Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RDUUif8QdiSoQkp861_yYYXQvo8.roa
File: RDUUif8QdiSoQkp861_yYYXQvo8.roa (raw, json)
Hash identifier: Oqxyo9QPeubUea9I9JZV9pKZlPUdOSXArtlDpdDHBXk=
Subject key identifier: 44:35:14:89:FF:10:76:24:A8:42:4A:7C:EB:5F:F2:61:85:D0:BE:8F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RDUUif8QdiSoQkp861_yYYXQvo8.roa
Signing time: Thu 15 Sep 2022 02:45:27 +0000
ROA not before: Thu 15 Sep 2022 02:45:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.120.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=44351489FF107624A8424A7CEB5FF26185D0BE8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:a9:0b:4f:e9:84:dd:db:bc:62:8c:cf:49:
56:f5:0a:8c:ab:99:57:e4:5e:68:8c:66:11:59:41:
57:f3:57:11:fb:c6:d8:c6:9c:16:67:80:1f:d5:8e:
c5:21:87:d4:b1:66:27:ea:ef:64:15:4d:ac:2d:47:
20:ee:17:0c:16:f5:e1:e6:b7:00:d1:8f:e3:e9:02:
f3:9b:dc:14:2d:27:ab:c3:eb:50:ac:92:b6:27:8e:
bc:f3:64:b5:e6:af:a4:8b:a9:b5:c6:3f:7b:76:07:
10:1b:83:ef:cc:11:26:c4:f6:88:ec:63:a1:c7:61:
98:1d:fb:91:3d:91:2d:d4:fa:2a:82:a3:da:2e:78:
e8:55:5d:89:4e:c1:e0:7c:83:86:1a:d9:54:e2:c9:
59:f5:f9:92:d8:10:34:ae:d4:8f:3f:4a:eb:9c:31:
a8:30:5c:03:7c:93:03:8e:86:b9:d0:49:d8:57:22:
75:e1:eb:b9:c9:b9:50:a9:04:c2:5d:ba:2e:48:e5:
e2:2e:20:6c:90:ec:e0:74:05:1e:a9:f9:9b:a7:19:
25:9b:93:d5:a5:1e:59:e9:a6:fc:f8:c0:29:2f:ee:
fe:db:4c:5a:9a:d3:a0:3a:24:b2:7c:53:27:16:8e:
b6:00:51:ad:b1:1f:16:fb:d0:7c:eb:83:9d:c8:d5:
64:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:35:14:89:FF:10:76:24:A8:42:4A:7C:EB:5F:F2:61:85:D0:BE:8F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RDUUif8QdiSoQkp861_yYYXQvo8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.120.0/21
Signature Algorithm: sha256WithRSAEncryption
89:82:12:ab:b0:16:d0:af:d4:f8:95:2f:e9:f7:ad:22:a0:16:
ef:41:7a:b8:23:fc:be:95:54:e9:aa:37:06:ad:06:11:ed:24:
fd:d4:6c:51:9a:72:69:79:ce:c1:7d:7c:2f:60:d5:5b:0d:a0:
80:4e:1c:14:b9:46:e1:0a:b1:88:d5:4f:e1:0f:af:83:1c:67:
b3:21:05:74:36:a4:f2:f0:c2:7a:ab:68:c4:31:09:45:28:b5:
a4:38:f9:a1:dc:85:dd:f0:52:3c:89:f8:b8:0d:85:bb:13:08:
36:6a:10:2b:80:ef:4c:c8:fb:1b:b9:1d:d4:6a:14:58:51:57:
3d:03:f1:88:e5:35:78:a6:b2:7d:9b:2a:65:52:49:d5:d0:75:
5e:4f:e1:23:5d:eb:b2:4b:af:47:a9:b0:9a:92:ea:59:90:c3:
0e:9e:d2:23:33:eb:da:67:03:c7:77:2e:c0:4f:22:2b:68:f7:
de:71:9a:bf:8d:f8:81:cf:6e:4c:a7:22:16:ab:a7:17:66:39:
d0:63:52:ed:85:96:59:e7:17:9b:39:68:68:66:36:63:7f:94:
46:58:e8:16:b5:7c:e2:60:30:86:86:44:ba:b2:d7:d4:f8:02:
ed:0a:be:cc:4a:1a:be:df:24:60:bd:a3:63:9c:1c:9c:18:9c:
5f:19:24:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:28 2023 by rpki-client on console-fra.rpki-client.org