Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MUL8ox5zUw6JrhxUwsQB71L_5QU.roa
File: MUL8ox5zUw6JrhxUwsQB71L_5QU.roa (raw, json)
Hash identifier: WQXA1L+GDtWQRR7Ph1kOddefGRkLQfPbOVeuqF7G/mw=
Subject key identifier: 31:42:FC:A3:1E:73:53:0E:89:AE:1C:54:C2:C4:01:EF:52:FF:E5:05
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2203
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MUL8ox5zUw6JrhxUwsQB71L_5QU.roa
Signing time: Fri 25 Nov 2022 04:40:39 +0000
ROA not before: Fri 25 Nov 2022 04:40:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.144.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8707 (0x2203)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3142FCA31E73530E89AE1C54C2C401EF52FFE505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:74:64:3c:20:2d:bb:9e:02:f3:c5:91:56:09:
3e:a3:8a:51:c9:96:7e:20:cc:7d:79:bc:82:43:6e:
4f:8d:25:4d:90:73:6b:2e:25:e2:0f:25:89:0f:65:
30:8c:03:e6:70:78:b9:ab:aa:d6:0f:e9:be:33:69:
d7:9f:de:60:0c:0c:19:28:73:e7:db:65:48:5b:c2:
c5:96:c3:ce:73:d7:24:51:ca:52:09:3c:86:49:83:
e9:60:b9:f8:f7:d5:8f:58:f2:9e:10:88:b9:4a:7b:
12:26:ba:8c:6b:d2:c1:5c:03:dc:d9:38:3c:32:77:
21:ad:9f:a7:9a:fd:f0:d0:da:cc:d6:c7:ac:d2:c4:
88:67:f6:9f:20:76:2d:98:2f:48:8c:b6:93:52:a1:
b8:18:eb:2e:bc:18:14:79:a3:80:6d:05:fe:1a:ae:
6b:a6:4b:3c:64:52:c7:17:a2:e0:ef:25:c8:bf:35:
66:78:1b:f1:96:f5:e0:09:27:95:af:4f:6e:c1:2c:
03:39:d1:cc:85:14:92:f9:37:ec:f1:13:cc:1b:d3:
b9:47:a0:3c:ce:a5:21:40:70:e7:6e:b2:1a:0e:d1:
9c:66:f7:4c:cf:f5:2e:e4:06:07:8b:9c:43:00:5c:
de:60:b4:63:1a:ca:58:30:6b:ba:f4:a1:c6:bf:f3:
1d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:42:FC:A3:1E:73:53:0E:89:AE:1C:54:C2:C4:01:EF:52:FF:E5:05
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MUL8ox5zUw6JrhxUwsQB71L_5QU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.144.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:af:d0:25:e4:79:10:e6:98:88:05:c2:55:f7:78:5b:21:59:
4a:9e:52:f9:9c:dd:bf:36:e9:f3:f6:97:d3:09:aa:f3:97:61:
3c:f9:c8:c3:50:47:02:57:4d:6f:ff:d9:f0:43:55:88:3f:34:
63:ab:21:e9:81:77:f7:b9:aa:2a:26:f2:b5:ea:ea:c9:ac:21:
c1:2c:cb:4e:e6:41:ad:d4:37:37:41:0e:52:43:34:8e:c5:fe:
4a:e6:20:d2:e5:43:7b:a8:85:b0:8b:02:b4:4b:86:24:3a:5a:
91:ff:d9:c4:dd:df:b2:02:50:90:61:18:b3:5e:27:ac:e6:1f:
9b:35:b4:ef:20:98:4c:15:0a:34:ac:2b:e9:2a:b8:47:aa:ef:
9d:55:f7:4d:ad:b9:ef:83:5f:35:84:a2:46:43:3f:7b:28:a8:
7b:38:08:38:9b:9f:5c:d9:88:26:1d:1a:d7:05:cc:6e:d7:3a:
2a:62:e5:90:50:48:ef:2c:a4:35:e3:20:97:c5:5d:ca:5b:27:
b1:88:3c:0f:de:4a:9f:ef:8d:f5:ac:57:17:c6:0e:31:0e:d3:
0d:12:c4:28:76:46:bc:cd:78:cd:53:7e:27:1b:90:20:78:21:
61:cd:1d:d7:53:c9:33:cb:db:3f:37:d7:ca:73:31:b9:2f:69:
71:da:2e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:25 2023 by rpki-client on console-ams.rpki-client.org