Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e48vvz55SWnLyPN3naZ-Exk0RSI.roa
File: e48vvz55SWnLyPN3naZ-Exk0RSI.roa (raw, json)
Hash identifier: t3Hzkv4xMveXWtaHYQm1waYfiU3iFmeYmACV7Z2d3+o=
Subject key identifier: 7B:8F:2F:BF:3E:79:49:69:CB:C8:F3:77:9D:A6:7E:13:19:34:45:22
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e48vvz55SWnLyPN3naZ-Exk0RSI.roa
Signing time: Thu 15 Sep 2022 02:44:54 +0000
ROA not before: Thu 15 Sep 2022 02:44:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.176.0/20 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7B8F2FBF3E794969CBC8F3779DA67E1319344522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:8a:1e:b9:a1:36:5d:78:e8:59:ca:ed:47:
d1:db:dc:db:80:ab:4f:49:20:df:ff:d6:bb:9c:dc:
92:d7:fa:37:cf:14:b1:51:dd:86:bd:ee:9b:d3:9c:
32:00:95:6e:70:42:50:e3:9c:d6:95:91:17:8a:92:
ca:c4:9c:be:69:be:8d:40:da:71:b4:0b:17:78:ea:
2b:a4:fb:a4:99:5a:91:05:9a:6d:c1:90:a4:26:cc:
88:9d:9e:33:ed:be:b1:c1:b2:25:7d:1a:a4:97:c9:
37:d3:5d:7c:4e:a5:73:76:e6:ce:df:84:66:e4:f7:
2e:17:ac:76:91:3b:4f:b6:f6:75:75:44:92:66:ac:
7b:fb:d8:47:4d:90:c3:fa:bd:c2:98:fd:47:3e:7f:
b7:16:61:9b:a4:20:a2:80:43:cb:a3:60:4e:ed:d0:
a8:0c:ff:c5:15:13:7e:34:78:77:26:ed:2f:80:e5:
73:8b:05:cd:2b:9c:39:82:61:66:ac:82:48:8e:16:
d9:8a:90:b8:d4:8d:df:0a:33:36:52:51:87:ab:2f:
86:59:90:2c:a5:e9:ad:aa:98:7c:17:65:90:43:58:
50:7a:17:9f:5a:77:e1:74:9c:b9:55:44:5a:21:86:
b0:e2:61:7d:79:b4:15:51:89:fd:9c:56:95:ce:09:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8F:2F:BF:3E:79:49:69:CB:C8:F3:77:9D:A6:7E:13:19:34:45:22
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e48vvz55SWnLyPN3naZ-Exk0RSI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.176.0/20
Signature Algorithm: sha256WithRSAEncryption
21:07:ce:15:d9:bf:1e:39:de:df:8b:b5:f3:58:0d:49:9b:6c:
2e:1c:1d:3c:33:0f:80:56:6a:37:9e:57:e2:fe:eb:4c:26:d3:
63:76:0e:70:f2:e4:bd:86:1d:0e:a1:ed:a7:84:1f:52:8d:eb:
a4:72:d1:81:64:c4:95:9a:0b:70:69:5b:f7:1e:7c:b1:6a:d4:
71:cd:88:dd:73:5b:66:b7:4d:f5:98:c7:e6:01:0e:28:89:79:
58:0c:6b:19:a8:49:94:5c:dc:6d:60:42:cb:6b:20:94:f9:70:
80:d2:9c:84:3b:3e:93:2e:be:2a:e3:8e:b1:34:12:31:5f:4d:
5b:94:6b:d1:c8:87:c7:98:bf:58:7e:b8:5a:93:f8:d9:c1:9a:
43:76:02:a2:d8:97:a4:18:10:2b:15:17:62:0e:30:4c:6a:60:
be:aa:76:93:c6:9b:01:2e:4b:53:4d:a9:56:1c:96:11:04:20:
42:fa:41:81:86:0f:65:67:7c:4d:85:6d:e3:0d:07:ba:26:1e:
8e:fa:99:5d:25:ba:43:3c:18:a5:a2:89:94:14:72:5b:8a:19:
8f:ca:9c:8c:db:32:2c:22:d7:9c:6e:ae:c6:0a:35:d6:b1:8f:
4c:ed:10:4a:8c:9f:b3:d3:4b:0a:a8:3b:3b:4a:cf:7f:78:06:
0f:fe:88:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:24 2023 by rpki-client on console-ams.rpki-client.org