Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S6GrTYWDsCQudfvDqLgOo2B8FaE.roa
File: S6GrTYWDsCQudfvDqLgOo2B8FaE.roa (raw, json)
Hash identifier: 9oWSujesQpRtx+d9BIg//TPX05E3Vgv6+EINW/wIzXo=
Subject key identifier: 4B:A1:AB:4D:85:83:B0:24:2E:75:FB:C3:A8:B8:0E:A3:60:7C:15:A1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2136
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S6GrTYWDsCQudfvDqLgOo2B8FaE.roa
Signing time: Fri 25 Nov 2022 04:39:38 +0000
ROA not before: Fri 25 Nov 2022 04:39:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.56.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8502 (0x2136)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4BA1AB4D8583B0242E75FBC3A8B80EA3607C15A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:15:c6:1e:34:1a:77:ae:26:23:cf:5d:69:
e8:f3:47:f4:ab:fe:d9:67:82:51:dc:31:2d:8b:d4:
82:3d:cf:4e:e3:e8:9b:20:14:89:55:40:bf:a9:a1:
2e:0e:d4:3d:9f:a7:8f:ef:39:28:65:88:aa:27:8f:
78:10:59:5f:28:61:62:7c:49:fa:df:73:b0:03:d0:
83:e0:6f:3a:b4:a6:f0:d5:74:e2:2c:dc:ca:a1:35:
62:75:d3:48:20:18:70:f1:33:65:52:03:3a:1b:7e:
da:41:2f:f1:ed:b5:44:68:8a:00:7f:dd:b7:b9:b3:
91:be:0f:d7:4c:3b:9e:19:f2:80:a1:8f:ff:a3:0f:
b7:95:9d:4d:4f:b3:cc:6f:fd:00:68:a8:3c:f2:6f:
1f:30:e7:eb:fc:24:1c:9a:66:ce:bb:ca:d5:89:41:
3d:07:ae:72:fd:ab:bf:18:71:80:bd:15:eb:34:0d:
fa:20:b0:c2:2c:ae:33:c3:a4:fa:f7:56:d5:63:21:
48:dc:84:8b:e8:ed:5a:78:1e:1b:ba:43:2e:57:4b:
2f:f3:9e:1f:a3:26:8a:bb:b8:54:38:07:41:8b:91:
00:90:38:e3:28:45:7d:b7:7b:42:1f:19:d0:c0:b4:
a0:e4:a8:04:94:8b:bd:a7:7b:e8:e4:80:55:b0:da:
33:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A1:AB:4D:85:83:B0:24:2E:75:FB:C3:A8:B8:0E:A3:60:7C:15:A1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S6GrTYWDsCQudfvDqLgOo2B8FaE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.56.0/21
Signature Algorithm: sha256WithRSAEncryption
49:12:4a:65:0c:4f:9a:7d:01:5e:54:61:9a:53:c3:88:da:55:
0d:12:38:9b:6d:f2:67:65:7b:79:6a:85:1b:3e:c7:52:e0:d3:
cf:50:7b:18:dd:a4:1b:51:51:af:47:93:57:17:86:7b:80:c1:
38:8d:23:f9:9b:54:dc:00:13:1a:64:d2:bf:36:3b:88:e5:9c:
81:75:ee:72:7f:55:b7:1e:b5:2c:43:f1:da:bb:38:5c:90:bc:
cf:7e:0c:df:32:68:d7:67:63:6d:69:42:9a:f6:11:18:83:c8:
81:54:bb:ac:79:0c:1b:98:f2:23:2f:d4:dc:cc:a6:25:fd:63:
e7:ff:dc:fd:2f:17:e3:44:93:c7:47:b5:7d:88:ed:42:4e:da:
14:f1:f8:81:9b:d7:5b:b6:e2:04:31:99:f2:d4:da:e9:b2:78:
db:bf:72:86:df:f2:0b:6b:df:c8:65:2b:89:05:58:99:23:50:
22:b7:06:fc:f7:4c:ae:ba:57:76:e9:91:55:df:60:bc:2b:f0:
c5:b2:b9:56:fc:b7:e5:13:b5:75:7c:3e:53:81:cc:58:78:d5:
75:5c:bf:4b:cc:25:a3:33:52:e4:55:58:96:40:4c:a1:75:6b:
52:9a:4b:36:f1:d2:60:e9:5d:3a:b9:bf:9f:86:3b:80:c8:c7:
92:9c:27:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:05 2023 by rpki-client on console-fra.rpki-client.org