Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U62icpW-NACsyS_kZC8F4_mEiRQ.roa
File: U62icpW-NACsyS_kZC8F4_mEiRQ.roa (raw, json)
Hash identifier: 9s37BMY5lAdBpK5qRakNsBrGQkTHWRf7I/irJ5GzcVk=
Subject key identifier: 53:AD:A2:72:95:BE:34:00:AC:C9:2F:E4:64:2F:05:E3:F9:84:89:14
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2341
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U62icpW-NACsyS_kZC8F4_mEiRQ.roa
Signing time: Fri 25 Nov 2022 04:42:15 +0000
ROA not before: Fri 25 Nov 2022 04:42:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.108.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9025 (0x2341)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=53ADA27295BE3400ACC92FE4642F05E3F9848914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5a:67:4e:e5:ba:e8:36:46:80:de:b2:4b:45:
2f:13:64:dc:ae:04:e1:c8:14:f3:86:6b:f6:39:24:
41:48:3e:eb:73:bc:67:cf:9e:c6:f2:3e:b4:e3:f7:
f5:c0:fb:0d:24:84:d5:f2:73:57:80:50:3d:47:03:
e4:c5:0b:14:f9:00:3e:d7:06:9e:a7:c2:db:ca:d3:
ba:20:fd:45:6a:5c:8e:e6:67:03:2b:45:35:72:4d:
0b:5d:0a:cb:01:2e:c9:5d:47:3e:70:38:38:9d:be:
34:73:31:79:09:dd:ab:8b:fc:3c:ee:26:8e:87:4c:
2e:d5:fd:1c:81:bc:79:a6:4e:b5:9a:8a:fd:0f:1e:
b8:a9:d8:5c:90:a0:06:4c:a9:34:2f:b9:09:50:53:
c3:c9:38:ad:3a:44:0b:25:35:da:1a:7f:67:c7:16:
7f:06:b5:4f:ca:d7:4a:cf:0a:35:5b:bb:13:e1:e3:
a1:e1:84:e4:3d:4a:f8:54:04:9e:63:b5:d3:1a:cd:
86:4d:68:e4:49:04:91:03:b8:7f:46:a8:38:61:eb:
3b:37:bd:23:61:db:9b:9f:c2:40:79:65:e2:63:59:
1a:a3:fd:9c:c6:d0:5e:a2:6f:8b:db:a9:9d:8a:00:
3e:41:ab:f6:d6:f1:08:bd:10:7a:bb:41:e0:bf:ed:
5c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AD:A2:72:95:BE:34:00:AC:C9:2F:E4:64:2F:05:E3:F9:84:89:14
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U62icpW-NACsyS_kZC8F4_mEiRQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.108.0/22
Signature Algorithm: sha256WithRSAEncryption
05:55:b6:fe:b1:de:2e:fd:98:86:0f:43:ee:40:43:26:a5:af:
f4:2e:b1:0b:56:36:56:c1:51:29:fb:be:f3:5e:89:c1:3d:ad:
e1:af:12:c3:7c:c3:bb:e1:81:fa:52:cb:14:e3:0d:df:c9:ea:
6e:f8:3f:2d:7c:24:cd:a9:2c:1d:f0:22:9e:66:fa:55:32:cb:
b8:7a:56:8b:45:05:ca:b9:1a:3d:20:3a:7e:ba:87:3c:c2:bb:
f1:55:c1:95:b4:51:6a:79:12:82:47:0b:87:81:91:2f:97:20:
aa:cb:f3:4e:da:e3:b1:dd:40:f9:77:c8:7d:da:7a:e1:fd:2d:
dd:bf:c2:ac:cf:f5:58:00:67:25:45:89:fa:9b:f9:af:67:a3:
18:20:27:7d:90:20:3c:25:29:37:9c:29:53:76:7a:4b:00:1b:
23:c0:27:0d:98:63:e0:d8:64:2b:51:35:e1:f8:ab:8b:a8:d0:
49:0d:55:e8:ff:db:d0:50:07:9e:8f:9c:b2:a7:86:62:ad:b4:
6a:25:4c:51:13:34:93:03:b6:95:20:c1:8f:a1:14:16:29:23:
48:f1:91:71:17:cd:24:ef:ee:27:42:04:6e:fd:b3:81:e2:64:
88:3e:b4:c8:06:0e:c4:85:a3:79:1c:5b:38:f6:11:1b:51:02:
28:e4:b4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:28 2023 by rpki-client on console-ams.rpki-client.org