Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VcP6ZOL_xUNjpDslBwQGMjRT1Ps.roa
File: VcP6ZOL_xUNjpDslBwQGMjRT1Ps.roa (raw, json)
Hash identifier: h2fNcC128PEQfQhBmSe0dUiKgHZj4r9r0zqBWABR2dA=
Subject key identifier: 55:C3:FA:64:E2:FF:C5:43:63:A4:3B:25:07:04:06:32:34:53:D4:FB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21D2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VcP6ZOL_xUNjpDslBwQGMjRT1Ps.roa
Signing time: Fri 25 Nov 2022 04:40:26 +0000
ROA not before: Fri 25 Nov 2022 04:40:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.208.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8658 (0x21d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=55C3FA64E2FFC54363A43B25070406323453D4FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:b3:56:5f:93:62:83:8f:24:19:73:b8:71:
82:9c:3f:a8:f2:6a:78:3d:c0:41:68:17:73:00:ef:
6a:b2:95:fc:cf:48:e7:8e:50:a6:9d:72:e8:e4:50:
f8:7f:a1:e3:7c:6b:1b:a6:5c:67:ea:e8:fa:50:2a:
f1:c9:fb:84:d4:75:46:37:f8:08:c1:9c:d5:3b:ae:
27:37:fa:05:82:9f:b7:6f:56:9e:2e:33:99:45:48:
4a:4e:4c:11:0e:88:7e:35:98:14:ce:b3:11:b8:4d:
bf:6a:8e:b9:ad:8e:7a:1a:7d:ac:4f:ba:43:bb:cf:
2d:34:81:19:63:48:e2:e8:db:53:80:3d:7a:32:7e:
03:bb:cd:88:d6:3e:4a:f9:9e:76:c1:38:5e:74:fb:
72:a2:fa:ef:1e:52:8c:a5:42:40:ef:b4:68:61:fe:
c7:97:b5:3f:e2:73:c5:2c:9d:03:b9:bf:66:2d:08:
f0:53:a4:a7:00:45:5a:a8:a1:28:c5:fb:10:bd:cc:
08:90:32:5f:33:cf:7b:14:0c:02:f8:f8:71:8e:ab:
8e:aa:1a:c5:6c:3b:19:77:15:bf:c9:f7:7f:85:b0:
45:78:72:06:24:66:27:4c:0c:c0:c1:78:d5:a9:da:
3d:86:c9:cc:8f:64:a9:68:67:97:52:29:4f:95:b4:
ab:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C3:FA:64:E2:FF:C5:43:63:A4:3B:25:07:04:06:32:34:53:D4:FB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VcP6ZOL_xUNjpDslBwQGMjRT1Ps.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.208.0/21
Signature Algorithm: sha256WithRSAEncryption
45:c3:0a:1d:c7:21:65:f1:c5:ef:eb:8a:7e:52:19:0f:e2:e4:
12:b4:d5:1a:6f:ee:1b:3c:96:0d:36:09:2d:1e:a8:77:86:86:
a3:51:9d:cb:c1:c7:1d:1a:9f:13:88:6f:a2:d5:31:f3:01:8f:
4f:63:44:95:23:87:ee:f6:5d:af:d0:0a:0b:31:06:12:8b:68:
e9:0a:47:f3:34:29:02:ec:26:3a:69:fb:94:4b:48:14:f6:ea:
64:a9:51:37:70:04:6c:25:90:69:83:4b:5f:43:52:28:a4:22:
69:de:84:24:07:15:2e:bd:c9:41:eb:bd:43:69:ad:75:48:08:
e0:a1:59:cd:5f:d4:64:d8:66:2d:2d:56:a0:48:00:5a:33:f4:
73:ee:b4:57:d7:92:b2:fa:b7:f8:e6:67:f3:03:8f:79:83:80:
29:74:d3:bd:e6:11:5e:58:1e:21:7e:7a:6d:4e:60:8b:e7:1e:
17:51:6d:55:2f:60:c2:a6:6e:cc:f8:00:1a:f6:40:73:01:55:
c1:81:c8:3a:ae:22:1e:a7:9c:42:55:2c:b1:5e:ed:43:66:56:
22:4f:0c:80:46:50:11:55:bd:cf:56:3b:26:c8:d0:04:cd:44:
e5:c5:e3:71:6f:08:09:9b:b1:2c:27:6e:50:b5:3b:4a:f1:cd:
f9:ce:8f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:05 2023 by rpki-client on console-fra.rpki-client.org