Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XPrwnmxK8SLTiXbzq2SSdp4H3js.roa
File: XPrwnmxK8SLTiXbzq2SSdp4H3js.roa (raw, json)
Hash identifier: IfRU8+oG5COQMVWxYTAit2IU1OjXXct0wl1fJ3wQlA4=
Subject key identifier: 5C:FA:F0:9E:6C:4A:F1:22:D3:89:76:F3:AB:64:92:76:9E:07:DE:3B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 225C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XPrwnmxK8SLTiXbzq2SSdp4H3js.roa
Signing time: Fri 25 Nov 2022 04:41:04 +0000
ROA not before: Fri 25 Nov 2022 04:41:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.164.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8796 (0x225c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5CFAF09E6C4AF122D38976F3AB6492769E07DE3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:dc:73:bd:49:7c:e5:a9:dc:77:ed:c7:2a:35:
73:21:51:8d:e3:19:90:22:ef:b1:bb:ae:17:e9:19:
90:74:ec:b9:00:92:8a:b5:7d:bb:65:94:a8:bd:3b:
91:51:93:66:e0:d5:6e:dd:b2:89:92:48:ef:58:29:
8d:53:b1:05:58:f3:06:e6:4d:53:a1:c3:d9:74:77:
d9:e3:02:b2:b1:f7:87:ed:94:34:1d:d8:be:36:f9:
d3:e4:ba:a4:43:8f:f5:67:ae:12:23:2e:ef:10:05:
63:7d:e1:95:6c:ed:b5:60:4b:d6:48:e2:96:69:2a:
03:bc:ef:49:95:62:39:cb:cd:71:3d:f4:85:16:b3:
6e:c2:b8:aa:b3:95:db:71:20:b8:f4:5f:ae:d1:09:
97:7f:be:4e:85:b4:02:73:70:04:c9:d0:5a:4b:72:
ca:06:74:9c:04:e6:8a:76:f8:98:77:4d:4d:cf:62:
5a:84:b4:38:1b:89:73:67:28:66:f9:f4:2c:37:b4:
f1:59:6a:27:c4:1f:41:1f:f0:d6:d9:a6:84:49:ea:
29:aa:38:33:0e:a4:95:5b:67:18:13:e0:b9:19:20:
97:9f:2f:30:05:1b:47:51:f3:a1:2e:1f:39:eb:dc:
af:d4:90:50:99:b3:21:35:a7:ca:d3:d7:7d:d5:da:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FA:F0:9E:6C:4A:F1:22:D3:89:76:F3:AB:64:92:76:9E:07:DE:3B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XPrwnmxK8SLTiXbzq2SSdp4H3js.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.164.0/22
Signature Algorithm: sha256WithRSAEncryption
56:79:7e:84:c6:28:e0:46:18:56:34:8f:84:c3:16:1e:5a:d3:
e2:be:b1:ae:2a:17:b7:03:16:a4:9a:9a:ce:15:b5:ce:a5:63:
f0:47:11:02:13:3e:6e:3a:f2:ff:86:c4:96:5b:83:c7:79:ee:
6b:bd:df:33:6d:d9:e6:0c:28:5c:1d:d7:3a:ca:c6:16:de:6e:
d9:b9:05:b1:e7:89:e0:52:ca:1d:21:4f:7b:19:3c:fc:41:9f:
ed:6d:43:d3:f4:97:c6:44:7e:57:59:20:bc:64:9e:1e:3b:f2:
36:49:83:9e:ef:54:75:9a:5d:4c:f6:87:eb:0a:69:91:e1:b1:
e9:28:ec:63:2d:71:0f:d6:79:65:6c:95:28:6d:09:d8:c1:4e:
50:6d:7e:26:83:56:10:a7:e2:da:26:53:5d:34:e1:cd:cd:76:
cd:db:7b:85:bb:60:83:bc:07:d6:32:52:ca:76:d3:f2:7c:9c:
58:0f:0d:00:92:15:77:60:6d:96:07:58:f8:e2:4a:44:a3:94:
46:ca:4f:8f:c6:6c:5c:11:56:19:d8:4f:3b:a4:1e:86:62:c8:
16:02:ad:ca:46:dc:82:5c:37:61:29:76:ea:9e:af:cc:49:f5:
f7:82:fd:89:9e:20:20:da:cf:86:8a:d7:89:07:55:62:11:3b:
d2:70:0d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:06 2023 by rpki-client on console-fra.rpki-client.org