Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LPKz1Ad-6knl3OZLsiezVn9mOuE.roa
File: LPKz1Ad-6knl3OZLsiezVn9mOuE.roa (raw, json)
Hash identifier: SWgn3AT0gvRizSO3wUjwIjwtAtpstauhHJKONIkxfiQ=
Subject key identifier: 2C:F2:B3:D4:07:7E:EA:49:E5:DC:E6:4B:B2:27:B3:56:7F:66:3A:E1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1F9A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LPKz1Ad-6knl3OZLsiezVn9mOuE.roa
Signing time: Thu 08 Sep 2022 10:12:48 +0000
ROA not before: Thu 08 Sep 2022 10:12:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8090 (0x1f9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 8 10:12:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2CF2B3D4077EEA49E5DCE64BB227B3567F663AE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c3:2c:1e:82:00:57:f5:f0:9a:d5:b1:d9:4d:
43:a3:38:c3:1e:18:8f:f7:91:bb:0f:3d:a0:43:86:
85:eb:20:a6:43:9e:05:d4:54:47:7f:12:e5:ab:0c:
1f:0e:f8:20:72:fd:eb:6d:2f:a6:c9:05:c0:59:3f:
46:7e:65:77:a4:a7:8f:2d:75:40:f1:ef:ca:8f:53:
44:3c:ce:8f:f2:67:ac:b9:0f:08:a3:3d:6c:d7:81:
e1:08:c4:8f:f1:75:d0:4d:3b:b0:a4:9c:7f:03:73:
c9:bf:16:89:4a:b6:80:18:28:46:46:18:3a:53:13:
38:58:59:ff:15:f1:de:cb:3a:98:c7:be:2b:13:96:
cf:dd:55:5e:b3:1f:59:13:82:11:4d:2a:07:45:a3:
50:37:b2:77:8f:7e:81:6e:dc:69:ec:c5:51:be:73:
f9:8c:5f:c6:63:09:60:a4:19:4b:01:74:ff:26:6c:
f6:43:ec:d2:58:5f:74:7d:24:36:33:70:dd:61:59:
75:f8:18:b1:93:cf:22:1c:fb:c7:71:e3:58:5f:41:
a6:51:58:24:aa:cd:a2:94:04:0a:90:e8:1d:1e:5c:
a0:af:02:b0:54:48:46:e2:26:da:9b:4a:f6:e3:b4:
42:eb:1c:91:66:4d:44:d3:d2:41:a9:74:78:78:49:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F2:B3:D4:07:7E:EA:49:E5:DC:E6:4B:B2:27:B3:56:7F:66:3A:E1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LPKz1Ad-6knl3OZLsiezVn9mOuE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.252.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:60:9e:94:e5:ec:6f:cc:a2:55:00:38:58:5e:15:13:35:a2:
d9:92:79:43:7c:47:f5:54:87:2c:22:16:62:b2:b9:b5:7d:b4:
d4:f5:fc:3c:cb:d2:f5:4f:2f:9a:d7:90:a3:d3:cd:6b:ab:4e:
33:e3:04:70:fd:f4:10:fe:b3:b7:b3:66:8b:59:9f:6c:c7:ac:
f8:9e:87:34:5a:f7:20:ae:c6:70:e8:ba:0c:e1:8e:51:e3:38:
35:17:13:37:d3:8c:a4:80:62:c8:28:e8:78:ad:df:b4:9d:21:
04:af:ee:7e:8f:17:c7:4e:85:4f:73:46:05:ac:44:00:44:99:
80:77:45:fc:81:14:ff:09:af:9d:8e:80:d3:f4:16:72:0f:89:
07:c1:3f:44:91:47:c9:d2:e4:54:22:6e:2e:05:66:4f:bf:20:
68:1a:f5:1d:8d:27:c7:a4:50:15:ad:39:fa:a0:77:06:02:d7:
22:da:76:48:4a:87:67:1b:f7:ae:e2:e7:0a:93:9e:21:41:4a:
4a:48:73:60:35:2d:69:97:41:73:b1:14:ae:6e:fe:25:43:fc:
0c:8d:4a:c9:56:19:1d:fd:e9:05:a3:bf:9a:d9:c9:b6:a6:8b:
55:51:d0:97:b1:77:79:c1:f2:f5:ec:00:8f:d5:f8:c0:c7:50:
5a:c4:7e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:16 2023 by rpki-client on console-ams.rpki-client.org