Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_I5ZW05O1splOcanXemplZFcojY.roa
File: _I5ZW05O1splOcanXemplZFcojY.roa (raw, json)
Hash identifier: KCIZbANOo0x51uds/efQ9gULcTRhTfAeLn/29k8IokQ=
Subject key identifier: FC:8E:59:5B:4E:4E:D6:CA:65:39:C6:A7:5D:E9:A9:95:91:5C:A2:36
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_I5ZW05O1splOcanXemplZFcojY.roa
Signing time: Thu 15 Sep 2022 02:45:59 +0000
ROA not before: Thu 15 Sep 2022 02:45:59 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.200.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:59 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FC8E595B4E4ED6CA6539C6A75DE9A995915CA236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:60:7c:f6:3b:c5:67:a7:e8:bf:03:84:f3:
6b:bd:6e:b7:fc:e1:d8:9f:58:69:ad:62:72:af:51:
79:2b:33:81:39:b7:22:47:79:cb:c7:09:a6:5c:72:
7f:1f:57:07:fa:cc:7d:a0:1d:2e:11:40:51:48:68:
e1:c5:dc:ff:97:da:fc:ad:dd:89:da:4c:97:32:cc:
30:18:c7:45:c8:a0:29:07:bc:7a:22:28:1d:a4:fb:
2a:f2:87:ee:00:86:0a:69:9f:c8:17:61:8b:80:fe:
42:65:ad:67:99:59:b4:76:c0:4c:1a:6a:b0:83:f3:
29:64:80:e2:39:16:d5:b2:13:03:04:a6:75:a8:7c:
56:97:17:2b:ab:c8:64:e3:bc:c5:bb:19:61:64:63:
ad:14:be:c6:6d:72:48:26:cf:b7:26:56:9f:54:4b:
c7:6e:e6:cd:05:15:7b:21:a9:fd:16:af:4a:fa:8b:
fe:f2:35:2a:e1:90:87:89:11:a9:85:4e:4d:0b:62:
18:d8:8f:82:31:15:89:0d:37:37:f1:92:27:f9:8c:
86:66:d8:65:c6:2a:2f:d4:c3:7d:4a:ff:bb:7e:b7:
ca:46:bb:6d:61:57:25:e3:ab:98:9c:16:a1:43:be:
58:d8:bc:45:36:9a:c7:15:c2:7d:87:a7:78:a4:57:
95:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8E:59:5B:4E:4E:D6:CA:65:39:C6:A7:5D:E9:A9:95:91:5C:A2:36
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_I5ZW05O1splOcanXemplZFcojY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.200.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:df:bf:6c:2f:c2:8e:23:7e:cc:8b:79:89:a7:36:72:3b:7e:
95:4b:63:19:3b:da:6b:91:74:b2:a6:03:29:8b:9f:7b:6d:bd:
32:f0:f5:d5:7a:14:98:7c:ee:a6:26:bf:47:0f:bc:32:e5:5a:
26:81:0f:8d:ce:68:10:44:9b:13:ca:77:bd:4a:36:25:48:08:
4c:8c:d0:3e:e9:0a:00:28:c2:0a:de:a8:16:87:ad:c6:8d:43:
f3:90:e6:f8:7e:1e:2a:dc:84:26:ae:5b:9c:96:56:43:0c:86:
ae:94:67:2a:d4:bd:3f:a2:59:16:cc:9a:d6:83:00:69:9e:a7:
55:8b:f0:18:d0:a2:45:8b:48:19:89:99:89:93:9b:a5:26:a4:
f5:0e:7f:33:ca:e6:9b:8d:40:5b:c3:09:f3:1d:5c:7b:24:25:
68:f0:73:a3:fb:e6:e6:ff:a6:a6:45:1a:94:3f:91:f6:53:76:
7d:39:75:c3:34:7c:36:a1:9b:de:0c:66:11:b6:0e:a8:aa:91:
43:9e:8b:9c:fb:67:2e:15:3e:a1:bf:3f:c6:c8:82:c9:b4:e4:
0a:d6:8a:76:14:ec:72:0a:c1:5a:90:68:21:d4:af:18:c4:c7:
47:b9:fc:e1:44:54:8c:73:22:c3:c7:b3:77:16:db:3d:41:00:
18:b9:29:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:22 2023 by rpki-client on console-ams.rpki-client.org