Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tazp4duUatc0u6AeFGaALRhy9jQ.roa
File: Tazp4duUatc0u6AeFGaALRhy9jQ.roa (raw, json)
Hash identifier: I1netkPRCwAs2OpDsiALNtlkGap4o0CCXSOKVzU5/6o=
Subject key identifier: 4D:AC:E9:E1:DB:94:6A:D7:34:BB:A0:1E:14:66:80:2D:18:72:F6:34
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22EB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tazp4duUatc0u6AeFGaALRhy9jQ.roa
Signing time: Fri 25 Nov 2022 04:41:48 +0000
ROA not before: Fri 25 Nov 2022 04:41:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.16.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8939 (0x22eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4DACE9E1DB946AD734BBA01E1466802D1872F634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:35:98:d1:e3:e2:55:e5:17:ff:67:c4:6f:
c7:ab:f0:52:60:79:f2:a0:c4:cc:37:ba:a8:f6:bb:
af:b2:cc:5d:93:d1:65:e1:ba:96:ac:c3:20:e4:29:
7e:2b:3c:94:82:5c:4c:fb:5c:e2:87:92:1c:1d:a4:
fc:60:ed:f2:93:8c:99:67:61:31:7a:c6:5f:53:03:
14:dc:f3:61:6d:c4:ac:16:2b:53:4c:ba:cb:9e:7c:
d7:e6:39:4f:cf:d8:eb:a5:ed:8e:20:a3:6d:db:f2:
4e:88:9b:5b:54:55:b8:88:31:ad:40:d8:15:35:0a:
fc:90:17:26:74:46:e1:76:80:93:77:ae:94:30:cd:
18:c2:c7:2d:29:73:40:35:fb:52:8f:58:f8:3a:3e:
90:12:69:29:5d:74:0d:fe:0c:0f:d9:88:db:90:eb:
29:96:13:99:e5:51:36:e5:73:e3:a7:fc:ac:38:76:
47:1f:e3:d8:ba:35:d6:62:46:37:ab:16:95:ef:da:
89:ff:55:24:a0:1d:71:2a:d8:01:34:bc:a8:4e:83:
45:60:8f:12:e6:ef:4f:16:d5:27:1c:44:07:f1:d5:
61:6a:3c:8e:42:0c:75:3b:1e:f1:98:e6:0a:a5:ac:
2b:ee:af:08:75:95:b0:9b:01:6a:e3:90:ba:57:c0:
0f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AC:E9:E1:DB:94:6A:D7:34:BB:A0:1E:14:66:80:2D:18:72:F6:34
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Tazp4duUatc0u6AeFGaALRhy9jQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.16.0/22
Signature Algorithm: sha256WithRSAEncryption
03:0b:8c:7b:18:ac:27:39:98:64:07:2a:66:c5:e6:db:4c:79:
87:40:10:ba:a8:c1:d6:26:c5:5b:33:9e:d7:71:17:d8:ef:1f:
70:c2:ef:90:c5:6f:0d:82:c3:c2:a7:f4:a5:0c:be:cf:e5:6f:
b2:e4:9f:17:d3:03:94:10:8c:37:5a:e9:04:8a:da:ee:da:bd:
fd:ef:c8:69:86:d7:78:c8:2f:66:03:c6:81:75:69:a6:11:db:
08:dd:53:93:69:5f:52:98:2e:0a:b7:55:4b:42:92:fb:e7:08:
f2:bd:a6:30:ac:c4:4b:00:67:77:07:d3:82:46:ab:09:6a:16:
5a:ed:80:0a:ff:5c:ce:13:cf:b3:90:65:a6:7c:ff:0d:3a:fa:
40:45:a1:95:c0:9b:e0:66:c0:bd:74:78:6e:42:dd:17:39:6e:
e7:75:6c:ef:3f:cf:6d:c1:de:7e:17:99:f7:3c:e5:c1:3f:8c:
ed:28:83:a5:b0:23:af:30:60:9e:7b:41:30:58:79:25:e1:71:
d8:02:80:24:25:bf:30:58:ed:b1:8d:c9:07:13:d0:25:9d:6a:
de:e6:1c:3d:a3:cd:64:0c:2d:4e:25:63:7b:97:45:20:5d:f8:
eb:da:e6:1a:ba:4b:5f:78:df:15:42:b1:fd:aa:57:fd:88:37:
cf:08:3a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:05 2023 by rpki-client on console-fra.rpki-client.org