Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WTUgSSweQmiMP43rEIpaHvRDMKE.roa
File: WTUgSSweQmiMP43rEIpaHvRDMKE.roa (raw, json)
Hash identifier: qXe6NkTOe/fhLoJd/zWx2aLjnQADxCzFphWTypkw75s=
Subject key identifier: 59:35:20:49:2C:1E:42:68:8C:3F:8D:EB:10:8A:5A:1E:F4:43:30:A1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FD9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WTUgSSweQmiMP43rEIpaHvRDMKE.roa
Signing time: Sat 22 Oct 2022 11:15:21 +0000
ROA not before: Sat 22 Oct 2022 11:15:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.16.0/20 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8153 (0x1fd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Oct 22 11:15:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=593520492C1E42688C3F8DEB108A5A1EF44330A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:cc:22:b9:8c:48:ef:67:3e:a0:bd:eb:8d:
91:12:b8:a9:ee:cd:a6:cc:ce:de:76:a9:57:7e:cd:
34:f7:98:ab:1d:ef:5c:4a:85:b1:b0:e2:c2:e7:5f:
07:8b:d0:89:75:0f:76:92:e7:a3:cc:49:f8:3e:07:
b6:71:a1:d1:3a:7d:77:57:2f:d5:d5:39:a2:3a:e7:
09:38:29:6c:c1:25:59:81:f4:a2:19:4a:76:64:b5:
55:0f:54:ef:56:95:45:c3:68:f7:6f:48:bd:32:d1:
c7:d5:83:46:af:b8:4b:b3:2e:a3:c1:c3:21:33:94:
93:51:07:46:89:9a:4c:91:da:e8:1e:5b:56:7e:be:
7b:2e:12:d0:dc:d2:52:76:9b:bc:59:45:17:3f:28:
c0:94:9e:1a:46:64:9f:e9:76:af:57:a1:57:81:58:
13:33:47:15:a4:72:31:b9:9c:14:c0:55:5b:d4:b6:
3a:15:14:21:a8:79:d3:dd:1f:cd:40:3f:8b:35:b4:
53:73:b7:ff:d2:af:2d:48:b0:93:3f:f0:f1:5b:8b:
dd:46:c1:1c:f8:e8:dd:8c:56:66:7a:56:7d:6e:c3:
40:fb:2c:e4:f8:14:c2:a9:66:97:78:62:4c:8a:4e:
17:21:a5:a6:53:0b:1c:67:52:28:e7:76:a9:af:44:
fa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:35:20:49:2C:1E:42:68:8C:3F:8D:EB:10:8A:5A:1E:F4:43:30:A1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WTUgSSweQmiMP43rEIpaHvRDMKE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.16.0/20
Signature Algorithm: sha256WithRSAEncryption
7b:75:35:3e:52:70:15:15:33:98:fe:c3:3d:5a:f4:7a:ed:6b:
e9:62:cc:b2:af:2c:1e:65:0c:48:da:01:70:67:ab:78:a9:2e:
44:37:dc:09:3c:80:98:b5:b8:0d:5f:dc:6d:e5:6a:b3:bf:3b:
5d:07:28:5a:4f:bc:5b:46:a0:84:56:e7:bb:2d:7e:66:30:a3:
eb:a1:1b:22:05:71:06:38:c1:35:59:a5:2a:d7:74:c1:55:a5:
ab:1a:28:c9:ac:3f:48:90:5e:81:5f:d3:06:9f:d8:f0:5e:bb:
a2:82:06:7b:18:cc:df:3a:4b:a5:69:b3:d7:26:da:e4:8f:37:
a5:64:ef:5a:43:76:9b:d8:8d:36:fd:5a:79:f8:a4:53:37:b5:
45:8f:59:8b:ae:39:3e:78:9b:88:9d:a4:9d:2e:79:20:4f:8f:
6a:f4:ef:bc:2a:2d:a9:22:ac:5e:cd:76:fa:17:0c:07:e9:34:
98:ca:e9:8e:50:17:2f:1e:e0:cd:c2:b1:db:c3:3e:d6:54:03:
c8:df:ef:71:71:55:ea:b6:0b:0f:7d:92:a3:cc:00:ea:9f:04:
30:6f:46:c4:bc:90:b0:a9:7b:7a:3e:0a:32:45:34:39:28:b9:
2d:3e:e8:4a:57:03:a2:e1:c0:36:49:bf:af:33:cc:83:7e:d8:
5f:0d:03:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:31 2023 by rpki-client on console-fra.rpki-client.org