Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xisuo2IcPhpsm5RkyPucYYsaxwc.roa
File: Xisuo2IcPhpsm5RkyPucYYsaxwc.roa (raw, json)
Hash identifier: gFngfC79HgytKDH7NG5PNYqffkeI0t2LWWBKdRD0Tfo=
Subject key identifier: 5E:2B:2E:A3:62:1C:3E:1A:6C:9B:94:64:C8:FB:9C:61:8B:1A:C7:07
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2272
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xisuo2IcPhpsm5RkyPucYYsaxwc.roa
Signing time: Fri 25 Nov 2022 04:41:11 +0000
ROA not before: Fri 25 Nov 2022 04:41:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.0.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8818 (0x2272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5E2B2EA3621C3E1A6C9B9464C8FB9C618B1AC707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:00:5b:85:f6:5e:ff:56:fa:63:df:7a:7b:2f:
0f:d2:24:d2:73:94:4f:b1:4a:6a:94:ea:86:49:49:
7b:1a:fb:3f:4c:61:2b:ec:a9:d4:27:8f:f0:db:86:
fc:31:23:29:ca:84:8a:e2:45:68:10:df:f9:43:90:
7c:a9:42:58:26:f5:19:57:c0:43:89:e1:77:95:a3:
6d:8e:70:32:51:87:e1:80:bc:86:2c:d9:25:e9:b7:
cb:ea:e7:e8:ee:b0:1b:fe:7c:43:1a:51:6a:5d:b3:
2b:8c:87:9a:6f:76:1d:c3:57:5f:78:69:4c:f7:b0:
21:af:3c:72:59:7e:69:80:54:b6:18:2c:8c:97:98:
85:6f:87:3c:84:65:84:b1:8a:b5:21:74:40:30:60:
e0:e5:c5:36:e6:99:98:45:b6:aa:d2:0a:e8:7b:4f:
1b:2b:5e:89:f7:e1:f0:a9:04:9f:33:d9:7a:e7:97:
fd:f2:9a:39:d3:64:fd:43:57:54:9b:12:64:fc:cd:
66:5b:94:6e:24:37:68:bb:c8:92:1e:55:08:ef:9d:
6b:98:95:ed:44:52:80:e8:da:bf:81:f8:3d:e5:7a:
31:bb:79:ee:3e:aa:a2:9d:cf:c3:2b:0f:09:46:49:
63:64:35:22:eb:a7:b1:e0:87:e3:db:82:5c:c5:0d:
40:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:2B:2E:A3:62:1C:3E:1A:6C:9B:94:64:C8:FB:9C:61:8B:1A:C7:07
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Xisuo2IcPhpsm5RkyPucYYsaxwc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.0.0/21
Signature Algorithm: sha256WithRSAEncryption
59:07:97:af:42:c0:19:41:66:9f:cd:07:3a:23:2c:46:e2:d6:
ad:b1:e9:c5:6c:23:a3:44:e3:2f:4f:a0:eb:3e:01:04:2e:b7:
d5:0e:13:d9:77:a3:db:dc:01:57:32:a0:b0:e8:bf:4b:94:6e:
f8:32:86:3b:cc:c6:6f:0a:ef:eb:f9:a8:f1:01:55:8f:34:ab:
49:e9:99:02:2b:a2:e7:eb:66:88:20:95:9a:e9:24:52:19:f6:
0b:e2:9a:98:30:52:11:8a:10:3a:5d:5f:74:60:b4:49:6a:60:
03:91:d0:68:f7:3e:44:29:71:d1:3a:59:07:05:ab:4f:23:58:
c2:71:16:a0:89:4f:27:39:02:1f:76:2b:cb:70:ac:91:07:7e:
6b:9c:4c:1a:6e:d4:7b:c7:8b:68:4c:03:12:4b:d1:2e:2e:62:
e5:c7:af:72:85:2c:88:42:e2:d7:fb:7f:13:b3:bc:18:6b:95:
19:b5:6c:fb:8c:b0:9a:06:55:5b:69:08:93:f4:4d:14:22:d7:
2c:35:0e:82:07:07:70:f8:61:af:f2:b1:d0:a1:0b:ab:1f:9a:
13:b1:e2:b5:49:77:0e:4f:80:f3:3b:07:b9:6b:49:8f:1d:3a:
eb:39:e0:ed:28:93:42:07:5b:00:01:74:89:8d:3a:49:d4:ff:
ef:66:12:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:06 2023 by rpki-client on console-fra.rpki-client.org