:38:1C:A7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2151
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G3GHmvPxfzkGss8lBkEgeV84HKc.roa
Signing time: Fri 25 Nov 2022 04:39:47 +0000
ROA not before: Fri 25 Nov 2022 04:39:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.88.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8529 (0x2151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1B71879AF3F17F3906B2CF25064120795F381CA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:36:d8:c0:9d:07:29:ce:df:04:38:f9:e3:
83:9d:d1:e6:15:ec:b0:bd:28:63:ec:44:bb:e9:d9:
22:cf:ed:42:e1:ba:60:d4:ac:ed:af:76:ba:a2:e3:
a5:70:63:38:f0:fa:a2:95:7a:aa:c8:a2:86:6c:7d:
8a:2d:bc:90:ce:b0:15:60:79:2a:a2:ff:8e:e1:2d:
62:ed:32:bb:68:86:1d:ec:35:ef:4d:c0:b5:97:df:
8d:55:49:ef:01:89:ca:d7:60:d3:1c:cc:cd:37:77:
d7:03:1c:ea:ef:80:3f:8c:0d:af:50:29:c5:0b:6a:
06:82:5d:9a:4a:c4:ef:3a:01:0c:19:7e:fc:6f:53:
fa:6e:15:93:c0:e5:de:7b:8f:88:0e:d6:88:f3:30:
2d:a1:da:a5:82:75:9f:42:da:60:a6:7c:90:79:1d:
90:90:3c:87:12:d2:93:ff:02:af:18:a5:44:5a:d2:
0a:76:11:15:6f:02:38:14:8f:27:5d:18:7f:b2:4e:
1c:51:ab:10:eb:e3:35:0a:dc:08:75:de:2c:9c:5b:
47:69:15:6f:27:0a:e4:4b:ea:c2:fb:76:d9:11:a6:
29:33:14:f6:00:2f:30:06:28:66:0f:75:79:7d:71:
30:ed:1b:fb:71:ef:5b:6f:eb:a7:a1:a1:29:da:96:
2c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:71:87:9A:F3:F1:7F:39:06:B2:CF:25:06:41:20:79:5F:38:1C:A7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/G3GHmvPxfzkGss8lBkEgeV84HKc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.88.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:f1:10:62:a0:72:69:31:ab:aa:cc:b5:bd:d9:5a:d0:e3:a4:
c2:64:25:e3:7d:50:ba:c6:b1:69:46:6a:51:29:60:30:46:5b:
76:60:ad:c6:57:a9:3d:d3:fb:ca:5a:5f:e0:8d:68:c2:6d:9a:
99:bf:85:d9:04:62:d1:f7:28:48:73:06:e8:df:62:82:30:79:
e4:0f:cf:d9:5f:68:c2:41:7e:62:4b:1d:29:c3:26:2b:de:de:
7b:8c:27:bd:07:eb:13:27:52:87:de:1a:b3:b8:fc:4b:8c:ae:
1d:a6:a3:c6:79:14:5a:03:e3:65:6d:e6:50:f5:d5:25:66:ac:
d9:8f:77:41:8d:18:56:b2:2e:55:d0:ce:87:4a:2e:01:3a:0f:
ac:fb:a7:8d:d5:78:44:3d:c8:7d:86:65:6c:7c:e2:0b:ce:29:
d8:27:bc:1d:db:ff:f3:8b:2e:76:20:f6:2a:2c:99:7c:58:e5:
ba:27:87:dc:54:d4:fb:37:d2:82:b9:98:9c:2a:78:7b:72:d5:
00:f6:82:63:97:ed:b8:61:09:be:86:19:56:71:41:54:33:26:
62:97:06:b5:6b:94:fc:d1:ad:3e:b5:49:cd:0d:2f:2d:a9:94:
98:2c:66:17:c6:f0:04:a2:ea:32:98:a2:8f:ad:c9:63:60:f3:
b3:a0:60:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:02 2023 by rpki-client on console-fra.rpki-client.org