Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PQiRy0iVdcG8TG7PWeZqcHx2IBY.roa
File: PQiRy0iVdcG8TG7PWeZqcHx2IBY.roa (raw, json)
Hash identifier: Nh1PyGQw6748JBQ3xmt0mA+T1AQtjz9VyrOhDDFT9X0=
Subject key identifier: 3D:08:91:CB:48:95:75:C1:BC:4C:6E:CF:59:E6:6A:70:7C:76:20:16
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22EA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PQiRy0iVdcG8TG7PWeZqcHx2IBY.roa
Signing time: Fri 25 Nov 2022 04:41:47 +0000
ROA not before: Fri 25 Nov 2022 04:41:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.0.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8938 (0x22ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3D0891CB489575C1BC4C6ECF59E66A707C762016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:02:93:36:8b:15:66:6b:d3:26:e1:4d:8c:
bb:92:27:c6:81:f1:9b:de:99:09:70:1b:74:7e:4b:
16:06:b3:70:4d:8c:b3:a9:62:a6:f5:f9:de:f8:ce:
96:e2:64:e9:87:1f:15:94:0d:b8:c0:4c:0a:fd:c3:
13:77:89:4b:2f:92:63:5c:a6:66:bd:12:1e:9e:b8:
4c:46:81:93:75:53:85:34:61:18:41:d9:55:ac:f6:
d8:4d:6d:8a:e7:88:91:26:b1:f8:4c:f4:51:59:0c:
a6:de:7a:73:c1:7e:8f:60:c1:f7:88:74:e8:41:86:
6a:08:3f:55:26:c3:52:d4:bd:f7:c0:53:e8:4d:93:
66:1d:a7:e5:07:c7:78:a2:e1:3a:a4:7e:3a:d0:41:
b1:6a:37:37:67:22:b2:b9:0c:d6:2a:3d:68:45:f7:
75:b4:65:66:77:c7:0d:b0:3f:b2:7d:39:84:5d:f5:
9a:eb:77:3c:9a:22:1d:44:f7:28:a7:86:67:2c:eb:
1e:22:14:7f:41:ad:1e:2f:2b:1e:72:dd:72:93:4d:
49:f0:fd:f5:21:85:a2:f9:56:28:03:a0:6f:39:0d:
32:e4:08:87:25:15:c9:05:aa:b5:ad:81:c9:be:d9:
bb:48:31:78:49:e3:0f:73:73:92:05:ee:ca:c8:97:
75:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:08:91:CB:48:95:75:C1:BC:4C:6E:CF:59:E6:6A:70:7C:76:20:16
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PQiRy0iVdcG8TG7PWeZqcHx2IBY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.0.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:e7:bb:0d:08:f9:f9:10:25:da:75:af:5e:18:da:09:77:2b:
bb:1a:79:ea:39:33:f8:3c:7a:b9:a3:e6:ac:c4:3c:6f:6d:f3:
cf:63:3e:d2:13:04:07:49:d3:9b:e5:74:6f:9d:50:b8:22:9f:
1f:d3:84:08:b2:4b:92:af:72:4e:60:78:75:f3:f1:a5:e4:22:
f7:7e:cd:3b:6f:44:e7:e0:3f:ef:a5:95:b1:1b:26:23:9b:58:
8a:ee:44:73:81:8b:c3:72:a4:c1:b7:df:21:15:fe:d3:9c:43:
bc:2c:f0:d9:c2:25:92:34:fc:02:29:6b:ba:e5:5d:1b:45:d8:
ea:76:24:74:02:a5:fb:a6:02:d9:18:ab:5c:09:08:80:ab:df:
d1:2d:7a:c9:7a:d5:7f:82:16:b6:5e:51:95:70:39:fc:8a:6c:
7b:ae:a5:2e:27:b2:6f:59:1d:46:2d:f5:db:63:1e:62:be:ca:
8b:6f:2d:1f:87:62:ba:80:ac:2c:29:7d:5b:44:63:9d:d5:97:
79:8a:cb:5e:5f:28:3c:12:07:a1:d4:f7:d1:cd:a8:84:48:b8:
45:73:2b:04:d7:16:f4:e7:a3:8c:ac:08:bf:2e:da:62:a9:ef:
74:79:39:1f:d2:9f:4a:d7:30:c5:2c:82:c8:71:78:73:4c:6e:
a9:b7:86:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:04 2023 by rpki-client on console-fra.rpki-client.org