Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/c27MtEwv8YjHUmtw3DFAgtYUgFE.roa
File: c27MtEwv8YjHUmtw3DFAgtYUgFE.roa (raw, json)
Hash identifier: vNug2VfI5gyTJ3kGzT4aIm680pHZ9lz1IsUPch8P4Ds=
Subject key identifier: 73:6E:CC:B4:4C:2F:F1:88:C7:52:6B:70:DC:31:40:82:D6:14:80:51
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2294
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/c27MtEwv8YjHUmtw3DFAgtYUgFE.roa
Signing time: Fri 25 Nov 2022 04:41:22 +0000
ROA not before: Fri 25 Nov 2022 04:41:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.0.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8852 (0x2294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=736ECCB44C2FF188C7526B70DC314082D6148051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:12:1d:8f:06:c7:74:76:9b:55:2e:08:c0:
f8:90:48:4e:ca:ac:55:79:9b:05:1d:c8:7f:c4:06:
bd:94:e7:be:db:1f:ab:56:2f:b0:7a:66:de:98:cf:
ae:02:7d:37:00:e0:d4:ce:4b:20:5f:0d:2f:4a:91:
d0:d7:29:bf:be:74:04:64:f8:ec:9e:eb:38:ec:aa:
ab:35:d4:84:a2:b0:de:8a:3c:9b:ee:1b:d9:c0:68:
2f:70:22:b2:e8:87:b9:73:8c:69:ce:5d:0f:b3:60:
99:62:89:3b:24:ef:27:a8:3e:be:be:5f:77:b2:ed:
a8:bd:a7:a8:a1:10:6c:dd:34:91:8c:47:af:44:cb:
0e:48:a0:43:11:f9:9b:7d:c4:a7:69:d9:29:46:5c:
ae:eb:8e:bb:dc:11:9b:fe:28:88:ac:2d:61:61:e7:
de:93:da:9a:af:0e:d8:a6:77:8b:3c:4a:91:9a:45:
9a:f7:60:b2:bc:a2:e2:ee:93:21:47:6e:ce:ce:9f:
c5:55:54:b5:b0:71:0c:7b:85:61:3e:4d:cb:31:5f:
c7:f3:04:df:0f:99:96:2b:e6:ca:60:ba:21:13:14:
d6:62:e3:a4:20:27:62:d0:c6:fb:b8:70:0f:b3:b7:
af:24:6a:cb:96:0c:bf:cf:bc:28:4d:b1:d6:89:81:
4d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6E:CC:B4:4C:2F:F1:88:C7:52:6B:70:DC:31:40:82:D6:14:80:51
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/c27MtEwv8YjHUmtw3DFAgtYUgFE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.0.0/20
Signature Algorithm: sha256WithRSAEncryption
14:9e:43:22:df:81:f1:9e:da:be:3b:7a:13:64:5b:db:b2:00:
ab:1c:ad:d2:b1:70:d0:3a:c1:53:96:52:25:42:bc:4a:85:86:
99:30:65:0e:f0:2c:cd:08:7e:d3:30:81:24:f2:c6:73:08:ff:
11:e4:ad:65:5a:31:6c:eb:d8:ae:75:b7:fa:e2:8a:1a:6f:ad:
7c:1b:8e:c3:46:09:00:6d:f9:f9:7c:22:66:3e:21:60:d7:23:
a3:0c:d5:d0:b8:81:b2:0f:5b:92:75:eb:85:2d:27:c6:41:ac:
63:4d:f2:c4:33:50:7d:d4:18:90:1c:04:0a:f3:91:28:ca:4d:
d8:7b:12:c6:1b:22:b8:8d:5c:4a:4c:72:87:ba:5c:5c:59:29:
7f:3c:12:37:0a:6a:f5:56:2e:7d:21:b9:5e:cf:d4:2c:66:22:
b8:ce:21:db:b5:91:41:0e:d4:8e:7e:88:6a:16:d5:9b:bf:a0:
5c:c6:36:f3:71:28:c3:46:a4:01:cd:0d:d4:c0:86:d2:ee:f7:
dd:69:cd:29:c3:7a:37:78:00:99:62:40:e8:71:77:dd:03:71:
dc:9b:dd:bd:1f:2e:6f:b4:f4:c3:24:c2:2b:f3:92:c4:1b:55:
ef:a1:85:43:c0:be:a1:51:75:2d:87:d5:2d:3e:19:b0:fe:40:
73:a2:bc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:07 2023 by rpki-client on console-fra.rpki-client.org