Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IA77vn9acCuywGCN6JKMmuXTp9A.roa
File: IA77vn9acCuywGCN6JKMmuXTp9A.roa (raw, json)
Hash identifier: GLNwx/0TFyFpOJXFOu0CrAqduykXbzUBabziCVRlHCU=
Subject key identifier: 20:0E:FB:BE:7F:5A:70:2B:B2:C0:60:8D:E8:92:8C:9A:E5:D3:A7:D0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2049
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IA77vn9acCuywGCN6JKMmuXTp9A.roa
Signing time: Fri 25 Nov 2022 04:38:32 +0000
ROA not before: Fri 25 Nov 2022 04:38:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.72.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8265 (0x2049)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=200EFBBE7F5A702BB2C0608DE8928C9AE5D3A7D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:48:d7:ee:83:1c:86:ec:d7:14:3a:f0:c4:
9c:86:25:a9:f6:6c:12:8b:48:3d:ce:bb:9c:08:63:
db:90:6c:a2:12:e2:d5:46:ca:aa:ac:f7:34:a1:f3:
44:3e:02:ba:18:42:ae:75:b3:d9:c6:9f:e2:fc:30:
79:97:44:d1:f5:8b:50:a1:d0:e6:5b:43:fb:23:25:
a7:e2:b6:0a:ed:18:65:62:58:6a:58:8e:08:bb:c5:
3b:fb:08:ed:37:6e:c0:c3:82:59:a4:9c:15:98:97:
cd:1d:d3:09:6b:90:70:c2:9f:28:92:7d:1e:15:b1:
91:a8:83:27:df:3b:ab:1f:9d:be:30:a8:0d:62:21:
66:44:7a:95:75:57:8d:0d:c1:58:de:58:9a:1b:11:
3f:b8:9b:07:aa:34:ad:b6:27:1f:f5:a0:8b:21:05:
69:34:9d:8f:3d:90:75:54:b4:c8:52:00:7a:72:b2:
11:f4:05:f7:a8:f4:3c:04:87:8d:25:85:d2:c2:db:
62:4f:c5:37:78:8a:00:e1:c9:a8:42:1b:a2:90:55:
36:da:b8:d2:0d:dd:ff:b7:41:34:b6:be:1f:f4:78:
50:23:10:cb:cb:fc:8a:bb:82:e7:b0:a9:a5:d5:7a:
12:ff:4e:b3:da:12:03:09:a2:d1:a3:34:27:2d:82:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0E:FB:BE:7F:5A:70:2B:B2:C0:60:8D:E8:92:8C:9A:E5:D3:A7:D0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IA77vn9acCuywGCN6JKMmuXTp9A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.72.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:df:27:7a:3a:17:1b:14:4b:d7:d1:1b:5a:7a:c5:21:a6:d0:
96:4a:f2:b2:48:6f:46:9b:1a:1f:94:ed:0c:a3:bb:d6:ed:cb:
c3:73:4b:b3:0d:03:9c:18:6f:62:e0:a6:34:66:15:9d:ef:31:
50:f6:61:6d:c3:e3:0a:c3:8d:63:6d:a3:41:75:59:12:ec:ee:
00:c9:47:14:76:b3:ce:89:21:78:94:2f:8c:44:c2:ed:79:7b:
14:df:b4:92:1a:a9:6f:24:5f:f4:96:de:db:d2:9c:75:e4:b1:
9b:14:3b:35:7c:c7:1c:46:a7:0f:c6:a4:10:46:d9:36:fa:33:
2f:00:a2:58:6e:68:b7:b4:d4:c9:64:23:ba:50:bf:9d:ca:b8:
82:9b:fd:f8:12:a8:d6:b6:cb:a4:2d:27:39:d5:c1:16:08:9f:
70:5d:0d:03:6f:5e:d7:7d:c9:8f:f5:26:ab:47:47:0f:29:f3:
d2:92:a8:2b:f4:1c:57:b8:12:45:f0:ee:56:85:0b:cd:81:a5:
55:7b:78:ff:64:e5:73:10:f6:e5:af:96:48:91:43:d9:67:fb:
b1:0b:d5:b5:b8:25:4a:b7:96:98:14:28:67:d6:d3:56:26:d8:
c4:28:e9:75:0f:8c:59:8b:4d:48:29:a7:12:9a:b4:38:93:a2:
cf:81:7d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:24 2023 by rpki-client on console-ams.rpki-client.org