Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gzb9_SFLIv-FRPm-fKX8X0evuTc.roa
File: gzb9_SFLIv-FRPm-fKX8X0evuTc.roa (raw, json)
Hash identifier: G/rmiJtBx/DDpRmG1l0RXwaxxmZSkLhbDiQbGkhughw=
Subject key identifier: 83:36:FD:FD:21:4B:22:FF:85:44:F9:BE:7C:A5:FC:5F:47:AF:B9:37
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gzb9_SFLIv-FRPm-fKX8X0evuTc.roa
Signing time: Thu 15 Sep 2022 02:46:21 +0000
ROA not before: Thu 15 Sep 2022 02:46:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.16.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8336FDFD214B22FF8544F9BE7CA5FC5F47AFB937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:03:60:b4:51:72:ac:d8:d5:be:3d:e3:6a:e5:
3e:d5:cc:4f:1b:15:c6:50:cb:d8:89:59:c4:3c:80:
ae:dd:7e:2a:a6:a5:3e:58:d1:bf:46:d0:93:72:22:
7c:b0:77:f1:19:ed:ba:c4:f0:f4:db:77:5c:53:43:
e2:36:a5:9c:b1:29:01:df:8a:e4:66:67:1a:07:0a:
33:35:ea:ff:a2:57:db:2e:0a:e0:50:74:0d:ee:a0:
d7:a9:7f:22:c6:8b:f6:5c:4a:b4:fc:bd:78:9a:02:
90:c5:dd:4b:32:e8:35:e9:aa:33:f7:bc:5a:3f:f0:
25:8e:6f:22:7b:94:f0:11:17:5f:de:57:da:0f:73:
57:2d:75:70:88:bc:be:54:be:ac:69:ac:df:4d:00:
6b:81:d8:35:58:67:49:7a:e0:c2:f3:65:7c:1d:87:
d1:6f:e4:4f:81:c4:9c:c5:e6:1a:ab:53:05:13:ba:
02:cc:a3:80:a7:43:52:7e:c1:18:65:8b:cd:29:33:
12:bf:9d:1b:56:95:24:3f:5e:28:b2:1a:43:87:c5:
2d:31:2d:91:be:ce:bc:81:5b:ed:70:2e:dd:1f:1d:
54:51:9c:1b:7e:33:01:fa:11:f1:8d:b3:61:46:72:
ed:31:6f:9d:37:d2:9e:5c:bd:1d:93:30:b9:19:67:
cc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:36:FD:FD:21:4B:22:FF:85:44:F9:BE:7C:A5:FC:5F:47:AF:B9:37
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gzb9_SFLIv-FRPm-fKX8X0evuTc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.16.0/21
Signature Algorithm: sha256WithRSAEncryption
56:1a:a2:2e:ee:d8:96:75:45:f6:ca:c8:04:4b:ca:25:87:2a:
eb:69:99:9e:2e:3d:7d:62:a9:0a:63:c0:d9:6e:c6:d7:7e:d9:
44:c3:41:80:82:25:7b:a9:d0:37:56:b8:4c:ff:b7:2a:a1:c0:
8a:bc:7e:2e:11:db:1a:01:11:02:ce:a5:0f:c8:8c:c4:13:0b:
18:b3:69:92:7e:8a:90:7a:91:04:93:ac:9a:9d:e3:3e:24:66:
ec:24:89:d8:df:32:11:75:82:ee:3c:bb:6b:42:e6:93:bc:0c:
aa:62:a0:dc:e4:87:a7:e6:77:37:08:dc:ea:f0:57:3d:f1:be:
cd:89:c3:6c:b1:ef:2c:ef:a4:a2:f4:c5:44:19:cc:46:7f:ba:
80:84:25:55:a6:a4:af:6f:b7:be:db:2c:22:fc:a2:78:0d:b5:
78:a9:f2:b2:b4:54:43:cc:98:3f:fd:40:4f:69:bb:bf:72:68:
6c:0c:e7:9e:55:bf:5e:ae:62:5e:9f:e7:51:23:07:d6:8d:06:
04:05:e9:24:84:0f:cd:77:be:de:39:6c:85:45:5a:4f:5f:2b:
1f:80:00:ec:04:62:8b:ac:d8:cb:29:53:cb:4e:40:bc:34:66:
43:f9:db:97:78:ad:ed:39:88:21:de:cc:20:19:b5:4f:b9:91:
3a:63:51:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:25 2023 by rpki-client on console-ams.rpki-client.org