Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eJynW7bgAp6x_lellFSXCidozA8.roa
File: eJynW7bgAp6x_lellFSXCidozA8.roa (raw, json)
Hash identifier: TKfQ0Ml9vDmQtZsYsqIUksBiOC+MnuMv/jU9omvoWMI=
Subject key identifier: 78:9C:A7:5B:B6:E0:02:9E:B1:FE:57:A5:94:54:97:0A:27:68:CC:0F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 209B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eJynW7bgAp6x_lellFSXCidozA8.roa
Signing time: Fri 25 Nov 2022 04:38:55 +0000
ROA not before: Fri 25 Nov 2022 04:38:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.80.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8347 (0x209b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=789CA75BB6E0029EB1FE57A59454970A2768CC0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f0:3e:95:d4:c4:0e:67:b5:1d:92:4b:2d:a0:
47:f3:0e:f5:9c:a4:a4:83:94:5e:ca:79:1d:f1:62:
0d:3e:2e:97:c7:54:b4:6c:2c:db:9f:25:9a:1d:dd:
de:2c:5a:4e:23:79:04:cb:a9:04:44:19:21:81:b2:
4c:3c:a7:0f:1c:66:d1:c5:99:93:06:b8:ea:46:f4:
e4:3e:a2:e1:3d:09:2e:a8:47:2f:03:4b:a2:3e:f4:
96:ab:f3:3c:4f:17:e9:74:cf:52:04:f4:e2:a5:27:
b6:d9:30:e7:a1:5f:91:ca:0d:ad:20:7f:eb:7e:28:
94:36:65:50:cd:6c:17:ed:42:ff:91:a7:73:00:e1:
12:66:51:e3:4a:9d:0b:26:3c:ab:1d:5d:61:ad:23:
87:19:c9:dd:c4:d7:90:87:ba:c2:93:08:1b:d1:0f:
35:ff:24:80:a0:f9:a3:44:8c:e7:03:3e:bf:33:c2:
07:93:9a:c5:49:80:c3:10:e4:06:62:e7:28:63:96:
a2:08:c2:b9:40:8c:a1:2a:be:59:23:5d:5f:16:e2:
3a:e0:01:65:7c:f2:d7:35:99:c0:22:d9:5a:be:31:
32:22:e4:a3:66:5b:e3:61:a7:cf:35:0f:3b:5f:c6:
5f:aa:a3:e7:57:52:18:20:a9:ad:cf:0e:0d:7a:cc:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9C:A7:5B:B6:E0:02:9E:B1:FE:57:A5:94:54:97:0A:27:68:CC:0F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eJynW7bgAp6x_lellFSXCidozA8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.80.0/21
Signature Algorithm: sha256WithRSAEncryption
13:97:bb:67:12:ce:94:af:1b:7b:1a:63:34:7e:5e:63:83:e4:
3d:f2:9b:25:4f:cc:1f:13:13:91:b6:ba:d7:ec:1a:6f:ea:0d:
0a:87:60:44:3c:6f:92:b7:68:a1:b2:05:7a:ab:57:1c:6c:79:
89:68:8b:6f:a3:6b:d9:d4:a1:eb:c0:2a:f5:83:b2:74:a9:50:
8c:6f:e8:80:b8:85:de:c5:62:4a:1a:e8:10:5c:be:95:8c:6c:
65:e5:17:a2:68:34:ed:4b:fa:63:4c:11:e7:73:d5:b2:13:3b:
78:b0:58:a7:c3:13:4e:cd:e6:8d:78:0a:bd:63:72:d2:37:a4:
14:9d:a6:66:8a:20:a8:59:46:90:ee:ee:bc:1a:ac:26:9b:e3:
c8:33:6e:7e:9b:ba:22:7b:64:fb:bf:e3:2a:f9:10:16:5c:7d:
2e:d5:56:ac:62:8d:ad:b6:4b:09:c1:57:b3:29:75:f0:c2:b7:
b7:a5:a3:eb:84:31:9d:29:e7:22:f8:a7:eb:c7:79:01:21:9b:
e9:d1:ae:b7:20:8f:d2:a1:46:a6:ed:3b:d6:0d:b7:62:91:5b:
eb:e2:2a:59:f0:13:d7:3f:ae:6e:6e:64:9b:d7:59:6a:91:60:
ac:52:88:39:19:7b:df:06:c6:cb:66:18:43:ce:42:d8:02:51:
f4:65:d0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:08 2023 by rpki-client on console-fra.rpki-client.org