Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YhG9E4AVmcIoBv-tPVP_SusiVMc.roa
File: YhG9E4AVmcIoBv-tPVP_SusiVMc.roa (raw, json)
Hash identifier: DSp6oe1HWl8wEc5uJErmyrphXd4w55FWTH+sZdOflq4=
Subject key identifier: 62:11:BD:13:80:15:99:C2:28:06:FF:AD:3D:53:FF:4A:EB:22:54:C7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 227F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YhG9E4AVmcIoBv-tPVP_SusiVMc.roa
Signing time: Fri 25 Nov 2022 04:41:15 +0000
ROA not before: Fri 25 Nov 2022 04:41:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.228.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8831 (0x227f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6211BD13801599C22806FFAD3D53FF4AEB2254C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:e5:75:ba:ce:bb:ce:d5:06:d4:8e:a7:4f:
61:e3:e5:c4:27:e5:27:c6:55:2d:da:41:19:6d:49:
78:f6:fd:26:d2:96:f1:9e:91:9b:e3:96:ee:98:7e:
2e:1d:4b:eb:99:97:02:75:36:bb:95:07:25:70:15:
ad:67:5c:69:f9:7a:d3:b8:12:c8:9b:c4:6e:d7:b7:
4b:67:10:b6:2f:3a:03:0d:55:af:c5:b0:7a:d3:50:
10:7f:38:b1:ad:ec:5c:64:3d:71:72:8e:e7:aa:46:
54:ed:f0:a5:8b:cb:92:a9:a5:a4:aa:ed:4c:59:b3:
45:0e:78:80:6f:13:06:b8:ca:80:98:e1:a6:8b:31:
67:d7:56:73:32:68:44:c5:46:8d:24:8a:56:66:ab:
a4:84:04:22:c2:a7:48:f1:fe:3f:a6:1b:0a:6e:73:
0a:01:c7:87:7e:e0:8e:2e:d5:79:a7:a7:2e:ab:5c:
ef:89:7e:1c:48:46:ac:40:1d:c1:a0:d4:84:ff:74:
7e:9f:2f:52:a8:0b:77:e2:70:8f:61:e4:6d:90:f2:
5d:7c:03:8f:99:44:82:c7:5e:3c:b8:a7:76:e7:c2:
28:d1:cd:88:06:39:2f:a5:08:a7:97:a9:53:29:d8:
5a:45:e7:fd:58:c9:3f:fd:01:f5:70:34:c1:83:69:
46:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:11:BD:13:80:15:99:C2:28:06:FF:AD:3D:53:FF:4A:EB:22:54:C7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YhG9E4AVmcIoBv-tPVP_SusiVMc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.228.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:a2:39:b3:99:65:82:5d:5a:3b:d6:2a:c2:35:26:aa:e0:5a:
86:03:3d:e2:12:db:8e:3c:d6:c9:54:38:63:e7:58:d7:69:79:
20:c7:25:6b:2b:79:8e:35:69:d6:9f:2c:ac:a2:43:64:26:65:
fe:f4:e8:c1:6c:9f:3f:71:ab:a0:97:2c:3c:89:5f:d0:2c:b3:
2e:cc:2c:88:4c:ca:64:ba:ac:2d:96:34:18:0f:a3:47:25:aa:
80:2b:bd:63:fe:1d:26:fe:33:57:fb:6c:b1:c4:05:65:66:07:
f6:5f:03:3b:36:77:9a:47:4d:31:bb:e2:7d:b7:6d:50:68:73:
80:3a:25:df:3f:7f:f5:17:53:62:fd:24:e5:94:fe:35:13:9f:
3a:b7:fc:d4:9e:8a:7c:5c:e4:87:4b:9d:f1:aa:6b:a1:40:ea:
5b:9d:be:fb:d9:46:fa:d0:35:35:e0:0b:db:30:b0:04:b7:ad:
04:35:bc:06:02:1a:c9:eb:34:a3:60:3e:12:9a:f1:64:70:44:
a6:02:33:52:a1:fe:4b:bd:a1:ac:76:90:90:34:f6:06:d1:4c:
ae:01:9d:b1:8f:89:8b:74:1d:00:39:47:77:a4:ae:02:00:a5:
56:31:19:82:b5:37:06:1e:57:ee:77:04:b3:f2:83:d5:4b:8a:
62:88:9c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:29 2023 by rpki-client on console-ams.rpki-client.org