Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L00d3xwpZT7W4s6Ut_KHTU49KBk.roa
File: L00d3xwpZT7W4s6Ut_KHTU49KBk.roa (raw, json)
Hash identifier: dH/N2hGy+RkjECLqs8a+GW24NlXwgtAsms6XoiZtyD8=
Subject key identifier: 2F:4D:1D:DF:1C:29:65:3E:D6:E2:CE:94:B7:F2:87:4D:4E:3D:28:19
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2066
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L00d3xwpZT7W4s6Ut_KHTU49KBk.roa
Signing time: Fri 25 Nov 2022 04:38:40 +0000
ROA not before: Fri 25 Nov 2022 04:38:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.24.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8294 (0x2066)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2F4D1DDF1C29653ED6E2CE94B7F2874D4E3D2819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:3c:55:06:fb:09:36:17:f1:07:0a:b9:f0:
7e:b2:31:0f:3b:fe:4e:8b:4d:bc:49:fa:c3:4c:c4:
de:83:ac:0d:92:93:1b:00:30:ef:4f:49:d6:25:27:
f9:79:ef:b6:eb:fa:82:20:cd:ec:f7:44:9b:ac:7f:
e6:62:b8:5a:5d:84:35:1a:7b:b8:18:e6:9f:fc:a6:
ae:e5:3f:ea:ca:30:10:7f:5b:8e:b7:16:93:3e:5c:
28:43:38:1e:b1:22:a9:db:a7:b2:91:6e:4f:a5:e1:
a7:9a:e4:d2:a3:00:31:04:3e:53:9e:f6:35:05:8d:
26:e2:99:e2:4c:21:af:52:87:9e:b8:11:65:9f:30:
82:2b:52:84:30:5b:24:ee:a5:55:24:04:fd:73:6c:
eb:d1:78:9d:a5:66:d1:87:27:d6:00:0f:47:9f:d1:
7b:75:34:48:a8:f3:26:4c:11:c1:ab:72:38:7c:bc:
85:56:48:d8:21:cb:1d:6b:e9:18:95:98:19:80:be:
7c:b9:da:4d:1a:48:fe:5f:e8:36:c2:da:8e:e8:a8:
6b:28:a0:c1:79:ff:11:e2:a8:10:6e:28:b4:38:10:
fc:a0:ba:76:23:e1:93:ef:0d:50:8f:20:53:7e:b5:
a9:c5:d8:f7:3f:40:c0:71:a9:06:56:6e:03:83:49:
31:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4D:1D:DF:1C:29:65:3E:D6:E2:CE:94:B7:F2:87:4D:4E:3D:28:19
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L00d3xwpZT7W4s6Ut_KHTU49KBk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.24.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:89:8c:32:37:51:0c:e8:cb:e2:0d:60:25:d1:5d:59:2c:9f:
b8:42:35:4b:98:5a:c4:b7:f3:50:33:30:6f:a1:a8:1e:54:30:
41:9e:93:66:be:d4:63:8a:a4:a1:ea:b3:cd:7e:e6:5a:f9:0b:
4a:65:6c:3c:ab:f4:9f:63:44:7c:66:1e:de:d6:65:09:99:bc:
71:25:81:a0:b8:d0:1a:c6:61:a3:35:a5:e9:1e:4b:89:e1:a7:
7f:58:48:6f:50:42:c6:e3:ef:dd:d2:89:24:2e:6f:47:a2:05:
22:21:96:15:d6:16:49:a9:12:4e:7e:82:a3:b2:a5:f4:cb:be:
2d:75:f6:3a:eb:9e:a4:4f:15:d4:92:aa:3e:20:d7:9c:55:48:
e2:21:a2:93:28:3f:6a:cb:3f:a8:d2:1a:a0:e4:2a:e5:e2:01:
e8:56:5a:bd:97:85:d5:51:1d:14:59:f7:78:d9:10:d9:fa:d0:
e1:d0:af:32:b3:14:3c:4e:a5:65:4e:9c:2b:b4:c8:26:79:86:
15:03:3b:25:ef:a2:fa:89:09:41:37:d1:d7:f4:ab:39:20:f3:
2a:d5:f0:99:62:b0:0f:e4:4c:e2:dc:ae:0d:8a:36:4c:5c:91:
89:1c:bf:f1:a2:c8:d3:cf:51:1a:ac:95:49:f1:68:f7:00:af:
b7:85:36:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:25 2023 by rpki-client on console-ams.rpki-client.org