Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L-9WYxj4WSUJmYa3DI4gAxCNlYs.roa
File: L-9WYxj4WSUJmYa3DI4gAxCNlYs.roa (raw, json)
Hash identifier: k3B+RAajuoLgytP1FwopQ9/nnt+9Pwl9/HI9OTYnP5k=
Subject key identifier: 2F:EF:56:63:18:F8:59:25:09:99:86:B7:0C:8E:20:03:10:8D:95:8B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20B2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L-9WYxj4WSUJmYa3DI4gAxCNlYs.roa
Signing time: Fri 25 Nov 2022 04:39:00 +0000
ROA not before: Fri 25 Nov 2022 04:39:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8370 (0x20b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2FEF566318F85925099986B70C8E2003108D958B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0d:97:c7:ef:b9:ad:6c:5b:cd:45:4e:e1:16:
58:f6:0f:9e:11:f4:08:77:6a:f8:ee:69:c0:05:88:
84:fc:ba:6a:3c:43:2a:98:8c:62:40:dd:df:65:95:
09:c0:64:44:c0:3e:cf:40:c6:e7:20:ca:9f:08:29:
e2:fb:4f:a4:ff:d4:2b:f9:1a:db:00:0e:32:d2:ed:
3a:99:4c:62:80:62:0d:f3:23:51:43:38:1e:38:de:
fd:8a:92:39:52:15:89:b0:cc:6a:1e:d2:d1:03:ee:
1d:a6:36:e1:08:b7:f7:f6:f1:d2:5e:6d:99:dc:e0:
c8:9b:07:83:67:45:53:f6:66:c7:c9:d8:41:40:df:
8c:df:8d:d3:dc:af:c2:46:cb:2e:32:cb:e5:b9:2d:
f4:54:25:15:83:20:18:1e:d6:06:47:a5:35:d9:03:
f2:fd:d8:1f:72:a6:c9:9c:df:be:34:ca:d5:0a:bf:
c8:8b:93:16:ab:0f:27:bf:ef:e0:56:2b:ee:86:a6:
f0:83:b7:7e:e5:8f:67:d2:e0:2c:ac:5a:2b:8e:10:
d0:0b:0a:49:fa:99:fc:64:5f:c9:a4:4e:8d:9b:3c:
90:1d:f0:c3:18:26:39:02:63:54:41:22:1a:45:23:
a6:1b:34:23:e9:f4:24:f6:4a:74:46:06:82:0b:fb:
bb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EF:56:63:18:F8:59:25:09:99:86:B7:0C:8E:20:03:10:8D:95:8B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L-9WYxj4WSUJmYa3DI4gAxCNlYs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.246.0/24
Signature Algorithm: sha256WithRSAEncryption
36:6c:0e:8c:00:f9:f7:bb:13:a2:0f:6f:75:92:5e:45:28:c4:
ee:55:08:6e:35:55:f7:77:b6:47:bb:6e:58:8f:b5:d5:13:df:
a3:a9:50:8a:7b:94:2a:ee:e5:42:ac:76:95:e3:85:a0:2c:24:
91:c2:46:1f:8d:47:4c:79:36:d3:3b:89:a4:89:3a:7f:4c:b1:
11:d3:1e:6f:be:97:6f:fc:55:8c:b3:cc:a0:5f:86:0a:c6:93:
e9:c2:5b:d5:8d:b9:5a:a7:78:fb:f3:eb:15:cd:7a:47:2a:d1:
67:71:01:10:20:d2:57:0e:bc:1f:a0:7b:12:c3:54:ba:3a:c3:
49:6f:2d:41:9e:82:83:d0:d0:8a:2d:56:f9:0a:af:c6:1f:93:
6f:96:8d:16:2c:66:45:75:81:4e:9b:79:19:1e:9c:69:97:ef:
37:59:5e:a9:7c:5d:06:03:72:aa:6b:5e:bf:1c:77:1d:ec:a1:
db:39:1d:40:9a:c6:b0:1e:83:81:d1:4d:9b:2f:98:82:8c:01:
a1:6c:52:7d:6c:2f:de:8f:32:a0:56:53:ec:1a:7d:10:23:2f:
97:4b:61:4a:16:cc:92:1c:4e:b5:86:ff:ab:08:4c:99:c7:d3:
04:27:1b:4b:58:32:3c:07:64:45:91:23:10:b1:c4:25:86:43:
09:7b:bd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:03 2023 by rpki-client on console-fra.rpki-client.org