Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XmW4YkIA7JT9TQ0hzS-MkVzuuH8.roa
File: XmW4YkIA7JT9TQ0hzS-MkVzuuH8.roa (raw, json)
Hash identifier: uA3FGJXOy8jxooVF2uWG77KQRc0jqU/GmKBi6PpqWNs=
Subject key identifier: 5E:65:B8:62:42:00:EC:94:FD:4D:0D:21:CD:2F:8C:91:5C:EE:B8:7F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20E8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XmW4YkIA7JT9TQ0hzS-MkVzuuH8.roa
Signing time: Fri 25 Nov 2022 04:39:16 +0000
ROA not before: Fri 25 Nov 2022 04:39:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.152.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8424 (0x20e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5E65B8624200EC94FD4D0D21CD2F8C915CEEB87F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3e:79:d4:08:67:bf:a0:b9:16:e3:cd:78:8d:
58:38:b1:5c:b6:a3:40:1f:cd:14:24:3a:b7:15:81:
3e:85:7f:6a:ca:41:8c:d4:be:84:64:a3:f7:35:68:
31:c9:ae:34:57:d1:12:28:f6:1e:21:c0:56:60:8c:
be:52:5f:d4:f0:f3:26:b9:4a:18:1c:85:c8:e3:51:
70:ca:61:01:40:6c:64:58:66:9f:46:8a:c8:ca:62:
5d:7a:d4:08:f0:d3:62:91:7b:02:0a:eb:b6:26:24:
4e:e3:a0:c7:11:a1:b2:8c:4d:52:ec:d2:30:a2:69:
0e:ac:3c:50:c2:07:0f:d3:dc:28:95:ef:da:f7:a5:
b5:ca:d0:9c:41:21:8a:a2:3e:4e:22:81:66:56:a6:
f6:f5:82:ea:df:ba:f3:e4:b5:56:fa:d7:b0:ba:97:
25:89:96:83:f0:20:31:32:c1:51:79:07:8b:9a:8c:
3a:1a:0d:16:f0:54:cc:5a:72:9f:f5:2a:4e:ef:ea:
05:a2:26:a0:b5:f5:6e:48:bb:76:c3:9e:ba:28:73:
93:97:3d:c1:52:96:fd:f0:d2:61:34:7a:4a:62:6b:
7c:f2:c7:7c:4d:ef:77:ec:55:02:93:97:89:08:11:
ab:4d:2f:2d:79:31:c2:2a:37:3a:84:f6:8b:1a:bf:
6e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:65:B8:62:42:00:EC:94:FD:4D:0D:21:CD:2F:8C:91:5C:EE:B8:7F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XmW4YkIA7JT9TQ0hzS-MkVzuuH8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.152.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:d5:9c:04:fe:25:ad:e9:82:e3:dc:55:b2:98:0c:ef:79:7a:
b1:48:ff:c1:fa:97:24:26:c9:d9:26:37:85:e6:33:86:21:14:
4c:a5:19:28:bd:ab:2d:ec:97:a7:e3:cc:d3:92:4c:0d:39:dd:
9f:dd:7b:e7:c4:49:0d:b6:93:93:4f:f8:f5:b1:1e:68:8e:eb:
cb:8d:61:bd:e8:da:4c:e1:75:d5:87:c3:1b:63:42:20:57:3b:
3d:27:4e:9e:6d:17:b5:ff:a6:bf:90:4b:8e:6c:83:23:a0:7e:
94:06:cc:0d:c4:a7:98:d7:33:0e:fd:e8:53:94:be:4b:c9:f1:
02:77:4c:0d:d3:f8:fa:bf:b6:d6:19:2e:4d:db:89:79:4f:73:
e5:88:3c:dd:73:79:5c:35:6a:57:d3:57:32:57:5a:5a:ba:eb:
26:a4:c4:48:de:7b:3a:83:29:be:e7:2d:3a:e2:4a:1d:61:a9:
0b:37:4c:30:e4:0f:fd:a9:11:47:94:50:39:cf:af:e3:b1:44:
00:98:0b:d6:7a:e9:7e:1d:8e:7a:0f:e7:d0:2a:db:c5:16:a1:
31:d5:71:f1:e1:d1:07:b9:65:1f:70:89:b5:74:24:98:a0:9d:
ea:f9:8a:10:1b:00:b6:c3:37:c3:92:8e:ba:c5:28:8d:a8:38:
3d:3a:44:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:29 2023 by rpki-client on console-ams.rpki-client.org