Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eqbe72RWm01fUGz5jceoWxCMPiI.roa
File: eqbe72RWm01fUGz5jceoWxCMPiI.roa (raw, json)
Hash identifier: MVbKXaQdrzINGKykU36Yl+U73N9/Ep3rEP6jxNvl4FU=
Subject key identifier: 7A:A6:DE:EF:64:56:9B:4D:5F:50:6C:F9:8D:C7:A8:5B:10:8C:3E:22
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2326
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eqbe72RWm01fUGz5jceoWxCMPiI.roa
Signing time: Fri 25 Nov 2022 04:42:06 +0000
ROA not before: Fri 25 Nov 2022 04:42:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.88.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8998 (0x2326)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7AA6DEEF64569B4D5F506CF98DC7A85B108C3E22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:88:bf:31:2d:79:65:f6:95:23:49:cc:60:
e3:d0:6b:1d:e2:34:99:cc:0c:0f:cf:7e:4b:e9:b3:
88:b0:4b:6e:11:ca:fd:ee:01:1e:b3:fd:e2:20:e7:
7d:50:46:23:f3:b0:0b:a3:d7:c3:40:15:ad:f2:03:
7e:0a:5e:be:7c:77:ec:9d:83:81:55:4f:57:f1:56:
f0:24:22:6a:d8:12:30:22:2f:52:76:2e:f4:91:f4:
05:5a:9a:8c:d4:06:54:66:4a:25:7d:01:f6:31:03:
88:60:c8:ef:96:04:68:e3:35:42:ab:15:12:e3:1d:
35:31:a7:a9:47:1e:7f:e9:09:a2:6c:e6:2c:7b:32:
b0:92:84:da:ab:16:a7:af:fa:33:27:fe:6d:89:2c:
12:70:a3:11:26:28:d3:32:04:9d:0d:16:ee:57:18:
7c:5d:2c:48:ef:98:f0:78:cc:f9:c6:bb:d3:6c:d1:
d1:ee:f6:9f:ea:89:4e:b6:91:55:b2:38:0a:87:c7:
f6:dd:1e:0f:22:8f:5a:3e:68:1f:b8:86:c0:45:f4:
69:df:a9:5d:d3:d1:63:86:74:43:9d:01:36:22:af:
d2:59:d7:4c:e3:64:7f:62:e3:08:07:c2:b1:43:de:
9a:dd:58:01:c6:dc:4a:7c:48:76:4c:f2:ac:5b:d9:
52:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A6:DE:EF:64:56:9B:4D:5F:50:6C:F9:8D:C7:A8:5B:10:8C:3E:22
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eqbe72RWm01fUGz5jceoWxCMPiI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.88.0/22
Signature Algorithm: sha256WithRSAEncryption
36:99:78:1d:af:e2:22:c7:c3:e9:e1:5f:d9:f5:b8:fa:d6:c1:
76:07:02:76:f0:99:9a:19:82:ef:59:c3:86:5c:06:2a:ca:07:
10:93:1f:52:e6:6f:60:1e:49:44:87:17:08:e1:b2:44:69:4c:
68:5d:c8:a8:f5:0f:70:d1:21:62:89:89:4f:b8:79:34:8b:a2:
fb:ad:f8:60:1f:6a:e7:f9:38:83:f9:d3:5e:4f:86:de:53:23:
a2:85:d0:40:fd:04:44:b0:74:6e:87:e7:a1:35:37:32:da:4e:
4c:a1:1a:9d:c5:74:32:48:09:c6:22:6c:d6:94:2e:74:f7:6a:
14:99:d6:15:fb:70:26:74:93:a6:da:d3:33:c1:d2:13:d3:23:
76:fa:4e:fe:07:0a:90:36:7a:4a:c9:9b:ea:58:25:e0:eb:13:
2f:77:bc:7a:a4:34:a3:f4:97:7b:67:ca:67:cf:5f:c1:6c:e4:
5e:b3:af:21:44:b7:e4:3a:59:8e:ef:a3:93:ff:5b:8a:ac:24:
c9:63:5a:2f:64:f8:b7:8b:bc:f2:88:6d:44:b7:27:79:01:95:
21:16:31:70:2f:00:72:08:25:27:3e:e4:fc:c9:23:70:91:d1:
e3:d5:7d:ef:3e:24:a0:1b:66:f1:e1:b9:80:22:31:84:8b:c6:
26:84:3c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:08 2023 by rpki-client on console-fra.rpki-client.org