Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aTk7EOBH8weBrjdaIl-PSxwega0.roa
File: aTk7EOBH8weBrjdaIl-PSxwega0.roa (raw, json)
Hash identifier: KUDSYemMVOMMmGiafEMyHz1HOlT5iNqI1a8GSSCPz1k=
Subject key identifier: 69:39:3B:10:E0:47:F3:07:81:AE:37:5A:22:5F:8F:4B:1C:1E:81:AD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 228F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aTk7EOBH8weBrjdaIl-PSxwega0.roa
Signing time: Fri 25 Nov 2022 04:41:20 +0000
ROA not before: Fri 25 Nov 2022 04:41:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.24.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8847 (0x228f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:20 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=69393B10E047F30781AE375A225F8F4B1C1E81AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8e:b1:22:fb:98:9a:2a:06:73:56:be:9f:cd:
78:7e:8c:bb:c0:0d:ed:9a:96:ab:b6:ef:c4:75:e1:
22:c4:fc:5e:31:27:11:f0:70:0c:ec:a5:6f:7d:d3:
0a:60:c2:91:ae:23:ef:18:33:0c:0e:fb:87:b8:0d:
96:52:e4:7e:6a:ae:77:66:c0:f1:a8:0e:d0:9f:12:
a7:4a:b4:eb:99:58:c2:38:00:04:4e:38:fc:1a:7d:
55:b4:5c:fb:58:6c:45:0a:26:32:05:ea:22:a5:d2:
6c:f5:2b:46:4a:fb:a2:2c:7c:8f:ee:4a:40:ba:5e:
05:46:ef:51:d4:e4:6a:72:fa:41:7c:37:70:35:69:
43:84:ab:76:a9:b6:23:c1:b8:78:86:d7:ad:4f:60:
2e:14:6e:ac:e5:48:3c:5e:f4:f5:19:7c:65:d8:fc:
56:7f:ac:0f:42:b9:c6:db:9d:7b:af:ba:35:07:4e:
45:eb:5a:91:0e:a6:e9:9d:e2:34:79:53:41:ed:5a:
0c:cd:cf:83:6b:10:06:8c:ea:f2:21:60:94:fe:31:
45:32:92:f1:ee:67:2d:e9:91:a8:43:2d:81:c7:27:
7e:8d:3d:0e:2c:18:aa:41:c9:c2:2c:ce:c9:a0:a8:
45:cc:5a:33:da:c1:f1:21:98:7d:1d:db:d5:3c:70:
5c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:39:3B:10:E0:47:F3:07:81:AE:37:5A:22:5F:8F:4B:1C:1E:81:AD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aTk7EOBH8weBrjdaIl-PSxwega0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.24.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:cf:2b:de:cd:48:02:d9:e5:47:74:65:5f:f5:cf:a4:35:07:
68:0c:61:56:c7:69:36:7c:79:6a:69:24:9a:70:a7:81:2d:bc:
41:b5:b6:45:fb:be:40:95:0e:e6:74:3c:ff:1c:18:78:95:cd:
af:59:62:a1:8c:d4:48:61:d3:5e:af:89:b2:3c:1a:38:28:88:
a0:22:59:15:82:db:23:8b:56:7a:d9:32:38:b8:42:7d:5c:8f:
60:a4:b4:a6:f3:73:d8:be:5e:10:6f:88:d1:84:e3:43:c0:ce:
e3:73:8a:79:24:36:69:af:ff:0f:3b:52:cc:4b:9d:9a:47:77:
d1:c0:51:75:d7:4b:90:12:86:3a:2d:0c:ab:e3:ac:90:92:13:
09:e2:9a:57:1b:50:1f:88:22:2d:60:c4:32:45:e4:ef:17:5e:
4f:70:11:6f:11:e3:51:40:92:28:f5:9b:d8:81:6b:1e:a3:34:
4d:5c:4d:e4:3c:a0:fc:bc:16:78:16:00:da:7d:1b:39:26:5c:
ad:f1:73:b7:30:8c:02:31:21:74:2c:a1:97:52:81:b5:66:8f:
3f:4d:04:8d:17:05:61:d4:77:72:a3:83:c7:8c:e7:0e:59:93:
1a:0f:66:37:2b:61:23:fc:c5:59:ad:a4:6a:f0:01:ba:55:9f:
2d:3d:b9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:07 2023 by rpki-client on console-fra.rpki-client.org