Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eRlRIPO4w290PTSZOJyT8vqkgyI.roa
File: eRlRIPO4w290PTSZOJyT8vqkgyI.roa (raw, json)
Hash identifier: KoMJMnJscLV1h/OJSI1iITSaSQto70rDAZpgcXDLOVU=
Subject key identifier: 79:19:51:20:F3:B8:C3:6F:74:3D:34:99:38:9C:93:F2:FA:A4:83:22
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eRlRIPO4w290PTSZOJyT8vqkgyI.roa
Signing time: Thu 15 Sep 2022 02:46:16 +0000
ROA not before: Thu 15 Sep 2022 02:46:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.224.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=79195120F3B8C36F743D3499389C93F2FAA48322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:45:0b:f1:b4:75:43:01:48:76:7e:84:ab:de:
e8:08:00:d2:34:25:47:29:db:91:da:8d:3c:e5:e4:
47:c3:dc:88:37:15:d1:57:6e:6d:5a:93:50:3e:bd:
e5:e0:a1:59:19:64:cd:27:a0:df:1d:89:76:c4:4e:
c4:53:df:35:7a:3d:29:d8:5d:38:0f:71:5b:23:ee:
53:6b:90:aa:2e:46:e9:cd:bf:3e:e5:3e:3b:00:5d:
c8:a3:02:eb:ac:52:9c:77:39:94:f8:22:e3:be:e0:
b4:cd:06:ca:9d:ee:3f:5e:34:21:32:34:2c:a6:70:
86:ee:a3:d9:d9:7f:99:40:ec:1b:a7:4b:9c:9a:e0:
27:99:16:e2:88:de:e6:40:5e:2d:c9:b1:26:29:6a:
09:a1:b9:ce:32:43:5d:39:e8:ce:96:a0:c6:fe:99:
3e:ae:74:a4:da:2c:6c:88:fe:be:6f:d1:bd:86:5d:
e1:5a:01:b2:60:10:16:36:d4:40:1e:4f:84:25:e9:
dc:64:52:fe:53:c0:7d:71:1c:20:f2:72:75:0f:63:
7d:ab:f2:7f:45:be:80:ca:be:c4:a3:af:70:e4:bc:
5c:8a:3c:b9:c2:5d:32:9f:4b:c2:7a:1c:6e:56:fe:
51:cf:7b:b8:8e:fd:98:08:41:0d:4f:b2:e2:6e:2a:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:19:51:20:F3:B8:C3:6F:74:3D:34:99:38:9C:93:F2:FA:A4:83:22
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eRlRIPO4w290PTSZOJyT8vqkgyI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.224.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:b2:a4:4e:a1:1a:07:ba:e4:6f:0a:59:f5:85:b2:b4:c8:62:
7d:a6:36:fb:fe:69:ba:9b:74:60:08:9a:53:78:82:a3:68:44:
70:9f:20:55:71:17:58:88:c5:05:69:04:ee:92:19:23:35:4d:
8b:69:b8:82:94:f3:04:c0:10:5c:8b:5c:18:0d:41:7a:5b:c6:
09:2f:63:2c:29:83:00:4f:e7:6f:32:e1:9a:c5:d6:58:10:b5:
09:03:1a:30:68:61:9c:60:57:c1:1d:52:fe:f3:8a:56:43:eb:
06:37:d4:a3:88:65:3d:a7:1f:88:df:d0:93:a7:c1:f7:67:0a:
d7:a1:4f:ac:14:59:84:4b:22:7e:31:28:52:82:26:7b:6c:f6:
93:52:83:63:ae:2e:b4:a6:e9:85:52:66:32:f7:85:07:89:a4:
98:c0:e4:e4:54:48:e2:ab:2b:c0:35:10:a9:29:9b:c5:60:0d:
f7:ed:73:81:99:7c:0a:b3:ab:b2:22:12:20:7b:d1:63:f7:78:
39:2b:aa:76:0a:14:34:fe:58:92:f0:5c:c7:08:ff:b4:96:62:
93:3a:4d:db:36:45:1d:46:3c:33:f9:2b:ba:5d:2e:e9:61:75:
9f:b8:2d:7c:4b:64:a5:9b:1b:93:6a:2e:6f:9b:c5:96:ce:41:
ef:94:ae:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:25 2023 by rpki-client on console-ams.rpki-client.org