Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WEqoxT9nDEuL6TKo79XckO4WQ1k.roa
File: WEqoxT9nDEuL6TKo79XckO4WQ1k.roa (raw, json)
Hash identifier: 1a37t48RcyDKyf8/5kVWiUilmHgQSoro+9MRNN6Ws0M=
Subject key identifier: 58:4A:A8:C5:3F:67:0C:4B:8B:E9:32:A8:EF:D5:DC:90:EE:16:43:59
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 233D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WEqoxT9nDEuL6TKo79XckO4WQ1k.roa
Signing time: Fri 25 Nov 2022 04:42:14 +0000
ROA not before: Fri 25 Nov 2022 04:42:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.8.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9021 (0x233d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=584AA8C53F670C4B8BE932A8EFD5DC90EE164359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:df:c0:7d:08:78:70:b2:e8:d0:b0:4a:db:51:
39:bf:38:c8:af:e9:53:ec:11:44:b3:4e:a0:57:1a:
04:65:b7:62:b0:1f:b7:0d:9f:a7:7c:b4:9b:f6:2e:
eb:96:9d:81:88:72:44:1a:12:26:19:a8:de:09:dd:
ab:ee:8c:e2:7b:06:7a:9d:63:6c:db:f0:0a:06:55:
5e:00:84:a3:76:e9:d4:08:a8:5f:42:19:67:ee:ab:
7e:01:0a:c7:8a:3c:3e:a0:0d:83:42:bf:cc:54:28:
4f:ca:46:bb:92:ef:9b:e5:3b:6e:da:28:2e:a5:1d:
8b:a9:55:92:6f:fe:e2:9f:83:55:4e:05:fd:c3:22:
03:6d:44:11:f7:6d:7b:a5:26:23:1e:66:3a:45:c4:
f7:e2:09:67:fc:ad:9c:93:9c:f7:1d:1a:f6:20:37:
5f:5c:82:94:1d:a5:86:eb:a4:bd:d1:9e:08:72:19:
f2:7a:42:7e:69:b0:2f:ee:e8:1e:fc:3d:7a:ed:5c:
6f:df:73:78:04:42:67:35:ba:77:6b:09:cf:b3:5e:
f7:08:13:5b:ef:e8:eb:d0:52:5e:0a:a4:c9:1c:8a:
19:99:e6:0b:1c:0b:d0:14:27:9e:9e:29:6b:6d:67:
46:fd:76:bd:38:dd:c8:cc:61:8d:80:4f:64:76:cf:
b9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4A:A8:C5:3F:67:0C:4B:8B:E9:32:A8:EF:D5:DC:90:EE:16:43:59
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WEqoxT9nDEuL6TKo79XckO4WQ1k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.8.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:63:91:53:4f:8f:f1:ce:37:fc:12:95:d6:97:a9:e1:69:73:
ca:b3:62:8e:59:a7:a9:b8:ea:86:be:df:f6:e7:fb:48:a1:d9:
74:78:c2:12:be:ec:d0:6e:ee:d1:8c:e9:0d:74:e4:09:d4:c8:
e7:5d:ec:44:ea:e1:a7:95:7a:bf:12:7b:d3:ac:9c:d0:4f:0d:
27:0d:b2:98:7e:a0:0c:25:29:00:d5:c8:21:11:f7:be:a0:3d:
3c:8c:68:5a:d0:79:70:ae:cd:e6:9e:8f:ab:b3:db:d6:6a:b4:
1f:1a:38:9f:76:0a:2d:4f:ab:4b:67:cb:94:23:9a:76:a0:a1:
37:13:4b:cc:3d:46:17:25:28:45:82:31:96:7a:e2:b8:32:10:
a1:f4:c8:6c:0f:1d:38:51:b2:75:6d:85:ac:41:00:9f:a3:95:
f2:47:21:af:8c:3c:83:4a:ef:a8:80:42:5d:83:15:9f:da:9b:
f7:27:d6:ed:ed:26:b7:90:2f:be:84:83:be:64:9c:49:2b:6e:
74:9c:c4:7c:ce:18:8f:91:c9:aa:41:42:a9:ae:3e:33:3c:b4:
03:46:cb:40:50:1b:8f:c0:e6:15:ec:76:d7:70:93:31:d1:20:
20:21:f1:33:1e:09:5b:7a:c5:91:56:9c:ee:43:88:e4:4e:4e:
be:90:db:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:06 2023 by rpki-client on console-fra.rpki-client.org