Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NGiss73jXIhyuBtpgm1l9krBLaA.roa
File: NGiss73jXIhyuBtpgm1l9krBLaA.roa (raw, json)
Hash identifier: yI3A4y/Fd1GvW25PbobrZxuwMnzvnx89mRxw0JekoHo=
Subject key identifier: 34:68:AC:B3:BD:E3:5C:88:72:B8:1B:69:82:6D:65:F6:4A:C1:2D:A0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22A9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NGiss73jXIhyuBtpgm1l9krBLaA.roa
Signing time: Fri 25 Nov 2022 04:41:28 +0000
ROA not before: Fri 25 Nov 2022 04:41:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.254.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8873 (0x22a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3468ACB3BDE35C8872B81B69826D65F64AC12DA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9c:73:c2:ca:c3:69:c8:52:55:c1:70:d6:be:
42:bb:4d:aa:73:a9:ec:a6:21:85:99:80:28:66:bd:
00:02:f5:b3:0c:fa:f5:35:fd:4a:18:f9:eb:4e:bf:
c9:e6:81:d0:5d:9c:d2:84:78:fd:02:5a:1c:2d:0e:
53:79:51:22:dc:0b:d9:2f:a0:ca:f9:d4:69:16:95:
95:1d:f1:51:76:7b:d4:92:ee:c4:f3:8e:3f:7d:06:
67:3b:01:9b:3f:03:79:7f:e9:4a:2a:8c:44:7f:bd:
a6:40:06:99:5c:00:e9:42:fe:a0:d1:28:a7:83:64:
04:76:74:7d:61:34:99:98:b0:40:5b:98:d5:38:7c:
8b:a4:14:62:e8:6b:72:de:58:b3:99:8b:5e:8b:c6:
af:37:e2:ab:fc:0e:7d:4a:76:27:90:17:18:59:68:
75:5d:43:e4:00:c5:a5:25:af:79:4e:55:16:89:48:
f8:de:9c:e9:13:d9:5a:2d:9d:3d:68:f3:39:ea:a9:
33:0a:b5:2a:70:8f:74:d6:03:60:e1:11:ed:f3:4d:
e0:95:d2:43:68:f4:03:07:16:6b:7b:6e:23:3c:72:
f1:53:ea:a4:81:c9:38:c1:7a:4c:a0:7a:08:f1:65:
6b:c2:70:29:f1:91:7d:6e:a7:ec:30:2f:00:1f:23:
cc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:68:AC:B3:BD:E3:5C:88:72:B8:1B:69:82:6D:65:F6:4A:C1:2D:A0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NGiss73jXIhyuBtpgm1l9krBLaA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.254.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:ac:8a:b6:d2:1e:25:c3:b2:8b:4b:a1:36:44:cb:4e:6c:2d:
21:58:82:ea:21:2c:c7:ac:de:da:f3:b3:3c:c9:5d:f0:56:95:
8e:dd:e8:ae:f0:08:0d:43:54:cb:e6:6d:f3:9e:18:06:93:7a:
9e:a1:5b:d7:6c:6d:36:df:ca:b3:06:5f:83:f7:44:e8:93:a5:
7e:8e:4f:0b:a2:47:8c:a8:72:da:6d:9f:29:54:49:43:bd:8d:
51:97:b7:ab:b4:c2:61:e1:c4:85:60:bf:e4:aa:5f:fe:87:8a:
91:19:03:18:88:92:97:8c:29:76:f4:e4:fa:ce:ef:03:13:61:
62:1a:43:a9:11:93:2c:27:9f:33:21:2e:58:11:8a:ce:2a:fd:
86:96:18:e3:c7:5b:04:b6:53:42:9d:da:01:95:5a:ef:28:64:
bc:03:a8:e7:d5:c8:83:7f:56:11:71:03:e8:53:68:02:a1:fa:
06:2a:21:3d:a6:18:58:3e:a8:b6:20:57:80:37:84:94:d7:1b:
b4:0b:14:c6:9d:74:2a:32:80:22:01:65:4a:05:d6:44:0c:2e:
f5:76:3e:7e:45:80:9f:7b:c5:49:86:6b:81:1e:83:12:22:d6:
aa:68:99:2e:03:d7:b7:2e:52:14:d6:a8:be:88:8f:9d:5f:2f:
ef:4e:a9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:04 2023 by rpki-client on console-fra.rpki-client.org