Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZETz34Jgq0esKKYIxVfP19bopo4.roa
File: ZETz34Jgq0esKKYIxVfP19bopo4.roa (raw, json)
Hash identifier: Z+IbKkAWHkMHqgk6F2jAc3t0d9AK+HO/w5J4iVxwazQ=
Subject key identifier: 64:44:F3:DF:82:60:AB:47:AC:28:A6:08:C5:57:CF:D7:D6:E8:A6:8E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZETz34Jgq0esKKYIxVfP19bopo4.roa
Signing time: Thu 15 Sep 2022 02:45:23 +0000
ROA not before: Thu 15 Sep 2022 02:45:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.220.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6444F3DF8260AB47AC28A608C557CFD7D6E8A68E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:36:f8:5d:2f:4c:7c:3f:3c:4e:c3:5c:f8:a6:
d2:42:f4:65:98:18:e3:c7:ed:38:9a:d8:04:6e:f6:
29:6c:d3:5f:08:93:95:79:ba:8a:da:98:f6:f7:2a:
60:4c:46:f1:d6:8e:22:9b:2c:a1:5a:69:25:7f:f2:
73:7f:a6:c9:b1:c8:2e:e8:04:0d:2c:72:97:2a:b4:
a6:5f:59:81:fe:80:89:f9:7c:09:00:5a:ab:95:1a:
5e:f0:9f:a7:b4:73:e9:b3:27:0b:03:d3:b8:b4:4d:
5d:fa:a2:d3:af:fb:f6:1d:1d:fe:7f:ea:9e:cb:17:
09:58:93:93:c9:4a:7d:f1:ac:d0:38:31:2f:86:05:
e5:0c:a4:6a:e5:69:60:97:c0:b2:04:32:db:d8:80:
d7:d5:2b:9c:0f:da:45:74:7d:29:7e:5d:a0:70:d5:
23:a5:fb:25:51:55:3a:bb:8e:7b:48:1b:ba:40:29:
f5:c1:4e:62:e1:4f:3f:f0:35:7d:70:fc:64:e6:3e:
e2:0f:8a:f9:60:8a:e1:af:6e:15:22:38:cc:00:68:
4d:11:f7:ec:56:4a:b3:cb:87:f0:52:49:aa:6e:af:
fb:6a:95:fa:99:4e:11:08:31:1d:15:d2:60:ad:b3:
cc:6b:88:05:12:0e:3c:89:bd:85:35:ab:54:e5:b7:
d2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:44:F3:DF:82:60:AB:47:AC:28:A6:08:C5:57:CF:D7:D6:E8:A6:8E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZETz34Jgq0esKKYIxVfP19bopo4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.220.0/22
Signature Algorithm: sha256WithRSAEncryption
81:ae:2a:a0:c2:01:b4:da:1c:3e:57:58:37:3f:8f:8e:21:c5:
10:35:53:86:aa:06:c6:ea:95:80:18:94:90:e4:ee:92:b6:1b:
62:33:5a:20:ea:3d:97:33:d9:53:8a:29:f5:08:e8:9c:35:17:
79:5d:e9:ac:90:28:99:cf:7f:86:9e:8b:0d:1c:2c:4f:68:42:
42:df:a5:55:ab:8f:20:3a:22:6c:22:e7:eb:52:05:4f:78:31:
b6:43:c2:d1:ff:3c:4f:ab:6f:0b:f4:4b:e0:b9:41:66:d7:6f:
a2:38:18:56:90:44:42:06:07:b8:1c:e5:b4:a4:bf:79:e5:f5:
0a:1c:e5:6b:60:77:9e:c4:42:97:ce:01:a1:de:1c:61:bc:9e:
ea:a8:ed:45:42:86:c0:45:5d:9d:ed:a7:52:d0:e1:4b:f6:73:
e5:32:b8:a2:c0:f0:7b:7f:ca:5f:35:d5:62:79:51:b9:c9:83:
4d:3e:93:d9:3d:20:02:aa:f2:14:ab:03:dd:ca:25:ef:71:b6:
c8:f5:e0:4d:da:07:d4:0b:b4:5e:56:40:6b:7a:aa:11:c2:9d:
7e:e1:3d:04:cb:4c:17:a4:7a:69:3d:d1:83:1f:df:dc:f7:81:
fb:51:31:ce:a4:a5:29:83:17:07:51:4a:e6:1a:8a:9b:8f:c9:
dd:9c:ed:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:34 2023 by rpki-client on console-fra.rpki-client.org