Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VnIbM9iNMObV8ZwOHZtPrwTM3wk.roa
File: VnIbM9iNMObV8ZwOHZtPrwTM3wk.roa (raw, json)
Hash identifier: bySS3G0t+D6uRacMM0P60PmuvB1DNrfuTiMNH/TzMBI=
Subject key identifier: 56:72:1B:33:D8:8D:30:E6:D5:F1:9C:0E:1D:9B:4F:AF:04:CC:DF:09
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VnIbM9iNMObV8ZwOHZtPrwTM3wk.roa
Signing time: Thu 15 Sep 2022 02:45:32 +0000
ROA not before: Thu 15 Sep 2022 02:45:32 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 118.232.200.0/25 maxlen: 25
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:32 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=56721B33D88D30E6D5F19C0E1D9B4FAF04CCDF09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:62:5c:ea:b8:3c:dd:d4:71:d4:73:b5:1c:f6:
2e:27:b4:8f:b1:e9:ed:e7:1e:78:0d:03:a2:69:d6:
c3:62:f4:0a:ea:29:ad:44:9c:94:c3:94:89:51:c8:
52:65:93:e2:a5:58:f6:a8:8e:aa:5b:99:7a:41:03:
40:83:e9:e6:33:1c:ea:58:24:9d:06:79:89:5e:90:
2a:58:94:a4:99:b6:dc:f8:e5:cb:c9:10:1a:c7:5f:
6a:79:df:e8:11:06:f3:92:ce:16:21:e0:6f:4d:f8:
b0:4f:a3:36:ae:b0:18:d3:09:a3:f7:d1:ff:85:7b:
1a:e9:00:d7:f3:f0:bb:cc:b1:0d:2c:17:80:d0:34:
6d:24:92:3c:7e:d0:9a:ec:cd:c7:cd:05:80:f4:ba:
06:bd:b8:ae:14:04:2e:84:eb:28:a3:dd:1a:39:c4:
88:dd:16:d6:b5:4b:d8:31:3f:18:d0:0d:0f:5d:15:
84:6a:a8:ea:51:e4:4e:ee:15:de:d9:e4:6f:02:0c:
29:06:a4:e8:c3:22:01:09:68:70:f0:ee:df:74:06:
77:2c:5a:54:f2:68:a9:62:f0:1b:29:51:c7:89:92:
84:37:29:eb:6d:af:88:b1:17:d7:3a:67:52:1d:01:
a1:78:e1:9a:bb:6e:1c:85:55:74:ee:1b:a4:f0:04:
2f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:72:1B:33:D8:8D:30:E6:D5:F1:9C:0E:1D:9B:4F:AF:04:CC:DF:09
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VnIbM9iNMObV8ZwOHZtPrwTM3wk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.200.0/25
Signature Algorithm: sha256WithRSAEncryption
40:a5:d7:a8:a9:9a:7a:9f:ad:98:7a:8f:55:f3:4a:36:77:d1:
55:75:07:b5:9d:ec:8e:11:49:9b:c6:5d:18:35:22:98:29:02:
9c:5d:a5:b9:93:99:04:ec:8d:84:56:5b:c4:ea:f1:dc:dd:60:
9f:06:5e:98:f6:b2:72:26:e5:0e:3e:06:3d:e4:f2:6f:c6:07:
d7:1f:35:da:db:89:c2:83:39:2b:99:1b:18:b1:f2:ec:9e:28:
f8:48:a0:52:eb:79:c0:a7:1e:c5:9f:15:18:b3:99:cd:cb:aa:
d2:0f:47:db:32:f2:2b:60:f6:2e:8b:4a:ff:92:1d:64:db:c1:
75:54:90:25:34:bd:15:06:2d:48:82:92:31:68:97:56:09:d9:
23:d0:e4:b4:9f:9f:45:8f:05:7b:ed:ba:a9:71:8c:cc:91:e4:
f2:b7:78:97:55:27:36:0a:68:b5:91:47:63:1e:b2:74:70:ba:
2c:95:11:32:12:84:04:39:8d:d1:c5:38:59:ca:94:e9:e1:9e:
d6:87:ba:18:b6:cc:bb:2a:14:ab:35:4b:65:d1:0d:28:13:dd:
6a:6c:02:f7:ed:1b:fe:8a:4e:88:fd:06:df:7b:55:1a:46:00:
c8:da:3a:d9:9f:7f:e4:78:c1:6f:94:48:e3:ed:92:e9:1c:aa:
4f:d1:1e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:21 2023 by rpki-client on console-ams.rpki-client.org