Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SNfaVf8C2jfsTe-gUm5-r-AqUcQ.roa
File: SNfaVf8C2jfsTe-gUm5-r-AqUcQ.roa (raw, json)
Hash identifier: lEeWCP1pZgtZlZSrEQX5EjybIxnddd13pa3iuSt8fmI=
Subject key identifier: 48:D7:DA:55:FF:02:DA:37:EC:4D:EF:A0:52:6E:7E:AF:E0:2A:51:C4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FD2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SNfaVf8C2jfsTe-gUm5-r-AqUcQ.roa
Signing time: Mon 17 Oct 2022 08:14:53 +0000
ROA not before: Mon 17 Oct 2022 08:14:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.32.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8146 (0x1fd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Oct 17 08:14:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=48D7DA55FF02DA37EC4DEFA0526E7EAFE02A51C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:70:01:4f:4d:aa:9c:3a:b8:5d:aa:02:73:41:
8b:b4:e0:e1:5e:b0:19:c6:1a:b4:1e:db:02:49:b3:
24:c3:30:4c:c8:b2:0b:61:c8:8a:24:98:3b:5b:97:
9e:6b:ec:af:e3:c3:54:69:c6:4b:f4:40:48:29:ac:
92:bb:ff:76:9e:66:47:d4:2d:51:f7:49:b7:22:63:
e9:df:3f:3f:e5:ac:29:39:0e:fd:cb:28:ba:61:99:
f1:f5:69:f3:b3:f7:94:f0:d5:34:67:b4:a3:fd:b8:
3c:8a:e9:de:8d:cb:55:a6:52:88:07:de:fe:27:8a:
2e:90:15:58:79:f9:c6:10:af:f7:4f:53:06:bf:1c:
99:10:3a:d2:fa:4b:6c:4c:7e:a9:52:80:f6:0b:1f:
42:9d:07:1b:42:32:2c:91:a8:3f:3c:b5:6b:38:d1:
3a:ff:4d:ce:74:3b:ac:14:de:be:40:1d:67:05:02:
27:36:27:83:c9:4c:a0:0f:cb:17:c5:66:87:cf:ef:
0a:ec:f0:6b:05:72:bd:2b:14:ea:b1:16:63:29:63:
ea:2c:a1:f6:c7:db:c9:d0:fd:2c:0d:ae:07:ee:b0:
7a:28:74:f2:a4:9c:c3:e0:d5:c1:a5:ce:da:17:84:
e9:0c:77:a6:55:fb:6f:31:6c:72:90:ef:a5:56:89:
30:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D7:DA:55:FF:02:DA:37:EC:4D:EF:A0:52:6E:7E:AF:E0:2A:51:C4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SNfaVf8C2jfsTe-gUm5-r-AqUcQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.32.0/21
Signature Algorithm: sha256WithRSAEncryption
b8:0e:21:e9:2a:75:83:9f:f1:bc:cc:62:b2:a6:cb:90:f1:fc:
c4:9b:40:82:65:47:33:f2:b8:32:ed:bf:de:a4:63:86:a1:55:
c5:57:3c:74:76:d0:43:f8:9c:f4:e1:d0:fc:eb:fb:5a:85:23:
ba:e4:88:18:4b:e8:4b:55:c5:28:27:e4:d4:7a:95:27:29:d3:
4f:8c:d6:6f:df:92:ed:7a:cb:62:43:1c:5f:72:b0:4f:42:13:
c1:5b:74:8c:85:ec:98:e9:2a:68:20:87:d0:70:cc:4a:c6:8a:
1d:1d:63:89:ed:ce:c4:3e:df:57:22:e9:c6:86:c5:61:32:79:
1e:e0:77:be:a3:7f:d4:f2:65:23:2a:5f:43:bf:4b:a8:70:f6:
7b:cb:72:db:5f:5d:86:f5:93:fc:9e:f6:24:27:fe:c2:18:bf:
8b:f3:f7:2a:15:a4:66:ed:af:29:4a:1d:1c:07:cd:af:aa:f9:
30:0d:78:2f:2a:7d:c1:22:b9:cc:42:bf:d8:a7:9c:f9:c7:74:
6e:e7:2a:c7:ee:7b:0f:bd:56:4c:4e:a2:b9:8a:60:0e:5f:20:
ea:5e:4d:69:d9:06:40:72:07:04:e8:6a:fa:75:e7:b1:7c:f6:
29:e6:c2:88:4f:73:8c:d2:8f:75:11:e1:1a:d2:8a:0b:85:64:
47:7b:95:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:19 2023 by rpki-client on console-ams.rpki-client.org