Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pu_w9yxUa_dSavqLf8fjve7h2dw.roa
File: Pu_w9yxUa_dSavqLf8fjve7h2dw.roa (raw, json)
Hash identifier: 4sdwh5Mq8wjhM9kXzXJzWk1sIPYxucuFIs4aPH7ThYc=
Subject key identifier: 3E:EF:F0:F7:2C:54:6B:F7:52:6A:FA:8B:7F:C7:E3:BD:EE:E1:D9:DC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 213E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pu_w9yxUa_dSavqLf8fjve7h2dw.roa
Signing time: Fri 25 Nov 2022 04:39:41 +0000
ROA not before: Fri 25 Nov 2022 04:39:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.240.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8510 (0x213e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3EEFF0F72C546BF7526AFA8B7FC7E3BDEEE1D9DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4d:d8:2d:ac:2f:6d:2f:db:d3:a0:ea:49:5a:
a9:79:93:10:23:69:d5:b3:20:a1:e6:68:b3:d2:3e:
f7:11:13:09:93:9d:ab:08:40:34:43:bc:8a:ac:d5:
6b:3d:24:19:68:88:7d:c7:50:f8:32:bb:2e:fa:87:
3d:b3:5d:4c:7e:08:14:a4:5e:60:67:13:dc:71:9a:
11:73:bf:21:26:c8:3a:c6:e2:f9:85:d3:03:0d:ae:
f3:5e:2c:d4:79:24:38:34:a8:33:4f:27:be:22:8e:
e8:2d:93:6e:25:ad:98:cd:d5:03:24:6b:3d:7b:4d:
68:34:47:a5:63:0c:57:09:c3:aa:4a:37:17:65:75:
98:dc:f8:d5:a9:e1:36:49:3a:9c:71:1c:5e:48:d8:
f3:53:21:c3:3e:20:66:44:6a:41:61:cb:9d:fe:e5:
fa:ef:5a:4f:b0:67:41:eb:4a:c7:06:fd:bd:4b:05:
97:4e:86:c2:67:9b:71:a0:81:93:79:10:58:69:b0:
36:ee:06:3e:88:ca:5e:0e:85:b7:31:ed:12:77:68:
8a:59:c9:b8:45:93:81:61:ce:4a:0b:f1:b7:b1:a0:
f3:95:05:e2:89:fe:2f:56:18:4f:dc:09:5a:8b:45:
f6:22:88:a2:c2:79:20:7d:ae:1c:0a:86:9a:57:bb:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EF:F0:F7:2C:54:6B:F7:52:6A:FA:8B:7F:C7:E3:BD:EE:E1:D9:DC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Pu_w9yxUa_dSavqLf8fjve7h2dw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.240.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:8d:e6:fd:69:e9:50:48:03:74:c3:26:e0:14:7d:4e:a9:ed:
56:52:8c:9f:0b:8e:1d:62:8a:31:13:80:3c:36:02:e4:7b:b2:
19:89:3a:ae:89:47:95:30:4a:fa:11:45:47:06:45:2d:83:e6:
0b:8f:d0:54:c7:55:ef:84:14:db:bf:7d:26:b5:9f:0c:49:5b:
7c:a6:81:df:7d:20:6b:a2:cb:d4:5f:4d:2f:1a:6d:fe:29:8a:
14:91:a6:88:56:70:8c:11:c7:f2:f6:0f:95:10:4d:be:bd:b1:
76:e5:4f:29:b4:55:66:e2:3d:27:b3:30:5a:03:ed:99:17:44:
fd:ce:6d:0f:a0:b0:49:be:2d:b6:d6:9f:ef:34:09:3f:72:4c:
81:dd:5f:74:d1:9d:c1:1b:62:79:7e:64:24:d0:fb:10:2d:1a:
c2:10:09:ad:dd:dc:35:f0:2a:e8:62:d3:15:b1:39:b7:0f:fd:
75:54:15:de:f8:03:49:f2:d6:65:1f:d5:44:76:0c:d0:82:94:
10:81:e5:b7:37:bd:76:db:fd:24:c2:83:51:e3:b2:80:02:4e:
05:5b:fb:fc:98:1b:0f:36:b1:25:6f:c1:6d:3e:f5:6a:e0:35:
83:2b:79:4a:c2:e0:aa:9c:40:fe:a6:ff:17:aa:6e:60:fe:cc:
07:b3:84:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:04 2023 by rpki-client on console-fra.rpki-client.org