Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KWAWqj43hV0BCSmrCBBtukEmxt0.roa
File: KWAWqj43hV0BCSmrCBBtukEmxt0.roa (raw, json)
Hash identifier: xylHY7Dy/WjmMhwBHX3GjvA9ZWhvS4/4Cy9FWWxIngY=
Subject key identifier: 29:60:16:AA:3E:37:85:5D:01:09:29:AB:08:10:6D:BA:41:26:C6:DD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KWAWqj43hV0BCSmrCBBtukEmxt0.roa
Signing time: Thu 15 Sep 2022 02:53:38 +0000
ROA not before: Thu 15 Sep 2022 02:53:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.184.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=296016AA3E37855D010929AB08106DBA4126C6DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:d6:fd:cc:eb:a5:cb:6d:2e:fd:cd:41:c2:
d8:9a:fb:4b:2e:30:e1:af:fc:c2:c0:b2:5d:7b:fd:
d9:cf:d1:bd:58:6b:97:2c:23:e4:81:c2:6b:09:b0:
80:5f:fe:00:a8:47:30:55:6f:3b:d0:e0:fb:85:90:
75:64:8d:0b:fb:0f:72:6b:ed:ae:d8:83:01:78:d8:
62:70:8f:36:ca:82:8b:eb:40:81:ab:ab:76:3a:20:
fe:64:50:a2:01:fc:57:f1:44:58:20:c4:ba:27:4b:
62:da:13:4b:5b:ed:3d:bd:bf:a8:e6:1c:6a:5b:93:
53:c7:76:7e:77:65:54:3c:34:e5:ed:da:44:b5:d5:
d2:7f:d9:3d:2c:8a:52:5a:e6:fb:16:30:f0:72:c3:
8a:04:69:8f:ee:62:be:de:39:1c:64:dd:d2:68:c3:
2b:fc:a3:cd:ca:c4:da:37:fd:2b:f5:c8:d7:6e:f5:
e9:e4:94:60:32:e1:03:5e:7a:7c:fe:54:99:aa:3a:
c7:8e:61:ce:b1:2e:41:ea:5d:0a:21:31:2d:fa:ea:
af:83:92:a9:d4:0f:fe:e6:b0:cc:41:90:48:56:2c:
34:35:ed:ee:50:c1:f9:0d:af:ac:dc:52:53:de:a1:
02:06:5c:82:40:33:29:59:9b:c1:68:3a:6a:18:85:
01:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:60:16:AA:3E:37:85:5D:01:09:29:AB:08:10:6D:BA:41:26:C6:DD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KWAWqj43hV0BCSmrCBBtukEmxt0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.184.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:df:fd:b1:ab:80:99:b5:03:cb:38:8a:2b:83:97:ef:9f:a8:
79:90:19:fb:61:71:76:fe:f5:23:3f:22:80:e5:fe:87:ff:26:
38:31:c6:44:60:3a:ea:6a:a4:01:cf:15:44:ba:2c:19:84:84:
d5:7a:4a:6d:21:bf:1c:6b:63:bf:92:2a:9c:17:8d:f9:1b:f2:
ae:a2:47:06:cb:24:99:55:ac:3f:06:6a:e6:2e:e2:5d:56:c2:
a9:52:fd:6b:5d:3d:c3:84:f7:2c:b8:24:73:e6:ab:fc:ed:39:
44:fa:12:85:93:5c:73:88:ec:6a:d3:6b:7d:34:54:7e:8a:25:
91:bf:b3:db:87:a2:6e:2e:ca:2b:a0:68:71:0e:43:41:97:54:
05:43:0c:70:11:00:f9:15:8c:ef:e4:68:84:d2:f1:56:14:3a:
68:5d:46:02:4f:e4:2e:ef:bf:7b:5f:77:ad:98:1a:c4:cd:5e:
39:5a:61:a7:46:3b:54:1e:d5:ea:b5:d0:1e:09:4a:d7:3c:c9:
c3:dc:41:b4:07:fe:39:79:61:e5:b1:06:bd:bf:3e:35:66:b1:
b1:32:a5:00:d0:59:8d:8a:e2:41:06:5d:3c:e6:e1:ab:09:c0:
b7:f5:55:ee:27:e6:31:d2:ef:20:f1:95:05:dd:8f:34:b3:84:
f2:c5:f5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:16 2023 by rpki-client on console-ams.rpki-client.org