Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dDsEyCSofTGeDZgd2R35gkTznC8.roa
File: dDsEyCSofTGeDZgd2R35gkTznC8.roa (raw, json)
Hash identifier: bd8/EtQNmMfl0YeGn25J3cUlMdfo1mW/EUJX9ItPCdA=
Subject key identifier: 74:3B:04:C8:24:A8:7D:31:9E:0D:98:1D:D9:1D:F9:82:44:F3:9C:2F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20DC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dDsEyCSofTGeDZgd2R35gkTznC8.roa
Signing time: Fri 25 Nov 2022 04:39:12 +0000
ROA not before: Fri 25 Nov 2022 04:39:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18429
IP address blocks: 118.232.199.0/26 maxlen: 26
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8412 (0x20dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=743B04C824A87D319E0D981DD91DF98244F39C2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:8c:7e:75:3e:2d:12:35:ba:c4:6b:04:a9:
e0:4a:89:32:13:3e:e1:b1:4a:cf:78:56:a1:76:d7:
49:ff:83:8e:1e:62:86:68:00:0e:f2:56:01:21:2d:
ec:fb:68:88:42:9b:93:a7:e4:2a:78:60:4b:2d:ef:
49:45:ef:06:d2:58:5e:79:6f:c4:9a:22:54:84:89:
0f:8b:f0:a6:84:e1:01:66:3a:f5:cb:91:73:33:fa:
1b:1d:ef:6f:57:57:9a:ff:56:76:d1:f3:9a:b6:7c:
86:e4:c0:41:e4:0a:7e:63:18:bb:a9:39:f6:1f:43:
73:4e:2e:64:2a:da:dc:29:fa:b5:1a:2e:96:3e:00:
ce:fa:35:78:3a:84:cc:60:df:fb:92:3e:2c:85:50:
a1:bf:31:bd:49:98:57:33:db:36:bc:44:5f:8f:23:
19:d7:81:a4:02:a1:da:c9:9a:c7:78:d8:d7:7d:31:
ce:1d:fd:30:eb:2c:5f:dc:ab:5a:b4:d8:9f:83:d2:
c2:20:9a:7f:91:3e:a9:09:b1:f9:3e:ab:99:a3:da:
98:99:25:0e:28:d1:5f:c4:9b:cc:22:ac:e3:29:4f:
b6:0c:1a:2b:46:43:28:f8:a8:a8:5b:9b:da:50:82:
97:ec:33:c4:87:a3:b4:eb:03:54:71:b2:78:a5:2c:
d1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3B:04:C8:24:A8:7D:31:9E:0D:98:1D:D9:1D:F9:82:44:F3:9C:2F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dDsEyCSofTGeDZgd2R35gkTznC8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.199.0/26
Signature Algorithm: sha256WithRSAEncryption
6a:22:4e:df:64:32:4d:82:df:d2:6a:1e:8f:79:e8:a5:5e:aa:
11:ef:47:74:fb:af:4e:f7:f0:5e:d1:59:6c:10:f0:aa:8a:0e:
f2:78:a2:7d:32:c7:8f:44:13:9e:69:41:c8:16:ee:ca:44:ee:
82:c1:0b:38:11:23:0c:de:f9:bb:40:3a:11:3a:06:6a:72:a6:
69:90:30:3c:be:c9:79:5c:45:08:d7:97:71:9f:98:2f:99:8e:
84:d7:db:f1:fa:b3:7c:d1:93:ef:49:41:e1:83:57:c9:0d:f9:
93:e7:43:7e:36:9a:de:4a:11:3e:95:77:7d:61:73:31:30:e9:
73:3f:53:d1:9f:e7:01:35:5b:94:1e:29:4e:a8:7d:b2:d8:32:
e9:e8:9e:6f:cf:04:27:53:9b:8d:7f:4b:a0:76:4d:b3:83:b1:
eb:ba:d9:ba:32:90:b4:30:d0:59:41:44:a4:cd:7a:3e:66:11:
7d:11:a6:56:93:9d:a7:3b:90:50:4e:4d:60:d6:f5:c2:9f:52:
c8:c5:94:10:29:21:25:09:75:84:03:7d:bd:0a:5b:99:a8:eb:
bb:f4:83:2f:e2:05:49:d0:4f:c3:d6:0f:2a:3e:d9:fc:3e:76:
30:85:76:2b:8b:ba:77:d6:78:01:0c:1d:2e:84:29:64:3e:f5:
3c:81:d7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:07 2023 by rpki-client on console-fra.rpki-client.org