Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/I7bx9e7uIWh2T65g6pu_N0Xm-UA.roa
File: I7bx9e7uIWh2T65g6pu_N0Xm-UA.roa (raw, json)
Hash identifier: PKg69Up2K2/08YO2NE1tV9ks4/lRhJ7GQyrkjr21C4k=
Subject key identifier: 23:B6:F1:F5:EE:EE:21:68:76:4F:AE:60:EA:9B:BF:37:45:E6:F9:40
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/I7bx9e7uIWh2T65g6pu_N0Xm-UA.roa
Signing time: Thu 15 Sep 2022 02:53:20 +0000
ROA not before: Thu 15 Sep 2022 02:53:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.194.254.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=23B6F1F5EEEE2168764FAE60EA9BBF3745E6F940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:36:06:af:63:57:f9:04:52:86:ef:d4:85:1b:
c7:65:87:6b:4e:f2:6e:4b:c9:c0:3f:55:76:a6:9a:
b5:1a:af:97:67:bf:31:e2:25:e3:6c:57:cf:0c:9a:
ed:c4:f3:3c:d6:4a:f2:a9:2d:83:04:ed:b0:60:57:
76:0d:02:4b:4f:bf:9b:f2:75:57:f4:cd:4c:3b:a7:
4e:a8:8d:ca:f1:98:14:ea:c0:9b:f4:47:40:c0:e7:
96:8f:40:f3:22:10:12:3b:e6:34:d9:cc:5e:c3:23:
2f:a2:3a:6f:03:6a:9a:f3:b6:29:c8:b0:ca:60:c4:
23:7c:16:e2:d5:2b:2e:cb:e1:9a:8a:f6:30:40:0c:
e4:1e:c8:53:a6:c7:90:2a:14:44:7f:25:28:3e:5e:
05:28:05:50:eb:f4:a8:08:4b:1d:12:13:ac:c5:c9:
22:45:29:cb:90:92:01:22:b9:32:19:fb:d7:90:08:
eb:1d:8c:77:87:4d:b3:7d:c1:62:fb:87:45:8b:79:
fd:b4:3a:26:e0:09:e5:9a:de:54:06:9b:e4:bc:82:
ec:0b:00:92:5e:dd:4b:cf:31:73:1b:b8:92:3b:2f:
a2:54:b5:a0:49:cc:49:50:3b:26:ea:52:08:91:d2:
9f:be:b0:5f:b6:69:47:8c:5f:85:0e:ef:58:3c:b5:
0d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B6:F1:F5:EE:EE:21:68:76:4F:AE:60:EA:9B:BF:37:45:E6:F9:40
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/I7bx9e7uIWh2T65g6pu_N0Xm-UA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.254.0/23
Signature Algorithm: sha256WithRSAEncryption
46:95:d4:7c:1d:51:61:bc:43:12:86:82:ff:57:4f:74:77:17:
35:07:52:50:ca:aa:07:f9:a6:28:df:a5:08:b9:43:ad:00:8e:
f7:f7:fe:af:9c:cf:11:b1:25:bc:ca:a9:d1:1a:77:49:36:d1:
20:e8:c5:3e:3c:f2:5b:09:0c:ea:2a:90:ec:de:50:2a:81:19:
5c:f9:72:e0:86:f6:a5:ee:08:dc:cf:58:ae:90:44:72:1a:af:
a1:98:d3:11:31:4f:7b:33:e0:1b:d6:bf:29:1c:ca:63:c9:99:
da:9b:12:9f:ee:c2:fa:9a:b0:e5:60:ad:04:ba:2a:73:76:64:
4d:37:9f:62:fa:7d:dc:7d:57:a4:3a:42:95:64:24:b8:00:8e:
bb:6b:71:11:07:dd:21:d0:52:02:5b:1f:7f:d4:84:c2:2e:ca:
03:38:b8:a8:87:84:34:ee:2e:d9:7a:fe:d0:14:24:68:a7:af:
28:0e:bc:8b:68:50:e9:b5:67:8d:27:a1:25:b8:fe:b2:29:3c:
d0:92:a2:96:84:54:45:f8:cc:d9:17:97:07:98:13:56:ee:b0:
6b:05:8a:c4:fb:e2:02:78:2a:73:c6:df:70:10:18:9c:08:b1:
b9:14:4f:4b:aa:28:41:6d:32:a2:ff:49:dc:69:c3:a1:46:de:
01:b5:2e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:15 2023 by rpki-client on console-ams.rpki-client.org