Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MiiprytVcz_CTR6r8nOICP8exys.roa
File: MiiprytVcz_CTR6r8nOICP8exys.roa (raw, json)
Hash identifier: x1mEcC9IDA+Li5Uym74gc2I/N2c+pHgd1TEzMa01mtE=
Subject key identifier: 32:28:A9:AF:2B:55:73:3F:C2:4D:1E:AB:F2:73:88:08:FF:1E:C7:2B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2060
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MiiprytVcz_CTR6r8nOICP8exys.roa
Signing time: Fri 25 Nov 2022 04:38:38 +0000
ROA not before: Fri 25 Nov 2022 04:38:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.192.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8288 (0x2060)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3228A9AF2B55733FC24D1EABF2738808FF1EC72B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:4a:31:09:ca:b4:81:79:05:f2:d7:f2:5e:
19:c6:c5:e9:5d:36:ca:72:1b:88:06:e1:f1:80:3c:
20:74:2f:10:d6:3a:35:04:70:f5:64:5c:99:71:5b:
85:9f:13:0f:95:41:a6:ae:6a:37:f7:6d:ba:c0:5a:
9d:9d:4e:26:1c:0a:a9:45:bd:01:d1:40:f8:0f:ac:
75:15:76:d9:1f:ab:67:07:ea:80:cf:76:84:40:84:
a4:ec:24:1c:4e:f2:0a:9c:7d:f0:82:79:3f:8e:29:
26:df:60:4b:38:7c:5b:24:a6:cc:ad:b9:7e:99:cd:
ae:27:c9:bd:d4:48:20:ad:b9:52:85:6c:ef:47:53:
f1:aa:16:6b:24:0a:d2:75:0e:83:71:c3:3b:ae:61:
50:ce:ce:e8:83:b6:6b:22:56:ee:2b:10:3b:28:46:
6b:85:13:6c:1c:4a:82:f1:35:e4:88:c5:e7:ae:6c:
9c:09:56:4d:fa:92:19:35:8e:7e:45:e2:4e:d3:62:
b0:90:30:52:5e:c9:a2:69:7c:68:8a:e0:23:e3:7b:
fd:54:c0:66:d0:8a:eb:cf:51:96:78:c9:a0:46:ae:
9b:1f:7c:25:28:ab:2e:84:43:2d:2c:71:da:b0:87:
49:4f:11:45:ae:54:47:e1:c2:61:83:b2:9e:7f:ee:
14:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:28:A9:AF:2B:55:73:3F:C2:4D:1E:AB:F2:73:88:08:FF:1E:C7:2B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MiiprytVcz_CTR6r8nOICP8exys.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.192.0/20
Signature Algorithm: sha256WithRSAEncryption
34:57:22:fc:90:d1:ec:26:11:2d:78:c0:a6:fe:bc:dc:50:43:
3f:ee:90:3f:32:66:d7:0d:3c:91:52:48:16:31:10:6a:6e:6e:
b3:c3:ee:92:2d:76:b9:b1:21:6b:9e:7a:77:ba:cf:e0:34:bb:
dc:83:07:2c:75:09:90:23:ce:8d:d1:1c:b7:2c:41:64:1c:da:
c9:70:a5:36:56:04:ca:a8:7f:09:a0:0f:ca:ba:7e:ff:4a:0a:
91:c4:b8:44:15:3e:69:18:4d:cf:a1:8e:c2:38:95:9f:6c:d1:
d6:d4:b0:3d:10:c6:8b:3a:5c:2f:94:9f:85:d2:2a:d2:ef:c5:
95:2e:de:ec:86:90:cc:b0:f5:ef:f8:49:fb:3d:8b:51:53:6b:
20:b1:a2:49:ec:6c:1b:e4:6c:29:60:fd:18:20:78:42:d5:f3:
c7:e1:09:9b:cd:50:f0:62:b7:9d:6a:29:cc:ac:85:63:67:99:
7c:34:a3:6f:cb:fd:04:ca:99:eb:5b:d7:1a:4a:c7:86:4a:83:
39:68:41:19:0b:31:7a:bc:08:18:81:9a:a9:b8:90:b6:f4:2e:
30:b9:aa:5f:f7:8b:c0:d1:d0:2e:98:43:8e:26:4b:a7:45:61:
ef:c2:9b:ca:b6:2c:cb:f5:3b:e9:65:15:ac:93:f9:e7:b6:ed:
ae:de:e8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:25 2023 by rpki-client on console-ams.rpki-client.org