Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eg6zbFBRTa1Zm4bGZ9wPG4XJZT8.roa
File: eg6zbFBRTa1Zm4bGZ9wPG4XJZT8.roa (raw, json)
Hash identifier: WwXuElN4EPcLo+EVZWh0dUco+/uv5O3zj6k5KzcUJaE=
Subject key identifier: 7A:0E:B3:6C:50:51:4D:AD:59:9B:86:C6:67:DC:0F:1B:85:C9:65:3F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eg6zbFBRTa1Zm4bGZ9wPG4XJZT8.roa
Signing time: Thu 15 Sep 2022 02:53:11 +0000
ROA not before: Thu 15 Sep 2022 02:53:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.104.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7A0EB36C50514DAD599B86C667DC0F1B85C9653F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6b:86:10:87:48:a4:52:79:21:a2:fc:a6:01:
e1:30:39:a4:97:3d:9b:54:66:59:a3:fb:65:e3:29:
4a:2a:86:21:f9:72:83:89:83:fd:02:8b:84:d3:e4:
7a:07:b9:f5:d1:a1:71:2d:2d:d2:78:7f:16:9b:46:
af:a1:c4:3c:32:01:4c:94:a6:6c:60:9a:24:af:30:
48:75:dd:28:8e:49:45:58:d0:fd:74:55:64:44:35:
e6:42:77:17:48:42:e5:a9:a2:9f:cf:69:ac:15:d8:
76:bf:ad:a0:93:7a:7f:a8:c6:01:cb:ff:d7:a1:87:
76:2c:b4:1c:31:a3:2a:7c:e9:e0:e0:4e:19:1e:94:
39:ef:00:ed:83:df:c1:9e:7b:c0:3a:61:04:ff:ce:
7c:80:37:bf:f6:9b:b5:5c:e1:5e:31:04:4d:f8:11:
aa:64:20:a1:c5:e7:1d:e1:d9:a1:77:9a:96:20:d2:
c6:16:f4:22:75:9e:58:42:56:42:b0:21:e3:8e:f9:
cc:ef:24:5f:d2:a1:22:2d:e6:2f:92:f4:58:ae:78:
f2:66:d0:de:27:6b:0d:14:84:30:e0:93:f0:db:68:
d9:59:88:d0:5a:95:f1:cf:53:23:58:ad:a7:1c:8b:
6f:5e:fc:06:73:dc:ef:5b:50:d6:35:8d:4b:3c:54:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0E:B3:6C:50:51:4D:AD:59:9B:86:C6:67:DC:0F:1B:85:C9:65:3F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eg6zbFBRTa1Zm4bGZ9wPG4XJZT8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.104.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:c3:db:fd:37:c3:89:66:dd:5f:21:56:2e:f8:15:47:a7:25:
15:0f:a2:1c:51:07:5a:e5:07:7e:98:ac:6a:2c:55:52:93:cc:
96:12:3d:05:46:60:65:a5:5a:80:8d:a0:27:c4:b3:09:53:a6:
53:20:c3:7f:b1:df:7a:dc:12:cc:de:c0:51:f3:03:f5:a2:95:
1c:ee:97:04:ad:a2:44:33:8b:62:79:27:68:f5:d2:05:28:d9:
f1:c7:16:5c:ae:95:25:8a:78:f6:d4:14:90:34:e0:ca:c8:83:
c1:e0:21:60:c1:dd:56:fe:ca:4c:80:93:e1:13:37:2c:e6:56:
e3:81:d0:a2:24:ae:43:e0:ee:a9:12:56:6d:88:0c:ea:35:79:
69:f1:7f:c4:dd:cf:50:22:df:ed:1a:e3:ec:a5:75:5d:3c:e3:
a9:bc:99:a5:be:cd:be:e8:f8:a4:2f:e8:0f:d7:43:fc:2f:03:
25:9b:1c:08:a8:ea:03:79:30:34:a8:1e:01:fe:de:38:d9:8b:
cd:87:72:b5:6f:9a:2b:d7:45:da:ee:38:0c:2e:83:fb:b2:f9:
5b:2e:ff:7a:1d:a8:be:b2:75:fb:ad:5c:cc:60:bb:09:62:71:
2e:90:a6:88:2f:1b:c2:b2:01:7a:c3:3a:aa:c4:e8:73:89:70:
ee:9f:e1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:36 2023 by rpki-client on console-fra.rpki-client.org