Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K2LQVWSRVBNBthYV80-v1hxjyso.roa
File: K2LQVWSRVBNBthYV80-v1hxjyso.roa (raw, json)
Hash identifier: jmR7mlwcyOvXU64aWPQwkhe22rObWAaVo+LKMi/831E=
Subject key identifier: 2B:62:D0:55:64:91:54:13:41:B6:16:15:F3:4F:AF:D6:1C:63:CA:CA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 238C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K2LQVWSRVBNBthYV80-v1hxjyso.roa
Signing time: Fri 16 Dec 2022 03:57:50 +0000
ROA not before: Fri 16 Dec 2022 03:57:50 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.196.0/22 maxlen: 27
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9100 (0x238c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Dec 16 03:57:50 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2B62D0556491541341B61615F34FAFD61C63CACA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:78:2a:77:bd:38:e9:a3:b3:d5:de:a4:d8:
17:50:68:53:b8:33:68:44:b4:04:19:94:6c:a7:1f:
17:39:2a:85:a0:e4:d1:1e:73:bb:31:18:d0:58:51:
0e:02:20:3a:3a:24:c4:be:cc:fb:ca:f6:d2:be:bb:
48:39:7d:86:2a:cf:16:0e:29:0d:76:e2:ff:47:b0:
68:07:7d:30:ce:80:8b:6b:77:a2:73:85:19:bc:dc:
e1:21:89:ba:1c:60:de:22:ae:27:06:6b:20:63:1c:
47:51:be:50:a6:eb:89:9c:62:03:77:84:8e:fd:80:
6b:9b:b3:54:13:24:81:b6:89:5d:02:8b:d2:a2:8f:
ef:8c:cd:9d:b7:f3:8b:a1:01:83:f7:a2:ae:f0:03:
c3:34:61:bb:ad:9f:bc:94:16:30:1b:8a:24:4b:5b:
ec:f3:ea:65:b9:8d:d1:ca:26:2f:27:61:f8:f8:0e:
89:f5:54:ef:01:d6:b7:8f:84:18:4a:57:9c:15:e9:
61:1e:7e:d5:ba:4f:1c:6d:46:4c:8c:00:28:c0:b6:
6c:33:37:14:ab:03:06:92:4a:ae:77:16:50:8b:17:
d3:30:96:2b:bd:c3:e3:75:4a:2c:a9:0b:b2:3b:14:
2b:d7:af:bf:99:d0:60:46:d9:69:c8:33:49:18:9a:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:62:D0:55:64:91:54:13:41:B6:16:15:F3:4F:AF:D6:1C:63:CA:CA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K2LQVWSRVBNBthYV80-v1hxjyso.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.196.0/22
Signature Algorithm: sha256WithRSAEncryption
12:df:f5:cc:7b:1e:f0:7e:30:e3:16:fc:7e:fd:2e:4d:9a:f9:
6f:a7:a5:e2:9d:5c:94:21:a1:8c:76:f8:62:53:26:fb:09:53:
5f:92:bc:9c:ed:0f:dc:3f:ea:71:f6:04:98:06:0c:09:1d:b1:
49:47:0d:3b:f3:9f:56:bb:e8:9d:d1:92:87:b8:34:ad:5b:e6:
54:f7:20:3f:6e:86:58:ed:10:d4:7c:8c:aa:0b:a6:74:f0:4f:
65:9c:f2:cf:4e:75:bc:f5:0f:b5:00:e6:0c:57:91:7d:ea:95:
17:60:27:56:95:0f:c9:d5:3b:4d:e1:78:d8:8c:48:ae:61:a1:
cb:0c:8e:69:a5:e9:eb:f2:09:dc:46:aa:a1:c8:40:40:cd:ec:
69:f8:7d:fb:8e:fd:9e:07:80:cf:20:20:cd:1b:36:9e:e0:8a:
52:3f:17:2c:fe:07:a1:8c:18:bc:46:97:76:92:ec:28:a1:bb:
ca:1a:0f:4e:72:d1:3d:24:b5:04:73:54:c3:95:15:4e:3f:73:
6b:ef:1b:10:d7:58:35:8b:25:5a:01:4b:70:fe:33:58:50:f1:
66:51:db:47:b1:9c:94:a1:a5:b0:03:69:a7:f5:47:cf:7d:f3:
10:c0:71:71:de:18:f4:52:0b:f8:06:9c:0a:95:28:1c:53:3d:
2c:10:cb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:03 2023 by rpki-client on console-fra.rpki-client.org