Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gbkH672106ktqt3yFawhPbrh5mM.roa
File: gbkH672106ktqt3yFawhPbrh5mM.roa (raw, json)
Hash identifier: wWWGRsHtQC0YjS5l0VK8RPJY+Juvcp5YIb1T0lS1XDw=
Subject key identifier: 81:B9:07:EB:BD:B5:D3:A9:2D:AA:DD:F2:15:AC:21:3D:BA:E1:E6:63
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gbkH672106ktqt3yFawhPbrh5mM.roa
Signing time: Thu 15 Sep 2022 02:45:38 +0000
ROA not before: Thu 15 Sep 2022 02:45:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.184.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=81B907EBBDB5D3A92DAADDF215AC213DBAE1E663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b2:e9:a3:ba:ff:de:a8:bf:8a:c8:40:04:dc:
eb:6c:58:4f:fa:d7:30:86:7a:cd:98:07:99:df:5d:
ee:6a:b0:ff:e0:6f:e8:1f:34:47:03:00:18:50:af:
d3:42:5c:94:d5:47:99:55:43:20:85:70:a8:da:6e:
cb:4b:da:a3:c5:9e:82:6a:97:6d:16:fe:aa:1f:d7:
bf:89:50:99:00:89:40:7c:2f:77:b3:c2:4d:fd:98:
82:9a:d0:34:1b:1a:ee:bc:59:e0:95:83:b4:dd:66:
ec:ca:c6:8b:87:d4:1e:57:a8:d0:60:3b:39:e3:07:
5f:61:88:c3:d3:d6:c6:96:c5:25:1e:9c:2d:84:03:
51:43:38:fe:92:ed:a3:7d:f3:be:46:34:27:8c:5a:
f7:43:00:4d:2e:da:62:ca:b2:99:3f:cf:03:e2:47:
60:69:96:e1:79:4c:07:41:26:d7:67:23:f7:80:d3:
1a:83:93:3b:a9:61:37:17:e4:6d:a2:51:62:34:65:
bb:2d:50:fe:7f:a0:5f:ae:32:64:6f:24:52:49:59:
a1:cb:3e:9a:3b:78:06:f1:28:96:a8:10:9f:02:bb:
e6:54:6a:3b:86:9d:ff:02:5f:b9:89:cf:5f:15:98:
54:5a:92:79:ba:f9:83:a0:81:75:95:78:8a:ee:39:
02:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B9:07:EB:BD:B5:D3:A9:2D:AA:DD:F2:15:AC:21:3D:BA:E1:E6:63
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gbkH672106ktqt3yFawhPbrh5mM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.184.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:4f:1d:05:75:0b:06:71:36:96:3d:f3:81:87:a6:f8:dd:8c:
9f:bc:17:73:68:ad:a1:da:1c:2e:d8:ca:95:4c:b9:34:ac:16:
46:5c:50:ff:54:95:27:46:7e:73:eb:27:11:f8:5d:7b:a6:3e:
71:41:79:a1:40:c9:bf:17:a2:eb:df:31:06:64:31:0a:f8:28:
0e:a5:15:4a:db:a2:8e:b8:f8:04:6c:13:ad:f4:3b:14:16:a6:
fc:01:80:2d:67:b6:15:bb:c2:4d:54:3e:42:d7:08:89:6f:68:
07:fc:a2:b4:eb:2f:7b:9f:cf:a8:53:7f:ce:16:5e:0d:0c:2a:
b8:0f:22:9e:94:d0:aa:92:9c:17:20:67:68:72:b3:9f:22:d8:
6b:fd:0a:2f:be:e2:53:7b:ec:bd:b2:24:b8:29:ed:51:d2:08:
2c:f3:f9:c6:75:15:75:62:7e:3e:8a:c8:18:cb:5e:d7:02:25:
3e:d0:93:c7:fc:67:83:32:fc:66:b7:b4:e1:8c:65:f6:41:f0:
6b:f7:1a:db:cf:a6:d1:de:a7:a5:83:cd:e7:19:f6:34:b3:61:
4b:62:d9:58:25:dd:06:95:61:81:c0:33:5f:c7:90:a8:ce:02:
56:4f:0c:88:0d:e1:f5:a4:aa:a4:27:36:fa:b2:2e:63:65:55:
01:9e:e0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:37 2023 by rpki-client on console-fra.rpki-client.org