Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J8hNaqSfLD2vl_7tYOvtxbP0i_8.roa
File: J8hNaqSfLD2vl_7tYOvtxbP0i_8.roa (raw, json)
Hash identifier: EwJ/Af7YUPRsCqxys9xvD+Zm5Ahpw0tZ58ScZkl7S6w=
Subject key identifier: 27:C8:4D:6A:A4:9F:2C:3D:AF:97:FE:ED:60:EB:ED:C5:B3:F4:8B:FF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J8hNaqSfLD2vl_7tYOvtxbP0i_8.roa
Signing time: Thu 15 Sep 2022 02:53:54 +0000
ROA not before: Thu 15 Sep 2022 02:53:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.56.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=27C84D6AA49F2C3DAF97FEED60EBEDC5B3F48BFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:03:ab:ce:55:f1:c8:09:d5:86:d8:66:1d:ff:
bc:3b:f1:50:26:c6:09:f9:db:c2:9f:97:4c:29:dc:
15:f9:70:54:3f:02:a4:bb:de:bb:d3:f5:b2:e2:79:
37:73:81:9b:58:32:9a:d1:f9:f3:17:2f:7f:34:dc:
02:3b:43:60:5c:f4:80:04:d4:01:0d:81:a0:57:80:
f6:3d:b6:26:cf:6c:ee:51:15:f5:42:e8:df:f9:eb:
81:50:8e:a7:3d:42:6a:0a:11:49:eb:d8:90:0e:70:
a4:c3:dd:71:7e:0f:7c:95:41:17:54:01:e3:b0:c0:
18:02:25:69:a1:6d:c7:c3:aa:63:8e:83:5f:2f:b4:
88:d0:40:de:73:6c:a2:b0:0c:7f:d1:5e:00:95:c0:
c5:22:29:53:90:4f:51:85:e5:1f:cf:81:5d:54:62:
7e:da:41:3f:8f:c3:18:2b:b8:31:11:94:ca:53:7d:
e7:e7:2c:e8:f4:bf:8b:4a:f6:85:08:0e:ec:cf:77:
17:ec:cf:2c:7b:0d:72:14:d2:b4:22:2a:bf:55:7a:
8d:9e:e1:43:ae:f9:22:c9:06:ed:54:c9:3a:bb:37:
13:bb:d5:d3:63:3d:8e:43:04:e8:ae:77:e2:c4:21:
a8:08:71:db:84:1b:23:4f:a9:20:19:2f:1e:e3:89:
09:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C8:4D:6A:A4:9F:2C:3D:AF:97:FE:ED:60:EB:ED:C5:B3:F4:8B:FF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J8hNaqSfLD2vl_7tYOvtxbP0i_8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.56.0/21
Signature Algorithm: sha256WithRSAEncryption
37:8d:51:ee:02:49:b8:2c:df:38:ad:05:4c:59:9c:28:1c:ab:
9a:a5:08:63:56:99:de:ce:db:14:29:62:0a:b2:13:01:25:9f:
64:c8:01:90:ab:ee:47:2b:78:90:68:ce:33:d2:12:4a:78:77:
11:2a:d4:fa:1d:a5:fd:09:e0:47:da:a4:81:e6:85:39:b2:7f:
d1:a0:e0:16:6c:57:bb:88:c1:f4:48:04:73:e4:7b:ee:e7:3e:
0e:a6:0a:56:73:5a:6d:95:fa:7a:9f:88:1d:47:17:5a:1d:8d:
fd:b8:3a:69:ff:e5:52:48:a3:18:6b:d1:ec:29:37:f0:3a:aa:
a8:c7:b1:b9:0f:f2:5c:e5:52:d6:d7:b5:a3:85:73:af:b8:a8:
27:25:d2:17:6c:c0:9e:f7:75:a3:45:39:a6:cb:92:3e:1b:77:
04:ba:94:99:cb:fa:fe:a0:cd:07:94:0e:b2:7d:17:ef:8c:15:
99:7f:88:75:39:4d:04:a6:ad:d8:ff:44:92:45:11:5a:b3:cd:
2a:99:3a:5c:e5:13:8e:7a:d5:f2:17:8e:e0:a4:62:2d:f4:13:
75:c4:23:0f:ee:4d:74:e6:78:35:b2:d2:65:51:6c:b4:ee:4a:
69:82:2b:3a:50:4a:78:e9:68:63:80:40:68:af:29:34:f7:69:
72:98:ac:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:26 2023 by rpki-client on console-fra.rpki-client.org