Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XJogbodFeGxovngrR31V6_ubXgE.roa
File: XJogbodFeGxovngrR31V6_ubXgE.roa (raw, json)
Hash identifier: TYY1nU3Q795v5in4F7tWrA6BD4yZ/kFKHA4ibEpaBoU=
Subject key identifier: 5C:9A:20:6E:87:45:78:6C:68:BE:78:2B:47:7D:55:EB:FB:9B:5E:01
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21D3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XJogbodFeGxovngrR31V6_ubXgE.roa
Signing time: Fri 25 Nov 2022 04:40:27 +0000
ROA not before: Fri 25 Nov 2022 04:40:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.192.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8659 (0x21d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5C9A206E8745786C68BE782B477D55EBFB9B5E01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:47:39:85:1e:48:33:4a:28:4a:65:dd:52:e9:
b6:1f:2d:74:0f:0f:4d:2a:5d:fb:5b:dc:bc:13:17:
d3:00:75:71:d9:9e:3d:ae:44:bb:a1:ec:eb:97:8e:
b6:47:20:7d:73:d8:c6:f5:eb:4b:0d:fe:11:e8:c5:
e1:fd:f9:31:6f:64:b4:8f:94:17:0d:0e:7c:d0:59:
89:32:ee:b9:18:49:d4:9e:18:59:4a:32:2b:c1:ea:
f9:b3:b7:04:b6:ca:64:68:ef:1e:25:b2:a1:5b:26:
75:fa:71:5c:2c:42:79:06:ed:d1:d4:b7:9c:89:bc:
de:f6:94:1c:98:45:46:da:ca:eb:1c:96:4e:b1:42:
a2:f3:e1:08:b1:2a:45:53:7f:d5:c4:81:b2:99:99:
98:5d:3d:4d:45:21:45:12:d8:92:87:7b:79:50:ac:
ed:aa:5a:5d:99:55:57:db:98:1d:02:13:1f:69:1e:
1e:ed:e5:1f:30:92:bb:f1:17:bc:94:52:35:05:5d:
e6:78:1b:05:7d:6e:09:29:58:64:12:de:ae:b0:11:
68:87:21:28:22:93:16:6a:b5:60:1b:dc:bb:46:e2:
81:e7:20:e7:fa:cd:e7:a6:9a:a7:12:f4:b6:cb:b5:
1c:26:0f:8d:25:3d:e6:93:f6:56:ed:16:f2:d1:08:
40:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:9A:20:6E:87:45:78:6C:68:BE:78:2B:47:7D:55:EB:FB:9B:5E:01
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XJogbodFeGxovngrR31V6_ubXgE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.192.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:46:32:e6:42:32:f2:95:07:6d:68:91:c9:9a:ab:0a:3d:ff:
75:e0:40:14:ed:b6:26:0c:10:1f:95:ef:2f:cf:6d:77:08:22:
7e:fe:22:7b:c9:0d:fe:09:1d:a9:ff:d4:4c:57:5b:d8:46:bd:
3b:65:58:d4:e4:cc:8d:88:b1:6d:5f:be:aa:d5:8f:75:15:ee:
ed:d7:5f:9e:f2:7c:3d:7a:e8:ff:a4:de:d0:93:3a:03:b0:08:
2c:ff:a9:60:03:97:a8:e1:cd:72:21:48:37:11:02:91:c8:9d:
32:23:c0:ce:40:8b:e8:23:cf:30:0a:c1:63:e6:27:16:ba:4b:
29:bf:78:d0:84:9f:41:0a:d7:02:06:6a:8d:e9:32:04:53:05:
5d:a6:52:b8:48:6e:59:f5:ca:db:2f:b1:55:74:db:00:83:3f:
6d:5a:91:ce:29:44:63:46:1a:ed:99:f9:c6:cd:38:a1:36:67:
d4:dc:3b:32:20:98:ca:3b:12:29:75:b6:c4:38:38:b7:ce:2b:
9a:28:b9:5c:32:88:bc:74:b5:70:5e:18:2a:67:cd:db:81:5f:
db:52:66:6d:08:fd:17:5e:0d:15:0e:1a:7d:f0:52:c2:0d:47:
83:89:47:0c:e0:7a:c2:d9:57:82:ce:2f:52:67:d3:68:28:04:
61:99:76:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:06 2023 by rpki-client on console-fra.rpki-client.org