Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YcC5Zl_bYOdeC_VgraSgSWCTqto.roa
File: YcC5Zl_bYOdeC_VgraSgSWCTqto.roa (raw, json)
Hash identifier: 16GBXvsIwcvUdRlm6ZnrsUOZOM9m9GF0iBTlwS5wl0Y=
Subject key identifier: 61:C0:B9:66:5F:DB:60:E7:5E:0B:F5:60:AD:A4:A0:49:60:93:AA:DA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YcC5Zl_bYOdeC_VgraSgSWCTqto.roa
Signing time: Thu 15 Sep 2022 02:53:51 +0000
ROA not before: Thu 15 Sep 2022 02:53:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.12.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=61C0B9665FDB60E75E0BF560ADA4A0496093AADA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a3:34:5d:b4:1a:6d:e2:f0:02:12:8f:67:44:
a5:3a:70:2f:50:5b:dc:2a:9f:20:b4:1c:55:46:ae:
d5:08:9f:d0:12:e2:85:71:33:f1:a6:c9:2d:26:65:
ee:4b:a0:5c:a7:49:ac:b3:ef:fd:17:c5:09:b5:ed:
ae:2b:da:78:7d:19:74:20:06:f6:d2:3c:9e:66:90:
b3:6c:ac:e7:63:c1:d0:5a:63:51:15:c0:80:18:37:
4c:c5:fe:e2:4f:73:92:7c:36:45:b0:78:01:4b:4e:
e0:7c:d3:18:a9:ac:e7:ff:b5:b5:fb:60:a3:87:9f:
e5:4d:34:96:c6:99:36:99:c2:20:c8:d6:48:c6:95:
45:af:a2:c1:95:93:28:2e:39:f5:77:45:dd:fe:69:
d9:e7:52:f8:3b:e1:41:68:0e:67:4c:43:be:49:a6:
2b:bb:db:63:4a:49:c4:1b:51:37:56:3a:79:10:10:
9f:e9:cd:cd:eb:5f:21:71:4d:35:9d:90:ee:e5:a4:
87:33:85:40:f0:17:44:54:00:51:05:ff:d5:94:e4:
18:1c:0f:2c:49:63:39:b0:07:b6:2e:3e:1e:68:b3:
e1:e5:e3:52:e4:ba:ad:66:e1:c1:60:47:bd:92:97:
6b:6c:8b:08:ff:ee:55:11:cf:4c:a2:b6:65:0d:44:
60:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C0:B9:66:5F:DB:60:E7:5E:0B:F5:60:AD:A4:A0:49:60:93:AA:DA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YcC5Zl_bYOdeC_VgraSgSWCTqto.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.12.0/22
Signature Algorithm: sha256WithRSAEncryption
70:d4:c5:a0:90:71:cc:a2:1a:af:10:cb:22:80:f3:f3:c8:aa:
00:a2:14:bb:44:09:45:b4:f3:82:f4:44:8d:dd:16:86:e2:9d:
3d:74:da:4e:35:52:49:a2:aa:ff:a6:2c:c9:f8:c5:e7:34:77:
03:60:dc:38:e7:85:cb:66:97:44:3c:28:09:d0:94:03:cc:42:
c2:6e:04:47:ee:0c:0b:44:2f:08:64:5a:47:14:3b:95:61:41:
d8:38:e1:85:96:56:db:90:bc:1a:97:ac:9f:cc:f9:40:2f:15:
f1:cc:aa:2d:c3:cd:60:5a:97:6a:da:54:24:c6:72:91:32:fb:
87:b5:32:8f:2e:d9:4d:5f:1c:9b:83:f2:28:91:fa:d2:fe:dc:
e6:8a:61:04:f4:70:cf:bc:6f:85:1a:bc:9e:f0:b2:bc:8c:7d:
76:f5:76:6f:d1:0b:0f:d3:3c:35:48:46:a5:36:fc:28:77:a6:
a2:c0:86:f3:13:ff:40:d6:fa:76:3e:31:83:7f:a3:da:1b:1e:
e2:91:54:b2:c4:1c:8d:0c:a7:15:0b:67:93:3e:34:a1:ee:eb:
82:85:ed:12:be:5c:d6:a5:9d:99:06:ec:38:db:ea:9e:b5:66:
e6:81:62:44:18:e2:9a:55:c9:59:b6:46:a9:be:2d:1a:1a:a2:
c2:c1:e4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:34 2023 by rpki-client on console-fra.rpki-client.org