Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y-h4MaV2Dtjj6jzgl7TMsV-BzEM.roa
File: Y-h4MaV2Dtjj6jzgl7TMsV-BzEM.roa (raw, json)
Hash identifier: 9TxvGyIeR5Zp+zwkd+GTaDO7Tpb7b8oUn0W+NOq61/E=
Subject key identifier: 63:E8:78:31:A5:76:0E:D8:E3:EA:3C:E0:97:B4:CC:B1:5F:81:CC:43
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y-h4MaV2Dtjj6jzgl7TMsV-BzEM.roa
Signing time: Thu 15 Sep 2022 02:53:43 +0000
ROA not before: Thu 15 Sep 2022 02:53:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.52.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=63E87831A5760ED8E3EA3CE097B4CCB15F81CC43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f4:61:80:5b:a4:41:29:a8:53:ea:fa:5e:0d:
35:b7:22:8d:40:49:71:c2:5d:51:bb:c8:2f:4f:5c:
50:90:0f:29:56:65:14:ad:67:1f:a4:01:79:7c:00:
c9:92:01:c0:86:7c:43:5b:d1:6e:cd:e0:a7:38:3f:
5e:9f:17:ea:f3:0c:40:67:df:87:a7:58:9e:65:06:
a7:97:65:c1:51:87:94:06:a5:2e:57:e9:1b:62:16:
c2:66:e6:87:e0:ea:98:09:88:52:28:2b:66:a8:5b:
95:97:49:40:d0:a1:14:59:9e:40:77:b8:bf:a9:6e:
ad:46:13:f3:f5:0e:75:08:ab:66:0e:53:1a:fb:c5:
01:8e:4f:39:6e:37:78:0d:6a:f7:ff:95:b5:2a:8d:
40:4c:e0:58:e7:c8:3f:60:cb:fa:7f:a0:7d:dc:84:
d0:b1:3d:30:57:fe:cd:32:42:78:51:da:da:52:74:
66:5b:7e:5e:6d:58:db:46:47:4f:8f:d1:a8:0c:fe:
dd:3c:bd:b4:02:4f:71:be:59:30:23:16:46:a9:cc:
4b:7b:89:0c:bd:15:1c:e7:c3:50:c0:ad:52:82:d8:
8b:7a:1d:05:87:d8:16:4d:60:00:69:fe:44:03:9a:
f9:90:23:17:48:a6:3a:bf:83:42:37:0d:c1:a6:a0:
d0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E8:78:31:A5:76:0E:D8:E3:EA:3C:E0:97:B4:CC:B1:5F:81:CC:43
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y-h4MaV2Dtjj6jzgl7TMsV-BzEM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.52.0/22
Signature Algorithm: sha256WithRSAEncryption
33:7c:fb:66:0c:b7:17:b4:69:48:ea:a5:71:6b:e0:f5:93:ca:
a7:ec:3d:98:41:2b:12:00:e3:32:ae:f3:fc:11:95:e0:6d:b5:
77:90:36:80:90:e4:db:09:ac:e5:a2:ed:cb:29:c3:4e:3f:02:
cf:a0:41:f2:a2:0e:4f:95:75:61:6e:1a:a2:7a:ff:fa:0f:5e:
05:fd:68:24:63:d7:8e:13:71:17:4c:a8:a6:91:6b:1a:b2:f8:
d7:22:91:64:b4:74:61:10:49:e2:5e:db:04:41:46:a7:bc:ec:
7f:31:f7:ee:32:9b:07:b7:4c:35:39:12:2f:de:61:0e:15:d7:
0f:16:97:73:6b:89:ac:0b:19:49:46:98:e9:f4:33:3c:24:69:
d6:51:0a:51:73:57:20:fa:93:65:33:2b:a2:fb:2c:78:32:78:
25:9e:63:79:c2:66:3d:df:72:f5:de:de:e4:3e:76:98:fc:22:
67:07:7f:8d:c1:a5:2d:2f:83:01:df:69:cb:fc:03:54:cf:62:
53:df:9c:78:c7:d1:2d:95:58:ac:d9:1b:c9:49:d0:a7:aa:79:
24:52:ac:ad:6b:cc:c4:34:8e:d3:0b:74:a6:c7:7a:21:cc:b3:
56:76:d1:ce:e3:28:b3:c5:d6:cc:1e:b7:2a:c6:ba:55:62:50:
27:f5:c6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:22 2023 by rpki-client on console-ams.rpki-client.org