Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gLgNwvrQngZ62Sxnt_3Lz19qA9w.roa
File: gLgNwvrQngZ62Sxnt_3Lz19qA9w.roa (raw, json)
Hash identifier: 2WhucBliE8P44HjITDUqoV+Jw1hIQUhYKnJ2tRXU7x4=
Subject key identifier: 80:B8:0D:C2:FA:D0:9E:06:7A:D9:2C:67:B7:FD:CB:CF:5F:6A:03:DC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gLgNwvrQngZ62Sxnt_3Lz19qA9w.roa
Signing time: Thu 15 Sep 2022 02:45:25 +0000
ROA not before: Thu 15 Sep 2022 02:45:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.20.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=80B80DC2FAD09E067AD92C67B7FDCBCF5F6A03DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:72:15:0d:bc:da:61:d8:66:6e:55:b1:3c:bc:
6c:7e:13:a5:f9:65:fe:ec:33:08:f5:d0:6b:c9:73:
e4:b7:0c:da:23:78:57:b0:82:ba:72:d1:a0:74:e3:
93:9f:35:25:26:23:82:4a:ab:d8:14:37:85:35:6f:
c0:79:bb:e6:3c:ea:7f:6f:88:93:a7:f8:3f:6e:ca:
53:cb:b2:53:d0:d4:16:58:ac:67:9b:2e:c0:df:67:
32:13:35:09:1e:59:ed:97:53:ae:dd:af:f1:1f:71:
16:4b:fb:35:91:85:10:c3:2b:32:33:73:06:e6:e2:
83:95:92:70:ba:4b:6b:f4:3c:19:54:43:ec:82:6e:
2d:51:33:87:76:8d:ca:06:91:26:39:94:94:bb:90:
d5:7c:1f:b5:9c:91:b6:17:b7:c3:b0:d2:81:8e:6a:
25:0d:34:08:bb:8b:11:f4:ec:6d:03:b9:c3:d2:aa:
6e:ef:7b:19:18:a5:78:9a:c3:cd:6a:d9:0b:c6:a1:
29:4a:c2:1b:3c:75:f8:24:a4:2d:47:fe:30:0f:fe:
36:ad:90:66:ad:c1:f5:c3:50:02:e6:6b:2b:ed:26:
48:13:18:c9:42:8d:2e:6b:cf:67:a8:b0:db:5e:51:
f8:d9:96:8d:d2:82:5b:19:32:42:e3:7e:7c:c6:aa:
39:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B8:0D:C2:FA:D0:9E:06:7A:D9:2C:67:B7:FD:CB:CF:5F:6A:03:DC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gLgNwvrQngZ62Sxnt_3Lz19qA9w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.20.0/22
Signature Algorithm: sha256WithRSAEncryption
83:36:36:f2:5d:84:7a:0f:f0:fc:a6:f0:54:af:ca:4a:30:e1:
20:a6:fd:60:cb:13:98:f7:f7:31:1c:bb:fd:1e:24:d8:9a:3f:
2c:97:fd:cf:30:21:c6:e5:1f:7a:5e:f4:5c:5a:ba:bd:70:88:
81:37:9e:30:dc:65:32:96:af:85:01:d2:4e:5b:fa:e8:21:94:
3d:ae:86:cd:b0:8c:61:21:63:52:49:25:4b:f4:0b:08:c9:a8:
4b:ff:be:e8:4e:ec:63:b3:0a:24:9b:7c:05:c5:e1:ce:a0:bc:
17:c0:56:74:ba:39:e3:32:2b:ec:75:84:5f:01:34:98:16:ab:
fd:d3:2b:ed:39:56:32:d4:48:26:3f:41:1e:19:da:0a:0a:48:
b4:fa:ad:57:6f:a9:d5:f0:0c:2c:49:4c:8b:ea:36:23:ac:cf:
71:ac:04:95:95:9b:5a:f6:c4:f7:6a:4c:20:10:c8:83:ba:35:
a3:5b:19:c1:61:52:b8:3e:5b:5b:4c:13:dc:ca:8a:25:c4:de:
e4:83:c4:02:1d:2a:ff:2e:93:82:ee:b5:ae:9b:43:50:06:0f:
0d:3a:2e:5f:19:a6:4f:d2:e6:79:6a:48:a4:74:ff:e5:73:0b:
54:2a:55:be:e5:3e:ba:fc:9f:ef:78:0b:b8:c6:0b:6e:17:1c:
de:2d:2c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:37 2023 by rpki-client on console-fra.rpki-client.org