Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZMQ1AI25ZF9LxMX7wr0UEKD9h40.roa
File: ZMQ1AI25ZF9LxMX7wr0UEKD9h40.roa (raw, json)
Hash identifier: Z8v1m4j7Uh4hfUm/2Re+y4xsAAu2CtWITpjWcbp2glA=
Subject key identifier: 64:C4:35:00:8D:B9:64:5F:4B:C4:C5:FB:C2:BD:14:10:A0:FD:87:8D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 221B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZMQ1AI25ZF9LxMX7wr0UEKD9h40.roa
Signing time: Fri 25 Nov 2022 04:40:46 +0000
ROA not before: Fri 25 Nov 2022 04:40:46 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.232.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8731 (0x221b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:46 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=64C435008DB9645F4BC4C5FBC2BD1410A0FD878D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:4f:bb:c1:6e:d8:4d:eb:cb:06:c7:70:98:
a4:b2:01:f2:83:07:ce:94:19:64:9a:9b:46:57:7d:
cc:f2:2e:94:b3:5b:41:22:53:d3:5e:6a:07:88:5d:
6f:02:61:5a:7b:ed:2d:43:05:63:5d:0e:e6:db:06:
4c:06:e5:bf:16:23:1c:52:52:f3:24:c5:cc:a2:75:
fa:9c:91:f0:e1:63:ac:5c:c6:c4:bc:83:8c:9a:4e:
62:c2:f2:39:6b:bd:e9:ac:15:0e:13:b0:fa:da:5a:
f4:29:fe:2a:6a:94:c0:ad:6e:f9:ec:10:9a:5c:cf:
55:34:53:66:92:02:f7:df:4a:cb:86:91:9e:af:71:
f6:75:55:df:a5:83:f5:79:be:85:0b:1b:24:f3:67:
7f:43:39:d7:d3:63:66:0a:85:c2:f8:e1:00:9d:e2:
34:40:79:1e:5c:01:f2:38:c4:d3:f7:65:18:8a:91:
eb:fa:22:91:16:4b:91:6b:53:d3:13:e7:16:c9:a4:
ac:89:71:8d:a8:d0:3d:52:f5:97:5d:9a:99:ba:ef:
fe:b8:1b:82:7a:d0:3b:77:8d:b6:7a:f2:42:05:c3:
7a:d0:df:5c:77:4e:e3:9d:68:42:16:58:30:b3:30:
07:67:09:a6:77:11:5b:39:66:0a:88:30:63:31:5f:
58:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C4:35:00:8D:B9:64:5F:4B:C4:C5:FB:C2:BD:14:10:A0:FD:87:8D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZMQ1AI25ZF9LxMX7wr0UEKD9h40.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.232.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:1f:64:d1:b8:45:a6:11:2f:cc:ea:ff:fa:56:a3:39:01:91:
9a:19:f2:df:a5:30:0b:da:48:fe:d7:c9:95:f8:f8:82:2c:3e:
8c:a2:92:32:da:5e:e8:29:a1:9e:71:51:df:d1:36:2f:25:73:
b7:65:e5:47:80:60:cc:c6:15:cb:1d:ff:2c:5e:11:5e:b8:8b:
32:e6:37:a5:ab:db:91:7d:59:8e:d2:27:6d:f5:03:bd:8f:f2:
f1:80:35:92:c2:35:b9:f9:f5:2e:ec:90:1d:db:5c:f0:1e:89:
54:e9:8b:4e:04:3a:e4:17:c9:8b:6e:22:b9:4c:4e:52:a2:1b:
ba:13:29:b8:c2:7f:e7:d8:37:43:16:58:64:97:1c:d0:fe:00:
30:4b:7a:27:0b:b1:8d:5c:37:32:76:8c:dc:db:12:23:e9:32:
57:ff:b8:24:a9:58:e8:15:98:3f:2b:aa:0c:8a:a8:37:fb:cc:
e0:af:13:fc:5d:d2:fa:71:e7:38:07:cf:21:77:70:53:05:51:
e0:67:0c:c8:e5:6e:a6:0f:00:13:89:cb:e9:68:c7:f8:bd:8b:
08:b0:6a:66:42:b3:e1:aa:d6:94:d0:be:a2:06:28:61:3c:74:
49:a1:42:c0:53:ec:5f:c7:d2:c9:6e:bc:cf:2e:a6:ff:97:7c:
61:33:0e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:06 2023 by rpki-client on console-fra.rpki-client.org