Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L77dgjXTAn5mHtZVK-MmuzVUtjo.roa
File: L77dgjXTAn5mHtZVK-MmuzVUtjo.roa (raw, json)
Hash identifier: C83FWsQmSs9OowneRUX7CF/Dd9V8EJYgqxb5nhquZOs=
Subject key identifier: 2F:BE:DD:82:35:D3:02:7E:66:1E:D6:55:2B:E3:26:BB:35:54:B6:3A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2251
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L77dgjXTAn5mHtZVK-MmuzVUtjo.roa
Signing time: Fri 25 Nov 2022 04:41:01 +0000
ROA not before: Fri 25 Nov 2022 04:41:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.4.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8785 (0x2251)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2FBEDD8235D3027E661ED6552BE326BB3554B63A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:38:fe:df:81:cb:70:e4:e8:9a:86:e7:97:
36:04:bb:fb:6f:e3:5f:54:bc:1e:a2:0d:7b:f2:6c:
39:4f:3d:5c:a3:a9:8e:06:66:ac:1c:91:e1:f7:18:
b4:9e:6c:f1:d8:b2:af:4c:af:8e:8d:65:04:e8:65:
c3:bb:04:cb:6f:ab:ec:44:87:3c:31:da:c4:f8:b1:
57:28:8c:81:cd:76:da:d8:05:ba:fd:2f:31:0e:6b:
c8:63:3d:df:4a:25:d7:b7:bc:84:16:26:00:c3:4f:
63:6e:d4:e5:de:56:b0:57:7b:52:9e:e6:ad:94:06:
25:06:6d:a0:0b:a0:d0:6e:d2:6b:7f:e5:71:56:c0:
f1:bc:b0:50:c8:14:73:70:0c:69:73:6d:64:4f:4a:
a2:a6:7c:04:22:e9:25:f3:01:c0:4e:d9:b7:1a:01:
a6:91:d9:c0:bd:79:e4:11:a0:63:a4:67:c3:5f:a6:
8f:13:e5:75:33:99:fd:53:73:83:7e:d5:fa:f2:72:
d2:bf:3e:3a:e1:fa:91:b7:83:1e:d8:cf:ca:40:7e:
30:ee:65:49:01:75:59:d4:f2:f5:7b:14:dd:38:72:
28:f3:3d:4f:d7:cf:6b:7d:9c:4b:8f:fc:25:ce:20:
c1:ee:68:e6:8b:5d:3e:75:e9:53:38:dd:bb:ce:dd:
f4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BE:DD:82:35:D3:02:7E:66:1E:D6:55:2B:E3:26:BB:35:54:B6:3A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L77dgjXTAn5mHtZVK-MmuzVUtjo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.4.0/22
Signature Algorithm: sha256WithRSAEncryption
98:d5:7e:19:12:5b:fd:ce:60:41:a4:51:b8:e5:cb:6b:11:62:
05:54:9d:90:f4:33:c2:b5:81:ad:c5:7f:56:12:c7:e9:6c:8a:
94:87:d9:b3:c7:b8:b7:06:c2:e9:11:51:ca:70:ac:ed:13:96:
45:45:ec:56:73:56:0e:f0:50:36:db:14:37:a2:3f:71:4f:d2:
8a:25:6b:f2:d7:5b:3b:d4:5e:e8:64:48:43:b5:b5:53:4e:45:
1b:06:cd:aa:8c:d4:8f:75:07:22:8a:e3:f4:bf:72:3d:93:7e:
85:89:83:81:fd:11:15:b7:05:05:62:35:9d:11:60:51:ef:a7:
0b:44:ab:7e:12:8f:54:1f:e1:8d:15:be:33:0c:80:60:ef:2e:
bc:04:08:37:19:76:4b:89:34:50:04:25:75:8a:e7:57:6b:97:
57:a3:f7:41:01:5b:2e:19:90:e8:89:da:ce:49:03:4e:0f:bf:
c8:e9:10:d2:04:c3:b3:62:27:7f:2c:ea:4f:5e:84:5a:10:a5:
7e:43:ed:3e:2b:75:95:e6:60:db:5e:ad:96:37:77:7f:5b:3c:
ea:65:d5:f6:03:22:73:ba:19:bf:3d:d1:63:77:da:43:40:e8:
2c:90:57:e9:24:9d:c5:19:6b:55:48:b6:73:de:7c:1e:47:ef:
6e:9c:48:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:25 2023 by rpki-client on console-ams.rpki-client.org