Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/brTG-cvRZBMr7ENBN0BMHb3ZNdY.roa
File: brTG-cvRZBMr7ENBN0BMHb3ZNdY.roa (raw, json)
Hash identifier: xSQ2a9py3rohFZ7uXk20CvDshdhain1v/cszs8AyEIg=
Subject key identifier: 6E:B4:C6:F9:CB:D1:64:13:2B:EC:43:41:37:40:4C:1D:BD:D9:35:D6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2191
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/brTG-cvRZBMr7ENBN0BMHb3ZNdY.roa
Signing time: Fri 25 Nov 2022 04:40:04 +0000
ROA not before: Fri 25 Nov 2022 04:40:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8593 (0x2191)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6EB4C6F9CBD164132BEC434137404C1DBDD935D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f1:8e:de:5a:d8:90:ce:95:fd:4a:23:1e:2a:
28:6c:54:5e:b3:ac:59:4e:73:ed:12:76:61:b8:a2:
29:d2:be:de:04:24:4d:c2:ef:87:e9:81:3e:14:47:
91:b5:ab:f7:e6:31:60:a3:16:fb:a6:ae:b8:db:b3:
82:ea:19:e0:a0:b4:0a:35:08:86:aa:44:db:62:c0:
8b:3a:50:dc:65:68:0b:d7:fc:89:69:05:8b:c2:f9:
3b:ea:cc:b8:55:7d:7d:9d:38:d4:0b:d1:f8:1f:9c:
7d:9d:c0:54:82:84:74:eb:1c:bc:c8:84:1f:ec:0d:
73:e5:70:cc:68:40:c7:ea:34:a3:76:2b:e0:54:3a:
62:ef:60:d6:4f:d1:88:17:ef:77:ac:88:4e:5b:45:
9c:3c:ba:65:3c:0e:f0:1a:37:26:8e:54:2f:44:77:
0d:e8:3a:28:0b:41:20:a1:dd:a6:f1:dd:29:1f:0d:
ad:cd:83:f8:7f:60:94:fb:d4:be:e1:0e:b3:01:44:
16:22:b8:c4:86:35:ed:93:32:77:22:05:3c:6a:52:
46:01:a0:b5:56:7a:4f:74:ef:b7:aa:07:e7:e5:90:
9e:f5:95:2b:63:21:f0:99:de:3b:c6:74:56:e7:32:
89:99:a7:d7:03:09:df:9c:63:1a:6b:07:6c:98:5f:
42:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B4:C6:F9:CB:D1:64:13:2B:EC:43:41:37:40:4C:1D:BD:D9:35:D6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/brTG-cvRZBMr7ENBN0BMHb3ZNdY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.102.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:01:12:9c:28:c0:a2:9f:7f:de:b3:0d:1e:41:70:03:e6:d6:
5e:ed:88:5b:f4:13:cb:a1:d9:28:da:7c:cb:58:eb:fe:a3:45:
85:83:68:eb:7f:f5:51:21:fb:cd:54:c2:ab:07:a1:82:e0:2e:
a3:4e:56:6c:4e:c2:4c:49:75:27:3a:f7:43:02:96:6d:d2:82:
17:1c:cb:5e:77:26:dc:56:30:ed:b2:07:36:f1:6d:65:e0:7a:
da:14:4f:62:94:98:5f:58:b4:4e:3a:98:1a:ca:02:8c:35:b3:
e7:0f:af:31:f0:06:95:94:f8:e0:b9:93:4d:47:1b:4f:7f:8b:
0f:90:35:16:ff:e4:bf:78:a4:98:2c:86:4a:bf:68:f2:d1:41:
be:26:8a:b0:cf:b6:c1:40:a8:7e:a1:a9:92:7c:cf:da:69:fb:
28:39:52:39:95:60:ea:0d:ac:4b:62:40:c5:62:44:05:ea:42:
67:24:8e:e2:c8:8a:10:f3:66:c9:13:cb:7f:69:3e:bf:45:4a:
a7:8b:84:92:d4:b0:44:0d:85:e0:22:b2:56:56:72:05:5e:0e:
6c:1c:ec:bb:7f:be:10:bd:74:8c:53:9f:c9:6d:cd:bc:b3:ab:
ef:3d:fd:c5:b2:82:68:1d:af:9e:f8:87:81:e7:cf:c7:ce:dc:
12:d0:59:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:07 2023 by rpki-client on console-fra.rpki-client.org