Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MwgEyBfE2Xcxr7EuvPmOVaf4tWo.roa
File: MwgEyBfE2Xcxr7EuvPmOVaf4tWo.roa (raw, json)
Hash identifier: SeKRAEGV/C5FPLgi2qC/csOA7U5OUz0RymNz5AwELZA=
Subject key identifier: 33:08:04:C8:17:C4:D9:77:31:AF:B1:2E:BC:F9:8E:55:A7:F8:B5:6A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MwgEyBfE2Xcxr7EuvPmOVaf4tWo.roa
Signing time: Thu 15 Sep 2022 02:52:32 +0000
ROA not before: Thu 15 Sep 2022 02:52:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.88.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=330804C817C4D97731AFB12EBCF98E55A7F8B56A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:fd:2b:ed:8c:a0:34:93:60:89:1b:b3:96:
80:94:28:57:01:95:0c:d1:a2:57:ac:eb:76:6a:16:
c3:82:53:31:d7:86:f0:23:66:a0:56:21:8a:26:e7:
c0:d8:27:94:60:5c:40:5d:e4:dd:ab:ed:48:a0:9c:
2e:ef:6a:d0:53:9f:a0:09:c9:d8:8a:84:c6:8b:56:
f0:44:79:1a:92:8d:34:60:f3:c0:c7:a4:d8:69:f5:
af:41:39:e1:06:75:d9:f6:95:5d:e3:98:ff:91:24:
10:76:f2:9d:d1:7b:a6:5e:cf:e7:22:b4:05:7c:9c:
7d:3f:a7:76:b0:4b:20:bb:8b:84:31:cb:37:97:b4:
a6:b7:cc:ec:6c:c0:27:0f:23:1f:e3:a7:75:6a:67:
b5:5b:3d:91:d7:c2:12:65:af:39:dc:17:86:d8:13:
2a:c1:27:98:f8:8e:99:58:90:43:b8:ae:fd:53:15:
00:c9:8f:c1:f8:91:26:42:d3:2d:c5:f5:be:09:2e:
6e:fc:59:27:bf:6e:6e:d6:31:79:9a:29:67:db:ee:
51:d3:3f:c2:01:ac:29:76:87:87:6a:b4:30:17:20:
21:35:f0:d3:42:27:0a:79:48:03:6a:95:1c:2c:5a:
ea:5c:b3:de:8e:05:66:e9:ad:71:7e:53:3c:b0:22:
70:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:08:04:C8:17:C4:D9:77:31:AF:B1:2E:BC:F9:8E:55:A7:F8:B5:6A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MwgEyBfE2Xcxr7EuvPmOVaf4tWo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.88.0/21
Signature Algorithm: sha256WithRSAEncryption
58:e0:8f:0e:8b:21:1d:72:c7:3e:09:38:45:4b:70:13:ba:4c:
56:83:1f:4c:d6:7c:86:35:5c:ef:4a:2e:7c:9d:c4:f9:7a:04:
b3:bf:4e:8c:b2:e6:1b:70:1a:67:30:36:0b:4c:ef:61:64:95:
88:0f:4a:f7:80:1c:37:7c:6c:d1:c4:f4:9c:bf:0f:69:7b:c1:
4d:50:e4:63:f4:8a:bb:79:a0:3e:98:37:fe:67:5f:dd:96:5f:
10:af:d7:3a:0f:5f:c9:a4:78:21:97:99:8a:ac:07:af:3b:1f:
4c:5e:e7:31:2f:27:7b:18:4c:5c:21:76:80:c0:48:2e:79:a6:
31:29:52:34:52:77:ad:fc:16:1c:97:13:2c:12:37:2b:a6:88:
90:42:fc:4c:6a:9c:76:b1:3f:ed:26:b1:cc:00:b3:3e:9f:6e:
4d:ff:97:ff:67:cc:a1:57:7d:2b:11:65:dc:e7:62:16:1e:d3:
f2:33:31:09:da:ea:2a:cd:7d:8c:8b:55:3a:2e:2d:5b:36:fd:
50:84:df:3c:65:7d:20:25:ba:66:0d:68:45:e4:c3:23:e1:9f:
99:e3:d7:9c:33:ca:8f:96:1f:22:71:b1:8b:72:34:13:c2:b4:
32:d3:8a:27:50:57:9d:25:3b:e7:58:1e:e0:22:9d:21:bb:58:
a3:3d:60:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:17 2023 by rpki-client on console-ams.rpki-client.org