Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bqmwmKhz7EEoWKx56WGR7pYUEPk.roa
File: bqmwmKhz7EEoWKx56WGR7pYUEPk.roa (raw, json)
Hash identifier: vC0nnzoXXeCkkoffm35JzGebuOJYvfvJfXzmiwEtqKc=
Subject key identifier: 6E:A9:B0:98:A8:73:EC:41:28:58:AC:79:E9:61:91:EE:96:14:10:F9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 225A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bqmwmKhz7EEoWKx56WGR7pYUEPk.roa
Signing time: Fri 25 Nov 2022 04:41:04 +0000
ROA not before: Fri 25 Nov 2022 04:41:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.100.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8794 (0x225a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6EA9B098A873EC412858AC79E96191EE961410F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:db:de:a9:d8:9b:80:cd:14:e4:a5:7e:cd:be:
56:de:7e:9b:af:72:1c:1a:f6:02:47:f2:ef:16:7d:
2b:cc:7f:1b:8b:fb:65:58:bc:c7:ce:8d:46:3a:89:
3b:01:16:d1:4d:c5:72:45:1e:ae:8f:ea:b5:5b:e6:
06:69:b0:70:ec:3c:f3:ca:0c:69:ac:ce:63:ae:14:
8e:42:fb:0c:c5:e3:46:70:a9:c1:aa:b6:d3:40:1e:
9f:cf:03:78:75:b9:86:c3:f7:c0:7b:f4:0a:c1:77:
da:24:f5:3a:98:30:4b:8c:51:c9:56:50:62:94:18:
52:57:02:cf:92:19:5f:e6:df:98:a5:ec:01:4b:b8:
32:31:95:14:5a:1c:ec:96:03:c7:ca:6f:6e:18:91:
a6:a0:1a:81:e6:d9:87:ec:86:42:d6:bb:bb:d4:0e:
af:04:2c:e4:7b:e9:ac:70:20:ab:76:c4:8d:00:6e:
a6:a8:3c:6c:27:cf:57:ab:8b:a9:f4:33:cf:53:a9:
dd:13:98:a1:e6:05:eb:c9:f7:d1:6d:0d:06:0e:ce:
9e:8b:6a:79:d9:00:23:00:ae:6f:ab:75:0b:a8:f8:
a4:a0:19:1b:56:07:24:f8:a8:79:8c:2d:2c:8b:3d:
8a:00:9e:80:78:0f:bb:27:63:92:b4:3e:f7:eb:d4:
68:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A9:B0:98:A8:73:EC:41:28:58:AC:79:E9:61:91:EE:96:14:10:F9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bqmwmKhz7EEoWKx56WGR7pYUEPk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.100.0/22
Signature Algorithm: sha256WithRSAEncryption
33:41:4f:31:ec:d6:9c:98:b9:98:47:8a:50:eb:4a:43:47:dc:
d9:29:dc:9f:68:df:17:ef:2d:f3:ad:24:37:12:85:f3:f3:7b:
10:d3:8c:ae:6d:b3:2f:5e:bd:29:de:36:28:dd:bc:4d:d8:e3:
1b:03:2e:d9:ab:a3:0f:67:dd:f2:51:48:aa:04:df:09:79:3e:
a7:fc:03:9a:d8:0e:71:a5:85:12:6b:86:f7:93:21:3d:84:34:
7b:8b:f1:0d:9d:1d:63:2b:ad:6e:ca:e5:5e:e5:11:56:6a:89:
65:b0:5c:75:87:5a:d4:39:57:42:62:2d:e7:25:e4:f7:a3:b9:
fc:e0:7b:a6:0f:07:0e:4f:12:e0:eb:d1:2d:7c:93:2d:01:42:
26:6e:d0:c1:35:a2:6e:57:24:71:3c:6a:f7:08:8f:d4:b9:44:
a3:09:d3:84:bd:87:d7:89:cb:99:77:d9:ac:3a:9f:d0:2b:df:
06:cb:e0:80:b7:a6:7b:e4:b4:b7:23:36:87:c7:0f:9e:e8:88:
45:e9:60:37:e8:b8:2f:40:d7:2e:56:04:01:06:10:82:a5:04:
67:26:2e:fa:cf:d5:e5:82:17:a2:f2:8c:1c:e7:d9:43:cc:f3:
f0:88:7f:9b:9b:34:49:c8:39:2f:d7:fc:5a:cd:ff:84:05:34:
47:85:36:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:07 2023 by rpki-client on console-fra.rpki-client.org