Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MO01_SX2sRfB4q9WvwOTxYS4nhI.roa
File: MO01_SX2sRfB4q9WvwOTxYS4nhI.roa (raw, json)
Hash identifier: Fp6Q0P0C/wGz0XT17IA3/JvWc9J/TYYHlyu0WuhL24M=
Subject key identifier: 30:ED:35:FD:25:F6:B1:17:C1:E2:AF:56:BF:03:93:C5:84:B8:9E:12
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2388
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MO01_SX2sRfB4q9WvwOTxYS4nhI.roa
Signing time: Fri 16 Dec 2022 03:53:36 +0000
ROA not before: Fri 16 Dec 2022 03:53:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.0.0/14 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9096 (0x2388)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Dec 16 03:53:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=30ED35FD25F6B117C1E2AF56BF0393C584B89E12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:76:f0:9d:f0:b0:df:e1:59:1d:6a:ce:20:d4:
32:b5:5c:c6:07:ad:83:2d:c7:39:d3:79:db:2f:40:
06:20:dd:58:34:06:9a:4a:70:db:13:4c:b4:17:89:
3a:30:80:34:29:94:11:8b:54:7d:b4:02:c8:22:bf:
46:84:eb:e4:36:7a:34:69:b6:c2:af:46:4b:2a:fa:
3c:78:8b:a9:5f:72:49:ea:91:9d:64:5c:56:11:4d:
b1:3c:e2:d9:24:77:97:99:70:9a:cd:cd:38:b6:aa:
6f:d8:8c:6e:b3:b6:dd:e8:50:e8:5c:0a:e2:37:3b:
e7:2a:85:2d:ad:64:b8:61:ed:c1:14:4c:bf:d6:91:
87:ea:cd:e4:71:1f:98:13:34:a9:9e:9e:b9:4d:77:
bf:98:37:c9:56:ad:4b:ae:28:25:a8:0b:d3:02:36:
2c:c5:ad:cc:d0:38:0c:07:15:35:af:d3:00:66:01:
09:e8:d3:15:be:46:ac:f3:b4:cf:06:c8:5b:41:f1:
4f:ee:dd:56:2f:fa:b3:e0:e1:83:a6:aa:a6:11:a7:
35:7b:0b:bd:0e:78:4a:a1:11:3d:cb:76:a9:5c:71:
c5:eb:92:cf:54:0b:3e:4c:f2:ea:30:b6:00:25:4a:
09:84:d5:66:9a:dc:69:1e:e4:e4:e2:1a:dc:94:2d:
16:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:ED:35:FD:25:F6:B1:17:C1:E2:AF:56:BF:03:93:C5:84:B8:9E:12
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MO01_SX2sRfB4q9WvwOTxYS4nhI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.0.0/14
Signature Algorithm: sha256WithRSAEncryption
2a:d8:fb:e5:25:1d:10:5a:6c:f8:df:dc:55:a5:e0:39:a0:fd:
d5:04:3d:a5:94:5d:4f:71:dc:61:f2:4b:e0:ea:59:71:20:a7:
7e:72:2a:25:7d:43:4d:d7:2a:ea:45:eb:92:79:c2:2a:5d:df:
e0:4c:70:5f:e5:d0:ea:95:d1:46:e9:ff:c1:c9:b4:08:69:9b:
63:e7:ff:67:70:ab:9d:ca:9c:38:22:41:6c:e1:e4:25:89:21:
01:7a:e0:60:09:e3:38:58:b5:3f:5b:60:77:44:49:72:5a:0c:
d6:97:64:78:53:c9:5f:6b:05:f6:f2:26:7c:df:79:39:32:1f:
03:b2:17:f0:77:45:6f:b8:27:05:a2:12:5e:f0:b7:7d:4b:5e:
4a:ba:b5:d8:d2:a9:d0:98:d7:5b:4b:e5:1a:35:d3:21:31:78:
96:94:5a:7b:73:a5:e9:af:cf:0a:fa:73:7c:a2:bd:43:31:00:
a9:12:1b:59:f0:a4:9e:f0:bb:cc:1f:dc:95:b9:93:01:09:93:
86:b9:a1:19:fc:55:68:09:3f:5b:58:4d:33:ce:fd:e9:c8:e5:
08:e0:3b:5d:e7:dc:87:d9:64:59:0e:22:45:93:d0:fc:af:d7:
e5:06:d3:6d:3a:15:48:bb:69:ae:2f:74:a8:02:d9:63:51:ef:
4f:68:ca:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:25 2023 by rpki-client on console-ams.rpki-client.org