Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R_CjcTLxur3RxW8nemj-pSQvBig.roa
File: R_CjcTLxur3RxW8nemj-pSQvBig.roa (raw, json)
Hash identifier: DVKzgGg1HyJxebZ3F7eirzqJgErIoyV8FyYJVJ0GH0k=
Subject key identifier: 47:F0:A3:71:32:F1:BA:BD:D1:C5:6F:27:7A:68:FE:A5:24:2F:06:28
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2278
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R_CjcTLxur3RxW8nemj-pSQvBig.roa
Signing time: Fri 25 Nov 2022 04:41:12 +0000
ROA not before: Fri 25 Nov 2022 04:41:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.236.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8824 (0x2278)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=47F0A37132F1BABDD1C56F277A68FEA5242F0628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:43:61:6f:1b:2a:ae:77:cb:f5:85:89:90:38:
6f:48:34:eb:0b:11:bc:3c:21:03:25:d7:4a:a2:c9:
7e:8e:ae:70:be:7a:9c:13:d8:23:cb:f9:96:b6:90:
96:6e:48:98:1f:18:84:c6:db:41:f7:cd:63:61:38:
cd:7e:19:f6:44:18:86:55:3e:f7:aa:19:63:02:1e:
f8:66:fa:39:88:7c:f5:4f:79:23:a2:72:89:1c:3c:
00:96:26:4b:a7:f4:89:af:f2:49:ac:7c:0b:de:cc:
5e:cb:e6:e1:5f:cd:8c:09:52:3e:9a:8c:47:a9:3c:
81:94:08:7e:07:f2:44:a3:cd:7e:70:91:f4:72:28:
e6:03:b7:09:1d:5c:be:4a:25:e8:bb:a0:72:78:82:
63:e3:0a:50:f4:5e:13:97:b7:f1:e4:9a:52:71:6e:
43:c3:c7:06:ab:44:ea:6d:7c:59:d1:f9:f9:d3:ea:
99:e7:96:28:0d:6a:d9:5f:67:53:0d:e9:3a:4d:a8:
2f:0c:86:44:18:fd:6f:60:b0:fb:01:e3:54:9c:2a:
cf:e8:41:84:f5:de:b7:10:91:bf:0a:30:7b:f3:a4:
2d:bd:9e:86:0a:c3:03:e6:19:c9:a8:64:dd:be:0b:
ed:88:fc:42:05:02:b4:fc:f7:fc:05:07:c7:cb:4b:
99:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F0:A3:71:32:F1:BA:BD:D1:C5:6F:27:7A:68:FE:A5:24:2F:06:28
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R_CjcTLxur3RxW8nemj-pSQvBig.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.236.0/22
Signature Algorithm: sha256WithRSAEncryption
11:15:d9:b9:d1:f9:9b:47:00:47:bc:ff:6e:5d:04:76:da:9d:
7d:c8:84:6e:61:0e:e4:39:3e:ba:01:94:b4:3d:a9:47:2e:5e:
c4:13:81:51:fb:e6:ab:e8:a9:1e:cc:9c:ba:da:11:b7:d4:6a:
70:af:54:b9:b6:07:17:8b:7f:01:e0:82:60:d6:99:08:f0:67:
1b:30:1d:b4:58:ff:fe:ce:0a:a1:e1:d7:0d:34:4d:55:c8:17:
6b:d7:2f:12:d2:06:f1:5c:8b:62:f7:da:01:7f:40:52:50:a1:
41:f6:21:97:85:60:e1:32:f6:5b:e5:d1:2e:85:27:79:c7:d6:
63:58:62:4e:c1:48:d7:f4:7e:57:67:f5:be:28:74:30:44:18:
b1:95:6c:06:74:8a:d0:e2:fa:f3:bd:4f:be:af:b9:51:4a:0e:
f5:6c:ae:9c:b3:33:7f:e3:11:9c:57:f9:ed:67:9c:56:55:b6:
ac:0e:dc:44:04:1a:84:88:41:df:bf:fe:9f:ba:45:0d:a8:66:
29:f0:77:cc:5c:8b:ef:0f:20:c4:b8:bd:93:53:41:ab:09:9f:
b9:e5:42:dc:b2:84:c6:d1:c7:19:96:fe:20:be:8e:ea:c0:31:
82:c0:06:29:35:99:bd:bd:70:35:fe:98:ea:d2:69:b6:7c:0a:
62:86:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:05 2023 by rpki-client on console-fra.rpki-client.org