Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/enSN8LZfFIikhaTJrPI3pAwnWLY.roa
File: enSN8LZfFIikhaTJrPI3pAwnWLY.roa (raw, json)
Hash identifier: uBpi7jx+yqe2l2T6KuL+xvDMPZFi4ClTzrnaaOIN7YA=
Subject key identifier: 7A:74:8D:F0:B6:5F:14:88:A4:85:A4:C9:AC:F2:37:A4:0C:27:58:B6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 228A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/enSN8LZfFIikhaTJrPI3pAwnWLY.roa
Signing time: Fri 25 Nov 2022 04:41:19 +0000
ROA not before: Fri 25 Nov 2022 04:41:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.96.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8842 (0x228a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7A748DF0B65F1488A485A4C9ACF237A40C2758B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:da:cb:7e:7b:f1:a2:33:f6:5d:c6:a6:e9:
3d:08:00:23:3d:bc:8b:bd:79:2f:a5:f8:7b:26:09:
c7:85:d7:df:b7:3c:66:59:ce:06:f9:7b:bf:55:e1:
fc:f0:8c:21:2d:fc:99:16:5f:24:b0:77:65:fd:09:
5a:50:dd:21:48:31:ee:2b:6f:ad:f9:72:4d:4d:ee:
a5:92:6d:52:9d:90:7b:3d:52:0b:c2:b7:d2:45:c5:
f0:ef:c5:4e:9b:60:65:4a:62:a9:89:76:a6:d3:19:
1d:74:fc:16:e1:0e:73:e6:18:b9:cf:b0:1d:c7:45:
a9:75:75:ba:ce:e2:36:39:b9:73:d3:57:7e:df:02:
8f:c0:ee:59:60:6d:d7:de:27:96:d1:78:a0:5e:ad:
71:a6:e4:dc:a5:95:5a:9d:eb:31:78:1b:c2:3c:31:
10:5a:a6:c1:d9:ef:a2:6d:bd:c2:a0:65:c8:61:18:
a6:01:d1:d5:65:6b:ff:a4:6b:f3:58:86:53:1e:b0:
c1:1c:4d:f4:bf:9a:81:0a:fc:2e:4f:15:eb:c3:9c:
ab:21:68:1c:a4:e1:ef:99:f2:85:7f:13:a1:45:ea:
ce:d3:a0:9f:e6:57:b1:8c:6f:65:88:45:9a:a4:9e:
ca:fe:2b:16:8a:5d:0a:a4:06:94:ea:3d:40:2a:6f:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:74:8D:F0:B6:5F:14:88:A4:85:A4:C9:AC:F2:37:A4:0C:27:58:B6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/enSN8LZfFIikhaTJrPI3pAwnWLY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.96.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:9d:3b:f0:24:04:c5:05:7e:89:b7:9d:4e:a1:a9:dc:8c:f1:
80:ae:03:9a:50:f9:f5:d1:2b:9c:0a:de:06:e5:79:82:a1:e6:
08:3c:42:2f:8b:66:08:36:e0:e1:5b:b0:e1:d7:d6:1f:f8:b5:
48:54:2c:67:e6:79:7a:e8:2a:39:9b:dc:f6:24:e3:91:a4:00:
bf:a9:2a:4e:e3:ee:17:66:bf:93:89:98:fe:12:c7:7e:70:29:
78:99:ae:18:21:52:f8:0a:31:f8:bd:ec:9a:49:07:a9:0b:3f:
79:95:d4:3d:2e:76:cf:c8:a3:a2:97:c4:bc:c3:f2:30:de:dc:
f4:39:8c:e7:3e:d5:0b:7f:9c:34:4a:93:60:e9:2a:0e:3f:e5:
81:06:cd:56:e1:6b:93:c9:78:e9:8d:bf:53:98:5e:50:d5:df:
ac:28:c0:40:e2:56:ea:84:49:22:f1:64:da:f7:29:66:d8:10:
98:9d:6c:3e:59:54:a2:0e:7a:27:72:36:76:06:c3:35:6d:39:
b6:99:a2:93:07:8b:c0:fc:f2:99:9b:52:38:a6:c7:a3:13:19:
0e:72:8e:a6:9a:a3:b9:36:7d:3e:0b:37:70:76:6c:3d:46:ed:
5d:ac:32:e5:03:a4:8d:14:d1:f7:53:90:02:50:0d:a7:d2:ac:
47:2b:30:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:08 2023 by rpki-client on console-fra.rpki-client.org