Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/crVYbV494_Rx7REaIww152FRTWE.roa
File: crVYbV494_Rx7REaIww152FRTWE.roa (raw, json)
Hash identifier: +PEI5Z0khTxDI+ALo3mM0ycVAQVDWCzfn8DnJjzK5aU=
Subject key identifier: 72:B5:58:6D:5E:3D:E3:F4:71:ED:11:1A:23:0C:35:E7:61:51:4D:61
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/crVYbV494_Rx7REaIww152FRTWE.roa
Signing time: Thu 15 Sep 2022 02:45:40 +0000
ROA not before: Thu 15 Sep 2022 02:45:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.68.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=72B5586D5E3DE3F471ED111A230C35E761514D61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:62:b9:64:60:0b:69:a9:6b:a7:2b:84:31:
88:a0:54:31:7f:be:df:78:0a:b1:55:71:57:38:a9:
18:9e:80:1d:0a:cb:6e:c8:d4:9f:d5:95:50:f2:34:
83:6d:21:c1:b0:f1:c4:21:df:34:50:25:3e:82:92:
e5:bd:6a:b4:cd:0f:f5:c8:e3:b8:d3:4d:84:32:b9:
f0:fd:73:52:f0:b3:a7:5c:04:f8:e8:e0:5c:0d:ad:
c7:7b:4f:77:66:2e:78:d7:24:26:fd:01:5c:73:48:
f1:5f:b5:56:09:a7:6e:b0:a4:f7:2f:c8:83:e5:b2:
17:5f:76:9f:98:5c:2e:e5:af:72:f8:34:1e:60:b2:
28:82:a1:17:00:35:89:2c:b7:b4:de:19:0b:22:e4:
d1:7d:f8:71:45:cb:10:20:42:c7:90:fa:97:60:79:
07:b1:f8:3b:2a:7d:40:97:10:cc:2e:a5:dd:bd:f3:
a5:ad:6f:7f:4a:97:d5:d3:29:71:4c:dc:ac:02:fd:
01:46:b9:42:58:53:cc:7d:3a:a3:d6:c3:35:12:18:
e0:4b:72:10:74:27:68:4b:92:88:96:7a:a1:95:e6:
c6:86:7f:67:f0:d4:27:30:62:a4:f0:8e:42:b3:46:
15:51:69:dd:61:d7:c8:1c:c3:c5:ad:7b:5d:9f:94:
1c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B5:58:6D:5E:3D:E3:F4:71:ED:11:1A:23:0C:35:E7:61:51:4D:61
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/crVYbV494_Rx7REaIww152FRTWE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.68.0/22
Signature Algorithm: sha256WithRSAEncryption
78:99:4d:4c:55:ed:e5:5f:10:07:b2:5d:5f:c9:63:e4:bb:3e:
02:10:0e:65:55:8e:68:6f:8f:14:d9:7a:f2:e9:cc:fe:93:0d:
b7:60:fa:82:1e:c4:4c:1e:1d:51:b8:d6:d5:e4:2a:73:69:ba:
0f:ed:c2:7f:aa:d1:f0:03:20:c1:a7:16:de:ae:c5:42:3a:df:
ea:95:20:87:19:65:b0:3a:53:6f:e8:cc:ad:21:c3:3a:20:01:
1f:6e:3c:9e:f0:94:53:a5:c5:da:2b:b7:7b:d6:9a:20:7a:1f:
e4:52:fe:c0:0d:aa:78:88:e1:cc:16:35:c1:8d:aa:42:b2:6a:
c7:7f:23:4d:24:4c:d1:cd:3e:ce:48:3b:7b:d8:02:d4:49:88:
39:1d:3b:c1:02:c2:77:9c:57:59:e6:0b:2c:33:e2:72:89:a2:
49:71:e2:33:85:00:21:9e:0d:86:3f:12:8d:6a:5d:f0:d9:b4:
ad:af:fe:ed:01:ce:98:a2:79:6f:4c:b1:fa:41:32:e1:ee:78:
41:f6:2b:2c:f4:03:32:f9:ac:0b:4b:8f:ec:ac:ed:1e:44:6b:
35:ba:50:a0:b7:ae:59:5d:02:8e:86:da:b8:94:c0:5d:e2:6d:
89:e3:26:4b:b8:30:29:1b:c5:e9:36:7d:ed:7d:53:df:75:e8:
23:ef:da:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:24 2023 by rpki-client on console-ams.rpki-client.org