Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GQmpxf_C9uFPIgNQ0C_WEKcf9-E.roa
File: GQmpxf_C9uFPIgNQ0C_WEKcf9-E.roa (raw, json)
Hash identifier: nnqXLkpK0he0+BM8tip2gQeKyiHjoG5jAtFc3SP6HMg=
Subject key identifier: 19:09:A9:C5:FF:C2:F6:E1:4F:22:03:50:D0:2F:D6:10:A7:1F:F7:E1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22BD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GQmpxf_C9uFPIgNQ0C_WEKcf9-E.roa
Signing time: Fri 25 Nov 2022 04:41:35 +0000
ROA not before: Fri 25 Nov 2022 04:41:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.112.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8893 (0x22bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1909A9C5FFC2F6E14F220350D02FD610A71FF7E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:12:ba:1e:34:4e:2d:eb:a0:b5:5d:28:9e:a2:
ca:0c:13:f7:5d:ae:d0:4b:23:c4:07:3e:54:03:38:
52:a3:a5:d9:db:1d:7d:d9:15:0e:69:dd:af:1f:bd:
23:93:a9:91:aa:b0:a7:5d:fc:af:96:02:08:cf:06:
c7:58:b6:d5:c1:f4:ae:e0:d5:97:2a:68:d4:6e:d6:
01:54:fd:bf:3d:e9:c9:45:53:d5:81:21:e3:5a:33:
ae:51:d2:a2:6e:e1:c4:b8:8b:35:02:67:43:8f:8e:
2d:96:cc:82:7d:7c:5b:73:86:47:ca:7b:c7:9c:78:
fc:de:85:57:28:2a:e0:4a:d0:a3:23:1e:29:a8:aa:
86:20:73:71:a0:1b:1f:4f:65:8f:17:77:3c:b7:fe:
6b:51:e5:74:70:85:7b:e8:47:95:f5:55:3d:b9:58:
27:2a:a0:29:f1:af:13:b4:a1:66:f6:f1:e9:77:17:
64:1e:4f:0f:f3:d0:14:72:92:89:bd:80:17:00:7d:
ba:be:98:17:d5:b5:d8:b9:d1:8f:89:a8:aa:2a:7d:
6c:f4:29:80:4b:b8:19:c2:cc:7c:ab:4e:95:53:ce:
81:9f:84:7a:e2:2b:3f:04:a7:a3:34:c7:65:6e:7e:
88:14:2f:3b:8d:a0:45:64:1a:e5:0f:f1:a9:5d:dc:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:09:A9:C5:FF:C2:F6:E1:4F:22:03:50:D0:2F:D6:10:A7:1F:F7:E1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GQmpxf_C9uFPIgNQ0C_WEKcf9-E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.112.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:12:e3:72:0a:57:0c:56:c9:05:68:48:19:20:b4:a0:79:3b:
b7:4e:c5:ba:b9:00:df:0a:76:4a:40:e1:b1:35:98:de:47:4a:
bf:61:3c:00:b4:79:4a:3f:78:55:7f:ba:81:e7:47:6d:95:9a:
c9:42:87:b2:66:a5:c5:c8:96:47:f5:81:1a:03:ad:39:55:22:
d7:31:64:90:65:93:e5:20:ff:c6:0c:36:ae:be:2c:9e:8f:25:
3f:e7:8f:4f:15:03:93:6f:42:ba:f9:3a:62:98:a1:76:74:34:
2f:e3:6a:0a:ae:ba:63:1c:f6:d8:f8:b0:0b:48:aa:05:9e:c9:
e7:0f:0d:46:b1:5d:f0:25:b4:f3:0b:ce:27:5d:cf:1f:9a:52:
03:f7:20:d6:9f:df:e6:99:a5:61:e1:50:82:94:84:36:1d:d6:
6b:9f:c5:d6:e2:e1:18:1e:42:c2:a6:33:3f:ea:68:b3:a4:01:
ec:8e:1d:9e:dc:de:ba:5b:e6:dd:f3:47:93:74:b6:0f:de:80:
ed:a6:7e:21:b2:a6:bd:2c:f2:35:fb:3d:92:78:5e:fa:a1:cc:
3b:b7:a4:cc:a0:66:09:0c:13:7f:7e:e9:d7:55:0e:5c:89:7d:
5d:06:60:d1:7b:72:7c:58:6f:b0:09:64:0e:37:8f:91:b3:ce:
67:5c:60:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:02 2023 by rpki-client on console-fra.rpki-client.org