Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ry7QXVCc5-owlWqxMY90HycOCWo.roa
File: Ry7QXVCc5-owlWqxMY90HycOCWo.roa (raw, json)
Hash identifier: A4gwQr/Vdl99DjgICnDNqeypctToJMRY4Ibw1Y/jokM=
Subject key identifier: 47:2E:D0:5D:50:9C:E7:EA:30:95:6A:B1:31:8F:74:1F:27:0E:09:6A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 227A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ry7QXVCc5-owlWqxMY90HycOCWo.roa
Signing time: Fri 25 Nov 2022 04:41:13 +0000
ROA not before: Fri 25 Nov 2022 04:41:13 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.112.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8826 (0x227a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:13 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=472ED05D509CE7EA30956AB1318F741F270E096A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4b:c0:aa:a0:71:17:e6:c7:29:e9:e5:2d:41:
ca:64:3d:2b:22:8e:e6:19:53:eb:e0:8f:c7:e7:be:
41:05:20:74:15:e7:f5:96:10:29:f9:89:9a:17:6f:
32:1e:54:0e:2f:87:45:78:02:43:5f:c3:ef:64:20:
12:be:d3:5b:22:17:00:36:a9:ba:b3:39:bd:67:9a:
3a:79:22:15:fb:c3:6a:4e:44:83:da:85:57:41:62:
96:a7:e6:ba:48:ff:fd:d8:b4:2e:5e:26:00:af:c8:
fb:1a:66:f3:cb:c9:b9:13:c0:d8:a0:07:47:7c:ef:
ef:a1:4f:dc:df:78:ab:ab:4f:33:d1:13:9a:a1:be:
85:7b:34:d4:d7:ca:bb:e3:2e:65:0d:33:0a:d1:2a:
fa:da:28:da:1b:03:bb:c1:fd:bc:40:cc:73:2d:65:
d5:e3:14:c2:f8:43:0e:da:68:c4:ff:4d:99:43:d5:
d3:fb:bd:8e:00:d8:b5:79:ad:22:71:c0:03:6f:ae:
60:35:5b:17:89:8b:66:f2:d5:73:74:d7:f3:09:b3:
54:1a:4a:69:37:54:57:6d:8b:70:e7:a5:81:2d:55:
94:64:c3:61:23:23:10:f4:e0:15:7c:61:4e:7e:95:
53:dc:59:ba:ed:85:5b:2f:c0:64:82:d2:52:84:89:
37:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2E:D0:5D:50:9C:E7:EA:30:95:6A:B1:31:8F:74:1F:27:0E:09:6A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ry7QXVCc5-owlWqxMY90HycOCWo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.112.0/21
Signature Algorithm: sha256WithRSAEncryption
83:89:f4:20:14:2d:6a:a4:28:92:b4:6c:ff:01:77:68:e4:88:
5d:35:65:03:a9:de:e0:e5:e2:aa:4f:6b:69:4f:39:af:88:51:
40:93:9d:36:6a:00:48:18:14:63:02:0a:f8:d7:b8:37:17:5e:
6d:08:ae:7c:4a:f3:95:72:72:e8:03:b7:7b:92:5b:df:78:eb:
e6:74:af:67:2a:ec:4e:81:97:75:2f:0c:c8:c4:1d:34:c2:09:
4f:e7:02:73:76:9d:90:6c:ed:d0:a9:0b:36:ca:62:e8:be:32:
07:a4:e9:63:30:51:fc:87:00:22:2e:51:48:12:7d:9f:d1:4c:
6e:04:97:ae:6d:e5:21:0a:7e:25:0e:a1:05:6c:12:7d:b4:c2:
ab:19:2f:80:5d:61:b4:de:8a:8c:02:68:be:c1:0a:99:ee:0a:
ec:85:54:d3:ab:c9:ea:e2:1f:f9:2f:ed:37:d4:78:e2:68:7f:
de:ee:95:ce:72:a7:3c:5d:40:1a:d2:ea:c0:f4:41:30:ae:e4:
c7:12:68:bf:80:92:8c:01:9b:65:1a:37:78:cf:72:3d:a6:6e:
6f:f0:93:63:e9:e1:47:80:b9:18:10:31:d2:ba:0b:21:d7:20:
c5:31:aa:78:35:67:30:a5:25:d6:b6:ea:58:1a:94:9a:42:fc:
69:d8:7e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:05 2023 by rpki-client on console-fra.rpki-client.org