Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IgLGFDZczBEL8XZ39FAEMeF6c0A.roa
File: IgLGFDZczBEL8XZ39FAEMeF6c0A.roa (raw, json)
Hash identifier: gVTQBq3/7//ek0Fq50x2H7hGUHPog9/OaXN/8FdUjqg=
Subject key identifier: 22:02:C6:14:36:5C:CC:11:0B:F1:76:77:F4:50:04:31:E1:7A:73:40
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2210
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IgLGFDZczBEL8XZ39FAEMeF6c0A.roa
Signing time: Fri 25 Nov 2022 04:40:43 +0000
ROA not before: Fri 25 Nov 2022 04:40:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.56.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8720 (0x2210)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2202C614365CCC110BF17677F4500431E17A7340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:25:56:d6:5d:47:ff:5b:18:a2:1f:39:a9:ce:
de:e3:c5:22:fc:a8:9a:18:8d:11:ae:ba:80:33:08:
b1:e5:fd:7e:44:a2:d9:60:03:fc:ab:56:13:b0:d0:
25:88:d1:7d:de:10:3a:36:6c:47:8a:b2:6c:91:5c:
63:47:7e:dc:db:06:33:1d:5d:53:2f:fe:c0:eb:41:
d5:2a:f0:04:d4:de:a8:e2:7a:6b:aa:14:2a:07:0b:
d4:d9:a5:70:20:4d:8b:be:3d:6d:bd:40:21:e8:0e:
22:7a:c7:a3:ec:9a:b9:bc:e3:ee:2e:63:d0:f4:21:
cc:e8:95:24:c9:ff:6c:81:ef:d2:af:1c:3c:36:8c:
a8:a7:83:a0:f0:ea:59:f1:0f:58:4e:0a:e8:4c:6f:
83:90:c7:f6:e2:91:8b:a4:7d:85:5c:c6:c2:5e:c9:
39:42:c4:9d:95:eb:ae:44:1b:dd:89:b2:96:7c:cf:
3c:4c:70:24:3a:02:70:2a:e1:9f:9a:d0:f0:e7:3c:
c1:46:94:7d:27:ad:8c:d8:f1:76:d5:a6:13:ab:7a:
1d:3f:2d:22:b0:87:d7:15:0a:01:d8:69:64:58:ce:
34:ae:ed:96:1d:5a:c7:78:3c:3a:e6:c6:09:c2:59:
86:03:e4:07:21:26:37:e4:d2:b5:77:f7:ab:90:1f:
9c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:02:C6:14:36:5C:CC:11:0B:F1:76:77:F4:50:04:31:E1:7A:73:40
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IgLGFDZczBEL8XZ39FAEMeF6c0A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.56.0/22
Signature Algorithm: sha256WithRSAEncryption
64:95:1f:58:78:a9:d8:24:86:02:ce:ca:dd:42:4b:9e:ba:d4:
8c:b3:aa:18:6f:27:98:d3:df:60:e9:e2:86:24:3e:a8:1b:37:
bd:53:3e:b6:7e:b8:d7:b1:fe:3b:0c:30:12:a0:cb:c6:0d:c7:
0b:07:38:20:e9:f9:e5:10:3b:30:ea:cb:c1:c2:56:f2:92:53:
4d:d8:ed:2e:09:63:56:b4:83:24:51:76:1a:2f:07:ba:9b:23:
da:3b:e2:fd:28:bb:25:87:d6:7d:e8:9d:1a:23:38:93:6c:5f:
79:0d:4e:d2:54:be:29:6d:c0:4e:d2:47:a2:e7:97:fe:5c:31:
af:2f:7f:34:2f:f4:4e:84:79:8e:fa:b8:b7:05:03:95:19:9a:
69:ed:dc:62:74:0a:d0:3f:8c:c9:ec:7e:f6:b5:49:2a:0a:3f:
71:15:b8:f2:c0:9d:4c:89:eb:e8:cb:29:bd:c1:3a:d3:4f:c7:
70:c7:cb:62:30:67:a8:5d:21:a1:c0:67:a6:ca:ae:97:9f:cf:
c6:32:b1:9f:f2:06:93:c6:76:c5:27:9d:5a:fc:07:db:5b:bb:
3b:67:26:04:e3:10:ea:06:54:8d:27:20:6b:f3:af:ca:ac:78:
35:77:78:d2:da:b9:fe:6a:a6:fa:3a:09:6c:8a:aa:50:36:9c:
b3:d5:4f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:03 2023 by rpki-client on console-fra.rpki-client.org