Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gS4WwnFjrhXtax_E5wltiMuLO9Q.roa
File: gS4WwnFjrhXtax_E5wltiMuLO9Q.roa (raw, json)
Hash identifier: CG4ue4eHbBgYMVFSRgJShkaI3a7BD+6sbzU4Un52MhQ=
Subject key identifier: 81:2E:16:C2:71:63:AE:15:ED:6B:1F:C4:E7:09:6D:88:CB:8B:3B:D4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2221
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gS4WwnFjrhXtax_E5wltiMuLO9Q.roa
Signing time: Fri 25 Nov 2022 04:40:48 +0000
ROA not before: Fri 25 Nov 2022 04:40:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.144.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8737 (0x2221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=812E16C27163AE15ED6B1FC4E7096D88CB8B3BD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0c:d2:7a:54:78:d5:8a:82:2c:9e:7e:b6:18:
ba:28:77:d6:a2:d7:5d:d6:3d:da:87:9e:d2:c0:ce:
5c:4d:d3:6c:77:74:32:ae:ec:32:b7:10:7c:d8:c9:
de:ef:2a:9a:cd:e4:47:6e:e7:38:2c:64:f9:3d:e5:
f2:c5:91:bf:59:ca:80:34:65:2e:68:90:2f:02:6a:
f2:f7:64:e5:1f:d9:aa:46:7f:51:31:30:ff:f5:b0:
a9:54:9c:19:bb:6b:32:fc:db:3a:75:13:15:46:c5:
61:10:06:99:9c:2e:fa:92:1b:ae:7e:c5:e7:b7:6f:
0b:69:be:5b:74:4e:8c:3d:66:6b:a8:4f:c6:31:36:
62:0f:9c:0a:3a:c4:9c:e5:5f:ac:8a:cf:65:35:a3:
ae:23:d0:c3:7f:63:9d:68:13:33:16:92:2f:a3:77:
fe:5d:9b:dd:6d:55:c5:26:96:c8:8c:72:e6:a5:a9:
ee:2c:d0:0d:dd:0c:34:70:9b:69:b1:8d:54:87:28:
3a:ca:47:c8:07:3d:10:c5:ad:83:d2:2e:ae:28:15:
56:55:f4:da:18:f5:56:c1:eb:a7:95:49:38:8c:da:
98:50:b2:ed:25:e3:d7:7f:8b:b3:79:c4:09:c2:6c:
10:49:0b:86:1a:3b:2a:3b:bb:cc:33:b5:62:9a:61:
af:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:2E:16:C2:71:63:AE:15:ED:6B:1F:C4:E7:09:6D:88:CB:8B:3B:D4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gS4WwnFjrhXtax_E5wltiMuLO9Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.144.0/21
Signature Algorithm: sha256WithRSAEncryption
14:b0:af:5f:bf:e3:e1:7d:39:97:32:8a:ce:0b:ba:64:e4:f7:
fd:7f:f3:17:7e:23:ad:ec:d0:f7:eb:0c:ae:02:96:1d:5f:76:
a6:67:92:1e:e0:46:15:f3:25:94:bc:43:8a:f2:dc:d9:7d:48:
2f:4e:3b:1b:27:ad:c5:14:4b:7a:c0:7f:6e:cd:06:07:0b:0f:
ba:88:b2:a4:e5:b1:51:4a:23:d2:b4:64:b4:04:ad:36:69:ba:
22:84:76:e4:66:ea:6e:b5:e6:ee:29:05:a2:b9:29:1e:7b:41:
c7:63:31:f7:1d:c1:7f:6a:ab:ca:ad:d5:9c:c3:00:d4:15:4f:
0a:a6:7a:64:3f:43:09:36:fc:ec:1a:37:52:c0:47:50:d1:45:
a9:bb:04:7f:45:1f:86:0b:ac:c9:14:00:6a:58:c4:95:b9:67:
ba:78:87:14:89:a0:99:57:18:6b:52:0a:1c:d5:79:5a:68:33:
50:d2:65:bc:41:f1:18:26:0d:3d:45:5e:c2:20:c3:50:db:03:
c7:f2:71:cf:76:36:dd:4c:eb:ff:49:aa:6c:5c:54:05:d0:5f:
7f:00:9c:d1:95:30:ef:0d:e6:4b:56:06:6e:ba:0e:50:85:64:
31:43:23:ae:c9:80:d2:b4:eb:30:e4:4e:b2:e2:4e:5e:8f:4a:
27:45:a4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:08 2023 by rpki-client on console-fra.rpki-client.org