Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZSyn7JGxl22s_QIwLmPQ3sqv4sA.roa
File: ZSyn7JGxl22s_QIwLmPQ3sqv4sA.roa (raw, json)
Hash identifier: 4jaI2L2DqulmUFmzy+h06P2e64A91NpMQBDHYPd6Q4k=
Subject key identifier: 65:2C:A7:EC:91:B1:97:6D:AC:FD:02:30:2E:63:D0:DE:CA:AF:E2:C0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 234E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZSyn7JGxl22s_QIwLmPQ3sqv4sA.roa
Signing time: Fri 25 Nov 2022 04:43:25 +0000
ROA not before: Fri 25 Nov 2022 04:43:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.48.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9038 (0x234e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:43:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=652CA7EC91B1976DACFD02302E63D0DECAAFE2C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:02:61:44:b1:47:55:eb:47:55:48:c4:b8:e0:
63:96:b2:a3:ed:20:83:ad:7a:8a:22:4f:0c:7c:46:
8c:3c:53:89:47:74:35:13:8a:f8:c6:6c:80:03:44:
c0:9e:8b:69:46:4a:54:94:61:21:36:57:1c:69:b4:
ed:58:53:bb:f9:29:66:bb:9b:a5:84:e9:0c:cc:e3:
81:9d:82:e7:37:bf:da:73:65:27:c3:86:6a:74:65:
15:5d:2f:ca:6f:bb:90:ff:40:5f:ee:9b:b4:5f:1f:
9e:53:3e:cc:51:db:30:9d:91:57:c4:9c:9a:cf:ec:
df:6a:66:2e:45:29:53:9a:db:18:58:d3:82:fa:75:
77:d8:0d:ab:14:1b:a3:22:50:b7:39:84:c5:13:62:
14:ec:82:6a:72:56:8c:ca:48:62:e8:3d:00:fc:d9:
39:ca:26:d6:66:4d:cc:8e:00:3f:12:90:60:ea:64:
50:a1:31:86:2d:02:91:85:6f:ab:bb:e2:79:ce:39:
b0:ae:17:b5:60:5e:b0:25:00:1d:56:fb:83:d4:a4:
49:c2:12:34:1c:c6:30:ef:3a:fb:97:7e:60:c1:ed:
71:61:59:8b:1d:40:e3:b5:05:8c:67:18:95:75:b9:
79:a0:75:e7:f5:14:28:3d:90:67:6a:95:a5:2a:23:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2C:A7:EC:91:B1:97:6D:AC:FD:02:30:2E:63:D0:DE:CA:AF:E2:C0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZSyn7JGxl22s_QIwLmPQ3sqv4sA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.48.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:d5:77:7a:77:61:c8:fb:c4:41:b8:f1:36:82:fa:ca:4b:7b:
0f:69:ef:55:8b:b1:77:d3:a4:54:97:18:1f:2a:d8:ed:2e:cc:
fd:0e:75:fa:4e:db:20:08:23:62:56:94:68:26:14:31:3e:63:
b4:94:c0:32:40:8a:8f:a3:ff:bb:96:73:d2:c3:72:31:30:40:
9b:a8:8c:6b:35:9b:62:1a:55:5f:c9:c6:5f:da:9e:e6:0b:4e:
11:15:73:c8:d0:17:eb:d3:eb:d0:68:9e:17:4c:f9:5c:69:f8:
99:85:3f:ab:4e:89:ee:76:49:f2:49:a9:8a:12:64:54:04:17:
b1:d4:f7:ee:41:4c:f8:8e:82:ae:a2:5d:ce:ef:68:4f:d0:75:
e2:92:4f:31:d3:98:37:30:c5:07:a3:a1:de:58:d9:d3:5b:e0:
ab:d8:fc:b2:70:2e:de:37:75:18:f9:a7:df:a2:f4:6b:9a:b2:
1e:fd:cf:43:90:b5:a3:8e:f6:99:e5:a5:62:2c:fc:2c:55:cf:
a9:c8:61:b0:cf:48:23:a8:fb:f8:75:39:a4:af:e2:e6:2d:52:
ce:8c:9b:cf:01:88:0b:82:69:a5:3b:3f:0c:47:a4:6e:f8:bb:
63:00:be:a2:44:1a:e6:81:8b:d4:33:72:71:32:b1:77:a3:38:
47:cc:b3:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:06 2023 by rpki-client on console-fra.rpki-client.org