Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S0yyq9YNPXEJr6xaj53rXHf_zds.roa
File: S0yyq9YNPXEJr6xaj53rXHf_zds.roa (raw, json)
Hash identifier: /865LV6kwdcyXBGz99Vxiv+SmMgjbm7XHCs2T/j3R3k=
Subject key identifier: 4B:4C:B2:AB:D6:0D:3D:71:09:AF:AC:5A:8F:9D:EB:5C:77:FF:CD:DB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20EA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S0yyq9YNPXEJr6xaj53rXHf_zds.roa
Signing time: Fri 25 Nov 2022 04:39:17 +0000
ROA not before: Fri 25 Nov 2022 04:39:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.68.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8426 (0x20ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4B4CB2ABD60D3D7109AFAC5A8F9DEB5C77FFCDDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:a6:ce:a5:ed:3d:99:75:b2:66:1a:85:ba:
02:ed:5e:29:86:fd:e2:74:e2:14:6f:a7:e7:98:f1:
55:1d:f9:89:59:7b:23:89:3e:29:fa:43:55:9b:50:
61:07:91:47:36:fd:38:6a:09:b0:bf:1a:c8:0c:42:
df:bc:52:af:55:7b:97:91:55:37:f3:c6:a8:b2:80:
05:1b:b8:9e:14:29:be:ef:c6:60:47:2b:2b:88:48:
f9:ff:24:23:eb:0b:31:09:5d:e8:38:c5:a5:40:42:
ae:0b:3d:be:e4:04:ea:5f:e4:b8:5f:4f:ab:c4:4c:
0f:31:99:0c:3a:ff:0c:e8:98:66:9b:00:35:ca:4a:
0e:53:b8:31:f0:7b:d5:45:26:a9:39:6f:36:e5:f5:
12:cb:e4:34:52:32:43:aa:8d:47:7e:90:a8:79:e6:
ff:09:d0:30:c7:a7:31:67:ae:4a:18:93:58:99:19:
0c:12:af:84:b6:0d:e2:bd:d9:77:10:cd:67:24:d3:
94:6d:62:70:9c:a8:8c:a9:f8:d6:b1:7f:d9:8c:aa:
0a:d7:c8:f0:90:47:21:da:c7:5e:24:e3:5c:12:0b:
5b:6d:d7:55:be:0c:b4:4d:76:82:bd:c9:d2:58:b1:
c5:94:d9:42:63:04:7a:95:a2:b7:65:ec:8c:15:df:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4C:B2:AB:D6:0D:3D:71:09:AF:AC:5A:8F:9D:EB:5C:77:FF:CD:DB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S0yyq9YNPXEJr6xaj53rXHf_zds.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.68.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:48:be:a5:87:a4:22:b4:6c:bb:bc:82:42:9b:05:0f:e6:76:
8a:e4:a2:14:0d:61:37:8e:3f:46:40:c1:29:ec:43:f0:32:18:
d5:61:12:e7:a4:1b:bf:79:af:b2:c1:8d:02:98:f7:b3:72:f4:
46:ca:a6:ce:8e:29:f4:db:aa:54:44:d3:97:0c:a6:86:02:28:
b6:7e:b6:33:d8:2e:aa:6b:4c:5c:3b:97:f3:1e:02:e8:cb:92:
6a:f3:d3:6f:16:be:19:89:fb:2d:94:99:35:84:b0:ed:3f:79:
5d:81:ea:5c:b3:ea:b3:68:f4:a7:44:eb:76:fa:b7:a3:af:c3:
48:c8:10:08:c0:e9:47:40:4a:a6:30:c8:ac:8a:09:27:9b:28:
6e:72:09:fe:ff:da:fd:fb:93:6b:f5:99:5f:21:8a:75:e2:2a:
4c:55:3d:aa:26:55:33:56:04:b5:eb:10:45:5d:64:c0:f2:8c:
a7:0f:4a:39:84:0b:c7:84:69:c6:7b:0d:ff:6c:bd:c6:7c:ec:
f5:26:20:a8:22:12:45:d2:ca:1f:9e:b5:39:d7:0f:eb:13:a4:
26:b2:b5:8a:c4:24:b1:e3:17:b7:a9:8f:55:34:8d:46:0b:48:
04:68:2b:a7:b2:b3:a7:4d:9b:0b:44:62:5b:03:7b:39:bb:73:
b0:05:3a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:27 2023 by rpki-client on console-ams.rpki-client.org