Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zqz1eK7_bMCfurdNYmMHyBtTJgA.roa
File: Zqz1eK7_bMCfurdNYmMHyBtTJgA.roa (raw, json)
Hash identifier: taJEJM3pMoyjPVTiTPCi6hJ+KI6YiFHodkjzDZiy2DE=
Subject key identifier: 66:AC:F5:78:AE:FF:6C:C0:9F:BA:B7:4D:62:63:07:C8:1B:53:26:00
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2234
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zqz1eK7_bMCfurdNYmMHyBtTJgA.roa
Signing time: Fri 25 Nov 2022 04:40:54 +0000
ROA not before: Fri 25 Nov 2022 04:40:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8756 (0x2234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=66ACF578AEFF6CC09FBAB74D626307C81B532600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fe:8c:19:0d:9f:5e:37:10:47:82:8f:96:be:
76:8e:dd:df:7a:bf:57:f6:15:9b:19:2a:01:90:12:
de:44:17:b0:fd:61:1e:93:48:d1:f5:4d:ba:2c:e7:
5a:57:a7:65:4d:68:33:74:84:54:cf:f6:58:3b:9d:
a1:b7:f7:64:07:a2:2a:92:d2:54:40:d1:4e:7f:6f:
48:56:89:8f:28:92:a4:35:cb:57:d4:a1:e8:f4:fb:
66:ea:d8:dc:33:b7:08:a8:18:a3:fa:8e:8f:52:76:
5c:0e:eb:e0:1c:15:79:bf:ae:71:ef:fc:17:e7:a5:
eb:49:58:03:a4:a9:5e:bf:f1:73:f1:05:9d:f9:3d:
d4:a6:ef:76:46:bb:aa:35:36:ac:9d:39:1e:e7:64:
c5:2e:8b:5e:ce:26:bc:aa:d8:b7:c1:b3:5c:29:df:
a1:c1:72:dd:cc:4b:26:d0:20:c4:b1:7e:91:c3:1c:
d9:17:7a:be:20:33:8e:15:a9:63:ae:16:68:c2:0b:
be:67:49:47:7e:42:c9:58:58:d7:89:1b:c4:e0:b1:
a0:eb:c3:42:96:25:9c:22:9c:e0:65:64:23:a2:49:
e2:e3:5d:cc:e6:73:4f:ba:a9:f8:6b:20:a7:cd:b6:
e3:b6:c9:12:4b:50:ef:31:6f:5b:7c:53:88:ca:90:
bb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AC:F5:78:AE:FF:6C:C0:9F:BA:B7:4D:62:63:07:C8:1B:53:26:00
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zqz1eK7_bMCfurdNYmMHyBtTJgA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.237.0/24
Signature Algorithm: sha256WithRSAEncryption
39:37:f1:4a:52:a7:26:1e:67:d7:03:bd:28:19:e5:22:22:c5:
12:0e:97:68:2c:9d:d6:d4:ea:59:49:71:63:1a:99:b1:b0:51:
04:d9:70:23:67:f6:34:e1:99:b9:4c:67:77:d4:41:1f:d9:2a:
47:dd:01:5b:27:5e:36:f6:65:18:5e:2f:27:bc:93:1b:c0:26:
2e:ae:08:fe:8d:07:49:46:b3:de:3f:65:ab:07:d7:e8:a5:6c:
b3:80:e1:92:d0:bd:30:16:85:e3:be:db:67:f6:d4:82:f2:38:
70:52:cd:34:5d:11:25:7b:c5:48:bc:10:a3:24:83:89:32:f5:
88:43:dc:df:53:68:71:4f:88:3f:05:46:0c:1e:ed:4b:78:4a:
df:ca:1c:e7:a5:19:2a:60:06:ce:dd:e7:12:f6:a6:e9:56:d0:
6b:94:a6:9a:f1:df:07:3d:97:a8:77:cf:a1:f7:16:98:06:9f:
89:e5:ad:63:fb:f6:91:b6:67:5a:5d:f2:b9:98:2d:bd:94:7e:
49:75:c2:69:af:7c:0e:ca:d5:bd:15:c6:93:3c:1f:6f:7d:8a:
8c:b8:6c:0e:cb:cb:06:0d:a4:f0:93:df:01:9c:ab:d4:4a:8d:
b7:b5:48:c1:6f:fd:00:73:b7:1d:13:c9:e3:e7:44:b4:5d:52:
50:6d:c3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:06 2023 by rpki-client on console-fra.rpki-client.org