Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ctdQkg2n3igj7CQMegFSHP2QHEc.roa
File: ctdQkg2n3igj7CQMegFSHP2QHEc.roa (raw, json)
Hash identifier: uAhbxZ8IezwFcyl3P5/qKyvLIJ0H+f96MfZ4XB7sYgg=
Subject key identifier: 72:D7:50:92:0D:A7:DE:28:23:EC:24:0C:7A:01:52:1C:FD:90:1C:47
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 231F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ctdQkg2n3igj7CQMegFSHP2QHEc.roa
Signing time: Fri 25 Nov 2022 04:42:04 +0000
ROA not before: Fri 25 Nov 2022 04:42:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.132.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8991 (0x231f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=72D750920DA7DE2823EC240C7A01521CFD901C47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2b:d7:1a:b0:34:90:37:4b:56:7b:65:5e:75:
44:5b:11:cb:5b:59:45:af:0c:07:fc:d1:aa:80:95:
25:48:a9:f5:7a:c5:f6:ff:07:40:dc:b6:a5:b1:7b:
b7:6b:74:91:8a:74:38:55:af:54:ff:61:ce:4e:5b:
c4:d3:b4:c0:b1:d7:c9:22:3a:7a:07:6b:60:e9:fe:
18:b7:9a:90:91:02:b3:81:2e:6e:0c:fe:f8:1f:cc:
5c:7b:2e:a7:19:67:61:87:aa:61:3a:30:c4:5b:14:
c8:cb:f5:7a:8c:83:2d:ee:eb:d7:c0:dd:1c:ed:97:
31:ff:c2:94:6f:63:ff:ea:ce:75:c9:76:7d:ac:8f:
3d:30:2b:35:d7:2d:ae:0c:09:3a:03:07:91:e4:3d:
48:77:69:4c:c1:f4:ce:45:77:09:ca:88:90:08:ca:
b7:20:30:29:45:97:7a:a5:c9:ee:89:b8:85:12:9c:
42:3f:cf:4e:c0:b2:cb:84:c5:07:72:f7:a3:5a:08:
d6:c9:dc:88:aa:2b:cf:ea:30:45:fe:37:ae:58:9d:
e3:3f:e1:ee:74:83:db:9a:4d:5d:cb:65:17:60:47:
97:f2:5c:1d:76:f1:d9:10:0f:85:9f:3a:96:24:cd:
f9:07:70:7b:49:e0:3b:d0:a0:7c:ce:a4:97:86:8f:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D7:50:92:0D:A7:DE:28:23:EC:24:0C:7A:01:52:1C:FD:90:1C:47
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ctdQkg2n3igj7CQMegFSHP2QHEc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.132.0/22
Signature Algorithm: sha256WithRSAEncryption
14:42:c2:3d:49:e1:9e:e6:94:de:0d:83:0a:4b:50:49:d4:49:
70:71:19:2a:62:d6:ff:16:4c:5c:21:dc:de:71:49:35:6d:e2:
03:68:e2:16:8e:c4:b1:1b:b9:46:e9:6f:2f:9d:86:2c:a3:23:
af:55:49:ef:55:dc:2e:da:59:96:52:ca:03:b4:c2:e2:de:2d:
ae:a9:17:c6:43:ae:18:bd:4b:f8:33:41:9d:a7:a4:ac:5a:d8:
5d:94:6f:89:cf:9e:34:36:26:b9:cf:a0:f8:5c:80:ad:03:78:
81:3a:e3:12:4e:9d:6c:bb:dc:9f:77:c6:e0:5f:1d:32:81:0e:
2d:d2:c4:1f:19:9c:42:74:d1:65:ef:ed:74:12:aa:ae:5d:21:
29:14:27:50:32:4d:46:25:90:5a:a6:26:61:ce:46:b2:3f:05:
8a:53:57:78:b0:e5:13:26:f1:b2:86:75:32:76:be:a8:06:43:
29:0f:ef:be:bc:a6:57:d0:49:eb:e4:18:ad:ed:ce:02:b4:f1:
92:53:48:9e:06:f2:b7:73:6b:bf:4f:6f:46:8c:e3:60:17:38:
0e:54:7a:c7:8e:9e:44:87:3f:a1:e5:43:e3:0f:a4:07:a0:89:
f4:46:74:cf:d8:09:1d:7f:81:e4:09:06:1c:75:db:a0:6b:d4:
40:6a:df:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:31 2023 by rpki-client on console-ams.rpki-client.org