Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GnGo7OX5GOfXjusA5NDpr9gl4Kk.roa
File: GnGo7OX5GOfXjusA5NDpr9gl4Kk.roa (raw, json)
Hash identifier: bvdPv6+iRoJa4yFa7PgweVjZBVPuC3ibkwFNM+aJc1A=
Subject key identifier: 1A:71:A8:EC:E5:F9:18:E7:D7:8E:EB:00:E4:D0:E9:AF:D8:25:E0:A9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GnGo7OX5GOfXjusA5NDpr9gl4Kk.roa
Signing time: Thu 15 Sep 2022 02:44:38 +0000
ROA not before: Thu 15 Sep 2022 02:44:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.136.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1A71A8ECE5F918E7D78EEB00E4D0E9AFD825E0A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:b8:5a:05:97:a4:37:85:58:84:1a:a6:00:
1e:f3:b4:32:3f:e8:7e:eb:0c:33:8c:db:74:82:6c:
17:80:0b:2f:81:c3:b7:1a:1c:76:4f:53:78:c7:a4:
20:17:fa:eb:89:18:b9:fb:77:46:0f:ee:8b:15:2d:
f9:50:6b:61:93:6c:42:af:3e:27:dc:f8:85:b5:fe:
b4:f0:7d:f5:42:96:8d:4a:a5:9f:02:93:b5:35:85:
29:a4:03:1c:9a:69:e5:03:60:ae:7d:39:57:20:a4:
5c:92:67:1d:8e:b1:d5:9d:b8:d1:82:34:e7:52:df:
10:bf:04:8a:74:6b:20:64:c0:80:f1:73:35:b1:fc:
cd:af:cd:32:8a:61:99:5c:50:d8:3e:b0:20:f0:fc:
6c:b2:4d:e0:06:53:b4:a0:6f:5d:24:d0:48:f7:5d:
cf:63:ec:4d:3b:33:b2:45:93:f4:35:fc:a6:56:ea:
df:d9:bb:8f:fc:a4:cf:89:97:4e:17:54:60:e8:36:
4d:bc:b7:32:53:46:b3:f2:72:f9:3c:11:ba:d7:4d:
1c:a0:62:e3:3c:c7:83:3e:bb:38:8a:d6:4d:0f:f0:
8f:7f:ad:43:b8:4e:68:fe:dd:74:86:73:9c:bb:13:
07:b7:27:65:6d:42:5d:14:76:9a:de:d1:94:85:82:
c6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:71:A8:EC:E5:F9:18:E7:D7:8E:EB:00:E4:D0:E9:AF:D8:25:E0:A9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GnGo7OX5GOfXjusA5NDpr9gl4Kk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.136.0/21
Signature Algorithm: sha256WithRSAEncryption
99:c5:45:13:a6:76:c5:6d:7d:d0:75:96:ee:cc:6c:66:e5:52:
f0:bd:23:23:10:51:75:b5:94:bc:cb:20:b0:c3:f3:5a:a7:84:
23:b3:a3:3c:ae:79:16:69:4f:5c:5f:65:85:c2:b4:ea:0f:c2:
7e:d5:91:ae:03:02:ce:47:4d:03:0e:8a:fe:9c:61:a1:7a:f9:
a5:15:bd:41:d5:a4:f1:b9:0b:a6:7c:1e:76:72:78:42:06:f8:
58:18:b2:02:65:2d:d9:7c:0a:68:ef:1b:5e:f4:c5:fb:67:b5:
31:c6:f4:e7:05:c4:8b:cb:cf:cb:aa:e8:02:cb:77:3f:0e:08:
5a:b2:a0:49:ed:74:30:a6:74:e9:13:2b:8d:ac:0b:31:4f:49:
7c:3a:10:cb:2e:b4:ab:1c:47:73:ae:3e:34:d6:98:ac:9a:70:
4a:7a:cd:cf:7e:61:91:52:c8:64:c5:ca:ac:f9:28:8a:f4:6e:
17:3d:6d:6d:36:1b:a8:cd:59:b5:ad:95:28:13:f9:0c:2c:2d:
98:57:ac:28:5e:85:0d:a5:a6:96:f2:e8:2d:30:a8:32:23:99:
67:e7:3a:9e:da:ca:ee:f0:79:d8:6d:13:27:29:cf:0c:a7:48:
cc:15:b6:61:cb:85:3d:8e:38:b8:ad:ff:95:59:46:aa:d6:ec:
a5:7f:a3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:15 2023 by rpki-client on console-ams.rpki-client.org