Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aRgazEZt6-WFhWFc_SyV3goiKUA.roa
File: aRgazEZt6-WFhWFc_SyV3goiKUA.roa (raw, json)
Hash identifier: q8ZOO8sC8lVyQ0iGMpqp3LptTgDtUD7ElTrIzdz9x6M=
Subject key identifier: 69:18:1A:CC:46:6D:EB:E5:85:85:61:5C:FD:2C:95:DE:0A:22:29:40
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aRgazEZt6-WFhWFc_SyV3goiKUA.roa
Signing time: Thu 15 Sep 2022 02:45:33 +0000
ROA not before: Thu 15 Sep 2022 02:45:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.200.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=69181ACC466DEBE58585615CFD2C95DE0A222940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:57:bb:70:39:57:59:e6:b6:2c:0b:15:6e:c2:
24:a2:dc:1a:38:f2:98:c3:4b:ec:49:17:e0:e5:72:
1a:cd:87:4e:54:02:5a:92:28:fb:67:24:77:19:fb:
fe:87:cb:74:39:8e:29:0f:c1:2d:0a:ee:d6:54:82:
2a:c8:d1:32:70:f0:63:e3:b9:e6:bc:7e:44:5b:08:
0e:a9:80:ef:44:40:1f:85:07:2f:39:97:82:b2:46:
f1:60:47:7c:24:1e:db:79:09:d9:ea:a2:ae:7f:29:
c5:d4:cf:0b:b1:9f:b0:ba:44:d3:07:c2:b4:88:00:
cf:26:0e:25:a7:4e:a1:d3:27:ec:6f:fe:50:ac:c2:
72:a3:7a:cb:fc:96:d4:81:de:ab:7c:b8:48:21:6d:
92:2c:5e:27:e7:a2:5d:5e:12:d6:4a:0e:5b:94:58:
eb:ce:32:19:60:30:8f:53:12:b3:45:90:ff:fb:c4:
a5:87:d6:a0:22:6e:ca:f2:83:33:fb:bb:43:2b:df:
5b:e1:26:3f:00:2d:48:48:4b:6d:58:e9:38:56:c9:
39:6e:ad:8c:e7:62:32:8b:41:ba:f1:54:00:7c:d5:
f8:7d:44:86:ba:89:2c:c3:e6:59:40:d0:bc:60:29:
9f:83:a9:3c:58:ae:9f:43:ce:b8:2e:88:fb:51:7e:
c4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:18:1A:CC:46:6D:EB:E5:85:85:61:5C:FD:2C:95:DE:0A:22:29:40
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aRgazEZt6-WFhWFc_SyV3goiKUA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.200.0/21
Signature Algorithm: sha256WithRSAEncryption
5c:79:12:44:82:3c:d3:91:9f:76:da:e5:72:92:b0:55:81:e6:
7a:25:00:78:a9:b5:01:ac:da:ff:c3:99:9d:ce:16:a9:69:47:
05:42:b9:b5:47:44:6c:ce:65:d7:f2:f8:02:77:d8:f7:10:04:
2c:fd:c0:0b:33:9e:87:31:63:c4:48:70:4e:4c:78:cb:a1:14:
f8:36:b0:9a:a8:a9:69:bf:4b:08:fa:b8:e7:04:75:12:30:17:
69:db:77:56:17:c3:60:39:22:5b:14:54:86:f8:aa:0b:08:94:
69:2c:22:6d:99:8c:a4:e2:df:77:a4:af:69:68:ec:b0:b3:b2:
67:60:2f:75:eb:77:e2:5f:fe:49:a6:ea:52:19:61:15:51:29:
e2:4b:5e:8e:88:d0:1d:8f:ef:da:35:60:73:e8:24:1c:9c:d7:
5f:94:18:a6:9b:50:bb:26:3a:4f:c9:e3:0c:7b:e9:92:b2:34:
6b:45:81:85:fd:20:7a:c6:0e:2a:04:f3:44:15:7f:45:c6:5d:
95:1a:c5:e1:ab:96:88:9d:9a:3b:e1:5a:d9:0a:64:65:16:8e:
ee:88:c1:9d:59:3a:95:e2:4c:9f:a7:97:85:6a:7b:89:33:6c:
cf:df:9c:da:90:27:b2:a4:cd:a7:ab:a9:d7:4a:ef:22:64:52:
e1:f6:b9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:35 2023 by rpki-client on console-fra.rpki-client.org