Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IbLwGVAPvAT8-ypVactRMaoMJS4.roa
File: IbLwGVAPvAT8-ypVactRMaoMJS4.roa (raw, json)
Hash identifier: iaTaWQXevMy3M3FQJ5NlyOdfE4jVM1uwfp4zzWfdhyY=
Subject key identifier: 21:B2:F0:19:50:0F:BC:04:FC:FB:2A:55:69:CB:51:31:AA:0C:25:2E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IbLwGVAPvAT8-ypVactRMaoMJS4.roa
Signing time: Thu 15 Sep 2022 02:53:05 +0000
ROA not before: Thu 15 Sep 2022 02:53:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=21B2F019500FBC04FCFB2A5569CB5131AA0C252E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:d8:cc:82:cb:4c:a8:0c:7c:06:47:d3:c7:
59:71:76:81:56:73:dc:56:eb:46:7f:17:1a:46:7a:
4b:3d:d2:74:fb:13:37:1d:77:3d:34:35:c0:23:19:
13:56:7c:5e:74:de:62:d3:8d:2f:16:95:ea:c0:f1:
1e:f7:ee:a7:00:0b:19:23:e8:40:66:6c:5e:ec:15:
39:4e:69:08:59:cb:68:bb:98:84:ec:85:f6:a3:fe:
c7:87:64:60:a9:26:84:c2:dd:94:d2:62:6c:74:98:
1b:8c:92:75:ac:ec:51:87:29:5a:73:a6:d4:02:1a:
37:0a:76:05:75:de:b2:97:87:6e:df:dd:e4:c0:89:
4a:07:27:34:42:91:ce:fc:b1:5e:f6:ce:92:c6:3f:
09:92:1d:08:84:45:d2:fe:54:45:cf:ee:d3:51:68:
19:14:f9:5c:e7:97:89:95:eb:3d:51:2b:6c:0d:82:
b8:2c:89:33:10:e5:2c:63:47:7c:0b:ab:37:11:75:
fb:45:37:d0:0b:71:bc:01:9e:fe:c6:5b:f5:e0:2d:
d6:45:c5:83:a8:3f:00:7c:30:a5:78:28:8d:b4:bd:
e4:bf:24:03:89:5e:ad:05:5f:9b:97:2f:a7:17:a9:
6f:b0:51:8e:d8:af:d3:41:55:6f:e6:e5:28:d1:4d:
fb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B2:F0:19:50:0F:BC:04:FC:FB:2A:55:69:CB:51:31:AA:0C:25:2E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IbLwGVAPvAT8-ypVactRMaoMJS4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.0.0/16
Signature Algorithm: sha256WithRSAEncryption
94:6b:f8:e6:5b:96:9d:d8:e1:54:40:85:d0:79:92:b3:77:92:
36:d4:6c:b7:3c:1b:15:f0:0d:5f:23:a8:01:e9:45:77:e6:c1:
27:f2:eb:5a:9b:75:50:22:d8:c9:5a:cc:df:0a:db:56:66:8d:
bd:47:cc:fa:bb:c4:19:ec:41:84:b9:a5:5a:dc:e2:dc:dd:47:
47:4e:56:e2:53:73:58:00:ba:12:71:bd:1e:5c:47:2d:ea:93:
5d:25:a7:c9:fe:42:3f:3b:c7:d4:b8:b0:c9:41:ac:b6:8a:66:
6b:13:06:80:f5:be:24:3b:70:62:60:66:42:db:b2:a7:a8:37:
e2:29:e9:c5:00:ca:9f:bd:9d:cc:90:bb:b2:7c:b1:ff:ea:b2:
fa:30:44:5e:33:93:30:f7:e4:a1:c1:d2:3f:aa:39:15:89:23:
de:63:57:e9:cc:c4:89:40:6e:9a:7a:01:48:3f:14:95:1f:5c:
1c:8b:08:4a:07:84:9e:33:fa:fe:7c:85:c3:09:a2:17:70:b1:
c0:76:54:5a:c0:09:ca:04:7b:e3:9e:9b:38:55:88:7a:a8:ac:
ee:50:44:3d:fb:6a:fe:de:8d:e3:36:3b:7f:0e:f3:96:35:d7:
6c:42:94:0e:79:7d:a1:30:e1:3c:ab:7e:7f:27:3b:9e:34:be:
99:b1:7b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:16 2023 by rpki-client on console-ams.rpki-client.org