Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QkLbxuqBrCJsQJIKV4MJlO5K6jo.roa
File: QkLbxuqBrCJsQJIKV4MJlO5K6jo.roa (raw, json)
Hash identifier: pFdXoJOqwYxP/al+75moBXIDMuxPw/gk0pHYuRo0A2M=
Subject key identifier: 42:42:DB:C6:EA:81:AC:22:6C:40:92:0A:57:83:09:94:EE:4A:EA:3A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QkLbxuqBrCJsQJIKV4MJlO5K6jo.roa
Signing time: Thu 15 Sep 2022 02:53:38 +0000
ROA not before: Thu 15 Sep 2022 02:53:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.24.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4242DBC6EA81AC226C40920A57830994EE4AEA3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:5f:c5:59:7e:21:98:e8:d3:a0:27:86:08:
6c:98:17:39:e8:02:d2:23:26:a0:db:2f:8c:d5:dd:
6e:e1:3f:41:c7:de:e9:61:4c:8d:83:3e:eb:d1:bb:
1f:64:c9:53:c6:21:d4:ce:90:11:04:10:49:d1:17:
7d:9f:c4:eb:1a:e9:3d:e8:a2:92:7a:35:31:20:59:
6a:b4:cb:ee:9e:e4:50:cb:6e:3d:6e:7e:ec:a6:8b:
18:15:51:50:06:79:4e:75:f9:ad:09:07:3b:8e:58:
89:42:6a:9b:a9:9f:f2:31:ab:d2:28:92:e3:51:8e:
47:c5:ae:3f:7c:6c:9c:e7:ce:c7:c3:c8:5b:cf:ee:
ee:ea:26:b0:18:9e:2d:0d:9a:2d:0f:50:3b:8c:c3:
1c:c0:04:cf:ac:7a:a2:ab:d2:57:b9:0c:90:da:47:
12:13:06:2a:1c:38:f5:13:72:fa:3c:b1:b7:ff:d2:
11:59:f8:83:ed:92:27:4e:40:be:30:a5:be:07:f8:
4e:93:3d:cf:1a:7d:24:65:15:da:67:65:13:28:7b:
30:f8:75:ba:10:8b:9b:44:ef:1e:51:08:50:d5:01:
6a:f2:67:dd:75:c3:c5:4f:1a:b4:8e:99:60:41:7a:
4d:e6:21:bb:6b:d5:6a:fa:19:0a:dd:57:9c:ab:6c:
42:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:42:DB:C6:EA:81:AC:22:6C:40:92:0A:57:83:09:94:EE:4A:EA:3A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QkLbxuqBrCJsQJIKV4MJlO5K6jo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.24.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:f2:91:6e:3a:5e:85:c9:31:0a:8d:f7:9a:eb:9b:9e:94:38:
d8:48:24:6b:5a:cb:a9:75:5b:9a:ff:af:a7:a9:7a:dc:e7:55:
81:10:7b:c8:28:2e:57:08:5d:7e:1a:d7:2d:8c:72:f3:e7:cf:
38:ff:a9:47:e7:9f:42:95:4d:b0:50:57:da:38:97:7a:0b:52:
f3:71:95:82:39:dd:f1:44:19:52:88:9a:bf:42:7e:1b:08:d8:
2b:2d:8c:7e:77:ba:3c:8d:07:4d:ed:4d:7f:5d:12:1e:6b:c2:
df:aa:a7:5f:af:f1:c1:bf:51:73:23:10:2e:70:8d:37:81:48:
e4:16:7d:54:9f:f4:0f:db:7d:e9:19:37:38:49:43:49:08:29:
de:ce:1a:87:8b:03:e1:00:96:aa:05:63:06:70:34:d2:64:57:
68:bf:ee:b7:02:28:6f:d7:b0:45:2c:a0:d0:b5:ab:dd:20:7c:
e9:79:f3:1d:25:1b:37:bf:00:33:e3:06:9c:5e:77:5e:b4:70:
2f:64:4d:5b:bf:65:50:98:c9:0b:85:b0:6b:65:3d:c7:54:cd:
83:a8:c5:22:5a:35:ec:45:1a:ec:11:3d:74:d3:26:67:0d:e4:
a8:2c:09:7a:a7:17:4d:0c:8b:f8:1d:63:f8:b9:e4:26:ba:e0:
be:3e:13:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:19 2023 by rpki-client on console-ams.rpki-client.org