Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e9sjbLCmCRzLwxB1N1klbVkHeYQ.roa
File: e9sjbLCmCRzLwxB1N1klbVkHeYQ.roa (raw, json)
Hash identifier: O9juelyhOHsXYPmavwv+CZIXySc/P5HufoCIhjbQ3kI=
Subject key identifier: 7B:DB:23:6C:B0:A6:09:1C:CB:C3:10:75:37:59:25:6D:59:07:79:84
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FC7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e9sjbLCmCRzLwxB1N1klbVkHeYQ.roa
Signing time: Tue 11 Oct 2022 14:13:39 +0000
ROA not before: Tue 11 Oct 2022 14:13:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.198.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8135 (0x1fc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Oct 11 14:13:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7BDB236CB0A6091CCBC310753759256D59077984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5a:80:2f:92:1d:bb:4b:f6:e2:f5:e5:65:e9:
76:23:3b:76:72:4f:db:e1:d2:bb:73:f5:94:16:65:
0c:50:ed:f0:32:55:1b:98:06:b4:78:22:6f:8a:10:
87:27:a2:0f:78:c7:44:68:94:b8:f6:b1:db:38:f2:
39:55:d0:ba:40:05:cd:61:1f:d6:02:24:04:f1:dd:
89:6b:b8:d2:14:7d:cb:da:2e:d1:dc:be:1b:4c:79:
80:69:28:1f:21:54:c0:dd:82:6f:14:c7:fe:21:a9:
0c:a1:de:ac:7b:1b:2c:37:22:9b:74:34:22:40:99:
78:04:bd:45:0b:da:29:e5:71:6b:43:35:28:3b:78:
38:76:24:d7:0d:6d:7b:70:50:5a:01:c1:3c:f7:94:
08:59:98:3f:6a:86:45:49:00:61:a2:d5:70:26:26:
c3:64:8b:18:70:68:da:b7:d4:79:25:34:62:fe:85:
e5:bd:b1:48:ac:5a:50:ce:7d:ab:c4:80:c1:57:ec:
92:b9:cd:84:d9:30:b2:75:c6:67:a5:28:20:80:3e:
83:18:a7:4e:d4:eb:d8:1e:fa:a7:c1:63:18:f6:f5:
52:7b:cd:fc:9d:79:64:3f:04:5f:7f:e6:c9:cd:57:
56:ef:77:42:d9:e6:b7:16:ab:39:92:7b:ac:27:15:
76:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DB:23:6C:B0:A6:09:1C:CB:C3:10:75:37:59:25:6D:59:07:79:84
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/e9sjbLCmCRzLwxB1N1klbVkHeYQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.198.0/23
Signature Algorithm: sha256WithRSAEncryption
19:bb:84:ea:1d:6a:7e:93:6f:b8:e8:50:23:58:e5:52:3f:9a:
a5:90:50:5c:b3:40:b7:09:9c:26:10:3a:5f:f9:58:72:73:c7:
97:54:76:c2:0b:f2:4a:db:d0:bc:d1:74:16:47:76:03:a9:1c:
17:e5:19:bf:4c:0b:c0:cb:f3:09:fc:ed:6a:1f:ec:c6:e0:6c:
6d:a8:94:37:f4:ce:f1:77:67:d6:63:7b:f3:1a:4b:99:84:da:
ce:08:f6:5c:00:6e:f9:3d:01:fe:01:d3:4d:d1:ad:22:93:b0:
01:c8:bc:6f:a8:fc:35:cb:29:20:62:4d:fe:f3:cd:26:e7:15:
0a:c6:7b:93:03:e8:bf:b4:b3:c8:be:d6:1f:b9:b5:e0:42:4b:
ad:b6:9f:93:4e:69:73:bc:3d:62:46:c2:b0:2b:d0:54:23:4a:
5e:3b:01:25:c3:36:b9:0a:b2:68:b4:3e:d8:91:dd:3d:f8:5b:
de:96:46:d9:95:76:09:17:5c:e1:72:78:5c:5c:7a:ed:d9:59:
48:c2:06:59:a7:24:af:19:16:f9:ff:f7:47:62:be:56:9a:32:
65:71:b4:b5:85:30:06:ab:e9:25:b0:47:62:06:a7:9c:6e:69:
0f:7f:e8:23:b8:ce:37:47:26:b1:a2:4e:33:2e:8b:b4:9d:d4:
e0:16:82:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:36 2023 by rpki-client on console-fra.rpki-client.org