Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dU5dPv_LaTm5KpfmzMn4dBbw8bk.roa
File: dU5dPv_LaTm5KpfmzMn4dBbw8bk.roa (raw, json)
Hash identifier: 3kOibxe9qzVNg+DWPnX0XkdZabRjF6Jr7Kce0ogXrBw=
Subject key identifier: 75:4E:5D:3E:FF:CB:69:39:B9:2A:97:E6:CC:C9:F8:74:16:F0:F1:B9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dU5dPv_LaTm5KpfmzMn4dBbw8bk.roa
Signing time: Thu 15 Sep 2022 02:53:26 +0000
ROA not before: Thu 15 Sep 2022 02:53:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.254.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=754E5D3EFFCB6939B92A97E6CCC9F87416F0F1B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4f:97:0d:97:d1:57:9f:20:3b:3a:6c:22:33:
ac:18:83:da:3c:73:5b:68:f4:02:6a:49:fb:9b:50:
fb:da:58:2a:2f:75:d0:d8:1a:a5:ce:3e:a1:19:6b:
88:ee:64:ce:db:26:ee:c9:f8:3e:24:18:c5:ac:fb:
2d:41:a4:75:49:91:4a:7d:c7:16:a9:28:a0:e7:a7:
2a:35:70:70:89:33:df:b6:f0:b6:4c:dd:22:86:6f:
88:8a:05:5f:8e:39:01:40:ec:58:b8:43:6e:2e:60:
c3:e8:5c:70:29:73:95:80:73:15:a5:b1:80:d9:b4:
21:6b:0b:cd:54:c1:a3:d6:d0:a3:9e:50:0c:f5:12:
a8:7b:e3:dd:25:dc:9a:66:b0:9c:83:3b:89:c3:76:
13:12:ae:41:74:8e:31:9b:8c:c4:a0:ef:a1:d9:8b:
04:18:5e:41:76:70:5f:4b:98:6e:5f:4f:12:fe:88:
c4:cb:46:67:a7:85:81:79:84:9e:6a:90:a0:c1:c3:
9e:f7:19:d8:55:7f:58:2c:8e:ba:20:d7:15:5d:17:
ae:23:50:cf:c6:4d:88:4b:e3:cd:84:9c:ed:cf:3b:
83:76:ad:2e:5a:04:5e:98:58:f0:cd:31:9a:ef:1e:
b0:49:3f:d2:81:62:1e:98:a7:c2:5c:02:a5:88:b9:
63:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:4E:5D:3E:FF:CB:69:39:B9:2A:97:E6:CC:C9:F8:74:16:F0:F1:B9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dU5dPv_LaTm5KpfmzMn4dBbw8bk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.254.0/23
Signature Algorithm: sha256WithRSAEncryption
68:fd:d5:85:56:41:55:18:76:4a:4e:66:1c:d9:52:1e:b0:77:
39:0e:5b:9f:5d:0b:89:38:55:d3:69:b2:8f:35:d0:b5:36:2a:
e5:ae:db:a6:a0:d6:de:2d:4a:d4:85:7c:f3:ac:0d:54:30:71:
58:84:4a:53:cd:55:ce:8c:cf:8a:da:6a:e7:ff:18:d1:da:7a:
fe:f8:d3:0d:84:07:3d:3e:08:22:77:84:66:af:0c:04:ae:bc:
b8:77:3c:9a:c8:ab:70:c8:c5:11:78:92:ee:39:b8:e7:f8:8a:
22:52:7c:5d:84:bf:c7:16:cd:bd:44:80:b5:0d:cb:9a:31:74:
c4:9d:da:a6:9b:16:d1:dd:f3:52:00:6c:26:28:92:64:61:dd:
70:bd:bc:2d:a0:fb:c4:98:4b:12:59:6b:ae:b1:4a:48:dd:5b:
02:57:de:a8:14:90:e9:db:72:5f:b0:9d:f2:c5:59:0a:5f:d3:
c8:ac:12:8b:09:8e:5b:ec:0b:27:dc:ff:ce:3b:c4:e0:fa:01:
95:81:26:59:c4:ca:9c:06:a1:bb:5d:82:b5:7d:1f:39:4d:7a:
c5:09:82:b9:cb:fb:19:83:23:e0:19:89:6c:20:fe:1f:c5:fb:
21:45:89:5f:b2:50:8c:46:3e:0a:31:6e:77:78:52:a0:13:a5:
e1:72:2e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:24 2023 by rpki-client on console-ams.rpki-client.org