Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GP9shUrhN5M28xiqETaaU90qOBU.roa
File: GP9shUrhN5M28xiqETaaU90qOBU.roa (raw, json)
Hash identifier: qzo3QOmkY62MR+nFhcNFlJXhcUaswnYclkgHU27rylo=
Subject key identifier: 18:FF:6C:85:4A:E1:37:93:36:F3:18:AA:11:36:9A:53:DD:2A:38:15
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GP9shUrhN5M28xiqETaaU90qOBU.roa
Signing time: Thu 15 Sep 2022 02:54:09 +0000
ROA not before: Thu 15 Sep 2022 02:54:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.124.128/25 maxlen: 25
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:54:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=18FF6C854AE1379336F318AA11369A53DD2A3815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:27:3d:0e:cd:7e:68:a5:48:42:fe:03:e2:54:
ed:80:10:1f:b1:ce:12:d6:c6:46:9d:ca:f5:e0:7c:
3d:0d:e9:17:75:07:a3:2d:47:c2:03:4d:22:4b:e5:
a4:13:e7:fc:65:2f:db:ef:12:61:8f:e2:85:07:a1:
38:c4:05:d8:53:46:9c:cd:59:07:96:96:80:13:c8:
de:3b:a1:ad:c9:98:49:24:56:bb:25:a8:0a:08:b7:
ae:d8:e2:85:83:94:e7:8a:81:90:cb:3d:65:b3:e6:
f7:07:51:32:dd:d0:bb:c5:4f:f7:5c:1d:73:c7:a1:
6c:56:da:82:6f:2a:be:09:1c:3a:17:8f:01:90:07:
f8:f7:1c:7c:78:cc:84:1e:92:97:21:c0:82:ec:a5:
d1:8d:ee:2b:90:fd:e2:81:e2:6e:bc:ec:d1:dd:bc:
44:5d:a2:9b:1a:0c:ad:59:c3:b2:51:35:ad:1d:0e:
b7:b0:fd:76:b6:fd:ec:bb:ef:98:3e:55:bf:14:b6:
b7:92:e1:af:24:7d:37:86:c7:2a:8f:c2:24:22:a5:
96:d4:77:b7:80:80:70:1d:fd:f9:78:7d:e2:cf:ad:
af:d0:f4:0a:a4:3e:eb:67:59:71:64:a1:f2:2e:59:
8f:63:43:72:66:2c:38:57:ec:0b:ae:c3:fd:f5:5f:
ea:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FF:6C:85:4A:E1:37:93:36:F3:18:AA:11:36:9A:53:DD:2A:38:15
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GP9shUrhN5M28xiqETaaU90qOBU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.124.128/25
Signature Algorithm: sha256WithRSAEncryption
90:6e:43:9a:10:66:91:4c:f2:20:af:f0:12:78:f6:80:a5:b0:
4c:37:85:29:c4:31:b2:c9:2d:ba:f8:31:ca:e7:02:2c:03:2b:
39:1b:23:35:8d:7b:34:9b:36:12:11:46:18:d9:e4:c4:08:46:
48:04:7b:b3:7e:c9:7c:21:0f:80:b7:67:1d:89:44:13:36:b0:
9b:5d:c3:a0:71:06:0d:ea:07:df:6e:33:31:a6:4b:ad:d5:44:
a9:99:d7:7e:12:b2:00:96:97:8e:50:8f:81:37:88:14:fa:ce:
65:73:c6:7c:8a:c5:0b:66:4c:43:90:34:4f:18:63:15:9f:22:
3d:7e:26:54:88:b4:6b:e7:34:06:3f:98:c3:b0:8a:0e:a0:06:
fd:9b:f4:ee:95:50:5e:0a:e4:fb:79:5f:d2:d1:b2:7e:ee:11:
9e:dc:4a:2b:13:fb:3d:88:fe:fe:ee:dd:20:52:4b:9c:00:00:
9b:34:e8:6c:40:83:8a:88:34:e1:e2:b8:eb:65:f0:56:89:a3:
4c:19:7e:a8:6d:bd:da:ca:cf:cd:ef:78:3e:21:42:ff:fa:56:
8b:00:bc:63:3c:fe:9c:49:22:f1:70:d3:8e:85:8c:c7:04:94:
19:b7:b9:c5:c4:ff:82:b3:57:2b:42:6d:67:74:ff:bb:0d:78:
61:fe:85:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:15 2023 by rpki-client on console-ams.rpki-client.org