Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U7lsVzsGbQ_kBbtiv7PIWK-TCT4.roa
File: U7lsVzsGbQ_kBbtiv7PIWK-TCT4.roa (raw, json)
Hash identifier: y8i2Y4RvX3BNlf3jWbmMxfRnlcSniR8PGRxrQ2gOiXw=
Subject key identifier: 53:B9:6C:57:3B:06:6D:0F:E4:05:BB:62:BF:B3:C8:58:AF:93:09:3E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U7lsVzsGbQ_kBbtiv7PIWK-TCT4.roa
Signing time: Thu 15 Sep 2022 02:46:04 +0000
ROA not before: Thu 15 Sep 2022 02:46:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.192.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=53B96C573B066D0FE405BB62BFB3C858AF93093E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:7a:bf:67:68:be:a1:d4:ae:f0:79:d0:5d:
48:72:5f:7b:66:1c:a2:c5:87:99:03:85:d7:43:01:
c8:cd:e8:37:2a:1c:7b:50:01:60:0d:e9:42:b4:ff:
8c:e1:7a:ae:67:d7:08:1e:ba:23:85:ad:bb:43:98:
2d:d5:17:b6:e5:3a:87:c3:79:fc:8a:bc:b4:60:2d:
0c:56:77:4b:6d:f8:f8:70:cf:4c:b9:d4:c9:16:c8:
a2:09:c2:9a:1e:20:6a:49:5b:a4:67:d2:32:7f:51:
34:20:f1:82:4a:c4:06:b4:f4:73:b2:16:3d:2f:38:
b1:cd:0a:1a:bb:77:21:f3:ba:11:a5:cf:65:2b:76:
59:8d:e6:03:9b:50:c3:6e:e8:5c:71:51:25:c9:d9:
57:84:d7:68:0d:8c:a4:36:55:3c:f1:8f:9d:11:c0:
eb:ae:9e:49:b7:59:1c:67:23:39:d4:7c:70:a5:d2:
db:d7:17:20:f7:1f:d6:a0:c8:b5:a2:d9:22:12:70:
ef:ed:63:da:88:05:ae:34:6a:a7:da:79:6e:69:5b:
38:d2:6d:68:0e:cc:a9:d1:65:e5:4a:76:58:ba:04:
e1:65:04:89:ca:17:9e:cb:a9:68:d4:17:14:34:6e:
50:ee:aa:51:fb:2f:b2:f4:03:79:d3:23:47:80:16:
48:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B9:6C:57:3B:06:6D:0F:E4:05:BB:62:BF:B3:C8:58:AF:93:09:3E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/U7lsVzsGbQ_kBbtiv7PIWK-TCT4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.144.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:d2:40:e3:35:f3:79:ca:54:49:0c:08:69:87:9a:69:9c:d4:
54:7f:f3:70:68:80:45:d4:67:1e:45:ed:85:59:8d:2a:b4:25:
54:76:12:e9:f7:ca:c8:35:ce:01:3c:39:69:72:2b:e4:b0:f9:
ae:d2:75:03:8d:36:58:62:c2:4e:7a:dc:2a:9f:5d:85:e3:c1:
2d:43:01:46:c1:d3:87:58:07:57:12:a4:7f:6f:53:e2:42:63:
03:77:99:d8:4c:f5:20:05:1f:84:29:02:47:00:b6:2c:aa:de:
68:e5:bf:e8:fe:27:8a:b1:a7:b2:95:a9:b1:6b:44:dc:e1:5d:
b3:e5:68:9a:83:22:38:e1:89:4b:01:6e:38:b3:d3:3e:89:24:
d2:a1:58:88:6b:1f:d0:9b:91:9b:f1:2f:db:7b:c6:64:93:71:
05:69:6a:b8:bf:8c:f8:a7:08:ba:ca:14:60:c4:44:ed:79:86:
53:7c:83:ff:d7:63:2b:53:3e:e1:52:56:a6:42:a8:29:78:e1:
21:19:70:0b:74:5f:c0:c6:74:71:e5:2f:27:f0:30:39:8c:7f:
fe:3e:45:5c:e3:0b:f0:25:59:af:bd:ea:d7:60:f8:d6:ae:66:
e6:92:10:d6:d9:14:f6:a9:44:0a:c4:2e:1b:a1:7b:87:79:7a:
aa:6c:c9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:20 2023 by rpki-client on console-ams.rpki-client.org