Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KCWiTRkCmkA3KYtCN2YUv91YXqM.roa
File: KCWiTRkCmkA3KYtCN2YUv91YXqM.roa (raw, json)
Hash identifier: /OtbMUwOy09HtUksU7Aq6LySyrFqJ2fE1dvLoYjqj3U=
Subject key identifier: 28:25:A2:4D:19:02:9A:40:37:29:8B:42:37:66:14:BF:DD:58:5E:A3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KCWiTRkCmkA3KYtCN2YUv91YXqM.roa
Signing time: Thu 15 Sep 2022 02:45:09 +0000
ROA not before: Thu 15 Sep 2022 02:45:09 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.118.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:09 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2825A24D19029A4037298B42376614BFDD585EA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:b4:e1:7c:f0:1d:cb:f5:87:f0:bb:1d:c5:
61:e7:85:ce:1a:c3:2a:7e:34:03:ff:12:33:b8:fa:
fb:d8:12:ae:91:b6:9d:ef:88:f2:5c:6e:e9:42:25:
e5:69:eb:94:bd:ce:40:b5:4a:80:3a:52:f4:05:2d:
f1:55:41:fd:e9:cb:85:92:40:85:90:a7:3e:08:15:
ac:f8:10:e1:f3:c5:5c:1f:37:8f:86:bb:85:c1:d6:
e0:5c:67:00:70:2e:c6:48:e2:db:1d:51:76:8d:90:
d1:ea:2d:f5:b0:57:16:be:a4:32:82:71:6f:69:1e:
5d:25:31:e7:df:45:fd:42:53:a3:b6:0e:9a:f0:61:
ef:12:36:dd:60:08:9a:fa:e9:0b:40:b6:d4:2f:65:
4b:0d:5b:8f:8b:af:6f:59:14:df:80:eb:e8:f9:b6:
13:fb:e2:09:d9:3f:98:8a:de:af:28:31:2d:75:20:
a5:4f:ff:c7:86:f8:6c:df:e9:7c:85:95:84:24:a5:
ec:76:1b:45:e6:e7:fb:3e:7e:a2:f3:09:91:09:f0:
1d:ed:83:0c:c0:11:9d:52:90:e0:71:28:9e:89:eb:
d8:e3:92:5d:85:9b:75:64:ff:e9:aa:bc:1b:56:98:
be:ed:72:46:6c:12:a9:fe:92:a1:78:8d:95:2b:04:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:25:A2:4D:19:02:9A:40:37:29:8B:42:37:66:14:BF:DD:58:5E:A3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KCWiTRkCmkA3KYtCN2YUv91YXqM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.118.0/23
Signature Algorithm: sha256WithRSAEncryption
74:fd:75:20:5e:1b:5f:7b:7a:12:62:01:a7:9a:e0:88:c9:1b:
fe:28:b4:e9:7a:f1:a8:16:41:49:4a:aa:31:52:d3:4b:35:78:
95:4e:40:97:f2:58:36:a7:7a:6f:4c:7d:16:95:26:49:a8:29:
ad:a8:f7:23:26:f3:98:5d:a7:08:1c:0f:d3:4f:6d:40:5f:8c:
01:e6:1e:f2:68:e4:9d:93:85:21:36:da:64:21:51:7b:7e:d1:
a4:09:11:8b:20:51:51:5e:ce:2b:9c:0d:4d:1c:6a:10:04:63:
c7:24:ac:8a:03:e4:6b:3a:ff:23:ef:3e:c7:0f:85:e0:61:18:
ac:2d:e8:a4:09:91:48:8a:87:6f:33:f6:48:c4:35:92:3a:fd:
48:fb:0f:1f:6f:f7:b1:2b:6e:ec:96:5a:bf:4d:e8:82:88:e1:
95:1d:2e:a5:58:5b:14:03:1e:f6:1e:ce:b3:1a:dd:aa:3c:86:
d7:f6:69:08:79:f3:8b:89:a0:d4:99:f0:fd:f0:a9:d5:19:18:
2d:e8:61:92:d1:be:c4:b4:3b:3d:97:2d:f6:18:32:ed:2b:d2:
83:3b:bc:5c:62:f9:53:33:0d:1d:80:c4:89:ce:6c:08:92:61:
2c:ed:95:58:84:8b:c9:ef:3c:a8:11:a2:94:94:d3:91:30:63:
8c:a4:7d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:16 2023 by rpki-client on console-ams.rpki-client.org