Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/alJ9VgllSw7LefujTQc79wuIHbs.roa
File: alJ9VgllSw7LefujTQc79wuIHbs.roa (raw, json)
Hash identifier: lCZskt3D2z8fAL3IoHq5Zba07WPrZf9s+/sguAhrek4=
Subject key identifier: 6A:52:7D:56:09:65:4B:0E:CB:79:FB:A3:4D:07:3B:F7:0B:88:1D:BB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22FF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/alJ9VgllSw7LefujTQc79wuIHbs.roa
Signing time: Fri 25 Nov 2022 04:41:54 +0000
ROA not before: Fri 25 Nov 2022 04:41:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.8.64/26 maxlen: 26
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8959 (0x22ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6A527D5609654B0ECB79FBA34D073BF70B881DBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:ca:d8:7f:ca:62:26:fa:de:0e:7c:0c:a1:
dd:11:d1:54:3b:d1:ae:8b:6b:90:d4:97:45:26:d3:
d0:8c:ce:dc:22:c5:fb:e0:9a:cd:85:ff:21:0d:2b:
bc:ec:70:7a:14:aa:3b:56:e8:f4:2b:98:63:38:e3:
06:d6:1d:c4:9c:23:17:22:c5:f9:9d:84:c4:45:09:
bb:a7:63:ad:4e:cc:9a:a8:1d:49:22:04:70:52:56:
10:62:ab:25:d6:90:75:3b:49:03:cd:28:08:80:e1:
b6:3e:df:7e:fb:b6:3b:2a:29:51:f6:bd:0b:38:b3:
76:78:82:89:18:0e:53:0b:73:f9:f3:07:a2:e0:00:
92:ae:fa:e6:92:2d:bf:5d:6b:0c:ee:f8:09:1c:82:
06:4c:73:de:3e:4b:04:04:1b:b6:41:07:ee:b0:af:
f7:68:02:56:fd:cb:fe:99:77:4c:80:8c:b8:40:2d:
cc:d4:68:63:00:09:9e:5f:19:37:79:6a:99:3a:a3:
57:ec:78:82:8c:4d:97:7a:9c:f0:ec:9d:99:ad:3e:
5b:d9:ad:74:62:24:8f:9a:5b:91:00:6e:a3:8e:e6:
c5:b7:99:46:9c:82:1d:33:0b:d3:38:db:ef:39:a6:
3e:00:6e:9c:55:99:7f:02:53:4d:61:b3:31:39:77:
8a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:52:7D:56:09:65:4B:0E:CB:79:FB:A3:4D:07:3B:F7:0B:88:1D:BB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/alJ9VgllSw7LefujTQc79wuIHbs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.8.64/26
Signature Algorithm: sha256WithRSAEncryption
37:d0:b8:9b:47:de:8a:2d:9c:fd:ff:f5:5a:45:62:c4:a0:93:
cd:ba:23:5c:f2:23:5f:03:23:b0:25:ef:0e:4c:66:f9:63:ad:
63:f8:43:45:16:06:4f:d2:a3:f3:b0:ea:f7:24:91:f1:c0:aa:
14:4e:6d:a5:14:fd:c0:e5:a9:08:fe:5d:2d:c2:37:d4:68:10:
58:b8:c8:3d:58:10:a0:01:cc:60:52:3a:6b:3b:06:b2:a1:b6:
04:5a:af:36:89:e2:7f:47:8b:ac:94:6a:84:0a:a6:5a:b0:3e:
bf:41:97:e2:ed:84:98:72:5a:26:b9:d0:48:b0:96:dd:7e:9e:
d3:76:57:97:9c:01:d4:17:fa:8e:55:37:50:0d:0a:36:56:3b:
6e:80:fd:30:a6:50:2d:49:ce:8e:0d:96:3d:b4:87:7e:7f:75:
e3:c4:44:4a:52:71:c9:66:bf:88:92:b5:2a:1a:f5:6c:80:cd:
c0:c0:f8:17:1c:c4:ef:cb:db:e4:8d:7d:49:e1:85:ac:9d:4e:
19:55:b6:62:18:8b:05:c7:c5:0d:91:38:c8:25:da:3f:26:8d:
b3:10:ca:84:3b:96:7d:8c:77:e8:ca:90:24:0e:1a:c4:ab:b1:
04:57:6b:dd:34:76:46:99:4f:59:5b:ce:91:e2:8d:87:ee:a8:
b2:fa:92:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:07 2023 by rpki-client on console-fra.rpki-client.org