Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hHh1TNaAAiFubhyI0n9HLj9A25Q.roa
File: hHh1TNaAAiFubhyI0n9HLj9A25Q.roa (raw, json)
Hash identifier: ioR+DLDj+2LLIPjIyQTGuYv4j8Hhh2giWmmCgCqWCHY=
Subject key identifier: 84:78:75:4C:D6:80:02:21:6E:6E:1C:88:D2:7F:47:2E:3F:40:DB:94
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hHh1TNaAAiFubhyI0n9HLj9A25Q.roa
Signing time: Thu 15 Sep 2022 02:46:25 +0000
ROA not before: Thu 15 Sep 2022 02:46:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8478754CD68002216E6E1C88D27F472E3F40DB94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f3:55:76:27:40:ee:9d:6d:2a:ff:95:57:70:
a1:21:a3:c4:81:72:50:b4:e2:70:3e:68:ce:15:c9:
f6:14:43:06:7b:6e:8e:f3:98:f9:86:c4:17:a2:bf:
14:e8:d4:f9:6c:fd:14:a2:c4:ec:36:ae:ef:5e:07:
01:0a:e8:4c:99:b9:99:7c:59:75:37:dd:f4:47:11:
cc:a7:b7:93:38:e4:9f:7e:51:a6:5e:2a:f6:eb:39:
e8:ac:e8:f1:3b:35:21:90:cd:2c:87:ff:61:e4:17:
02:72:3f:bf:75:1b:73:22:77:33:60:bc:47:68:43:
fa:1f:9b:2f:3b:ba:30:c0:84:6d:32:87:40:6b:a9:
a8:05:89:e3:6d:6e:e8:a0:22:0e:f3:6b:35:5f:14:
6a:05:43:4c:b9:0d:05:28:d8:b3:0b:67:6d:03:07:
be:f1:09:b8:1b:69:d5:1d:7d:98:22:58:7f:8c:cc:
bb:09:d1:f1:79:f6:61:16:31:81:d0:94:46:c6:6d:
3c:28:4c:9d:84:5e:ae:92:26:d9:28:78:8e:64:c5:
73:80:1d:10:1e:27:77:5c:9d:ea:c2:85:16:a1:87:
bf:99:09:b5:6b:fa:11:89:0b:04:74:9a:94:ac:ba:
fa:2e:a1:0a:be:2a:03:2a:09:55:9b:e7:9d:b1:cf:
cf:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:78:75:4C:D6:80:02:21:6E:6E:1C:88:D2:7F:47:2E:3F:40:DB:94
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hHh1TNaAAiFubhyI0n9HLj9A25Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.102.0/24
Signature Algorithm: sha256WithRSAEncryption
33:37:bf:f6:8f:d7:b2:81:49:12:aa:2b:72:ea:b2:93:8a:08:
3b:e9:10:3a:e8:09:4b:c4:cf:d7:5c:00:ad:64:c2:d1:3c:02:
7b:32:93:d8:a0:1f:7c:83:04:c7:c4:1a:21:9a:95:02:57:51:
d4:10:90:c5:e3:e8:8a:1a:59:11:a6:5e:b2:90:66:05:de:70:
77:ab:78:1e:34:fb:f6:a3:f1:a7:3b:9b:54:5e:25:46:ac:3b:
32:9a:d9:e0:6a:05:5a:b1:eb:c6:3d:56:74:79:f2:b9:5b:fd:
8f:22:02:de:7f:46:37:ce:79:f6:46:3f:c8:1f:34:4f:43:f4:
93:be:8c:70:ab:67:ab:17:63:be:63:f3:7a:08:66:92:c0:bc:
0a:b1:f3:0f:2f:1d:8f:15:3b:86:45:4f:4c:71:ff:05:f1:24:
97:79:50:21:fa:c4:b5:86:fa:0d:cf:4e:76:93:84:58:6c:27:
66:87:f3:0c:d8:af:c2:22:70:a9:c8:4e:53:04:2e:a7:a9:ee:
27:7c:7d:70:cc:8d:85:41:d5:44:ba:ed:be:0e:dd:6f:7b:38:
8e:c5:e5:69:f6:c6:dc:c8:41:cb:d5:69:28:ed:38:10:94:0c:
61:34:f2:ca:c1:83:97:c7:27:3e:87:55:22:7a:e3:7c:c8:8c:
db:48:db:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:25 2023 by rpki-client on console-ams.rpki-client.org