Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_W0hz4fctMYzhiQCAUR8PkNcvuk.roa
File: _W0hz4fctMYzhiQCAUR8PkNcvuk.roa (raw, json)
Hash identifier: rrkGi+vviM6oaLwurmJyoQjJiTeaIA8QdvjGt4dJBV8=
Subject key identifier: FD:6D:21:CF:87:DC:B4:C6:33:86:24:02:01:44:7C:3E:43:5C:BE:E9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 231B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_W0hz4fctMYzhiQCAUR8PkNcvuk.roa
Signing time: Fri 25 Nov 2022 04:42:03 +0000
ROA not before: Fri 25 Nov 2022 04:42:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.240.0/21 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8987 (0x231b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FD6D21CF87DCB4C63386240201447C3E435CBEE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a3:94:93:f8:93:75:22:1b:d9:30:33:66:e7:
a0:67:b8:5e:d0:21:f4:03:74:2b:20:59:6d:1a:af:
b0:f4:a1:b0:51:1a:d9:f2:17:79:e3:06:3c:1e:57:
1f:5d:57:60:94:23:88:de:55:0a:da:82:f7:3f:0e:
fa:35:56:7f:8c:5c:1f:ed:d7:ab:60:a1:68:1b:a2:
6d:22:6c:cb:2c:b6:e0:25:98:f3:db:a1:df:f4:5f:
b5:50:ba:eb:2d:22:f2:bb:5d:4b:74:c7:d9:4f:06:
46:fe:ee:bd:07:51:89:55:5f:72:9f:9f:ad:53:78:
fc:36:93:b7:10:f0:1d:a3:66:fa:73:71:f3:b6:ea:
0c:02:21:5a:0b:ab:d5:e4:01:8b:33:af:53:29:9e:
0e:c5:f2:32:da:3a:a3:c6:67:e6:23:11:5d:dd:9c:
06:78:cd:24:5d:32:48:e8:dd:cd:e6:8d:69:b1:b8:
06:43:c2:ee:6b:99:7c:9e:39:8e:93:f9:de:22:a5:
98:4b:49:7d:60:3f:0a:ea:81:a5:8c:a3:47:5e:5f:
83:02:48:f7:15:9d:c7:d0:95:8b:01:b1:7e:41:97:
ae:67:f8:1f:70:53:ce:c1:9c:c2:bb:0a:90:d2:82:
44:ee:b6:d0:49:66:0f:0f:1e:63:7e:9f:26:6d:19:
fd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6D:21:CF:87:DC:B4:C6:33:86:24:02:01:44:7C:3E:43:5C:BE:E9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_W0hz4fctMYzhiQCAUR8PkNcvuk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.240.0/21
Signature Algorithm: sha256WithRSAEncryption
13:7d:f9:32:09:2e:cd:c4:a0:b4:c3:2d:d0:a6:d0:fd:d2:e9:
46:bc:79:25:74:dd:2a:e0:5d:fb:3b:32:87:0f:c0:02:60:ba:
6e:b0:fe:53:5b:89:97:e9:ef:13:b2:4e:7a:a4:16:cd:78:4c:
86:0b:1a:b7:2f:65:9a:ea:f9:c4:c2:e4:61:77:ae:0b:41:33:
00:e5:33:8d:0e:39:e1:95:5a:34:e6:32:c3:65:b5:6d:86:09:
3a:03:d7:f0:fd:5a:46:0c:b0:cb:07:aa:36:2c:e7:cf:b7:1c:
e1:dc:9f:79:51:56:41:1c:9c:ab:81:1a:d0:89:60:82:c6:79:
b3:b0:c8:2a:7a:9a:4e:08:4f:30:68:5a:82:ed:8b:d0:ed:12:
c9:96:d2:05:71:15:c6:fc:1a:aa:10:a0:17:e9:79:5d:b1:d3:
9b:2b:2a:0f:da:62:61:49:46:9d:8e:71:5d:96:01:f8:fc:7f:
c7:64:76:9c:7d:76:ed:00:f8:16:46:51:bd:c4:d2:3e:3d:86:
fd:27:8e:73:93:34:96:c6:31:8f:d7:4d:1e:ba:05:94:2c:52:
4d:3d:0b:26:fb:3e:30:56:94:01:33:d2:57:17:9f:d7:ef:41:
48:d7:69:74:87:bc:87:f2:c5:7e:d0:ad:cc:16:5c:97:d1:1b:
c0:3f:3d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:29 2023 by rpki-client on console-ams.rpki-client.org