Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hmW53ARtZxnXtqILnLYhCTDusN4.roa
File: hmW53ARtZxnXtqILnLYhCTDusN4.roa (raw, json)
Hash identifier: UfBgehZlzBepd6skMjDitDSMffZLzwFhIOSwOHewWr0=
Subject key identifier: 86:65:B9:DC:04:6D:67:19:D7:B6:A2:0B:9C:B6:21:09:30:EE:B0:DE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hmW53ARtZxnXtqILnLYhCTDusN4.roa
Signing time: Thu 15 Sep 2022 02:52:34 +0000
ROA not before: Thu 15 Sep 2022 02:52:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.12.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8665B9DC046D6719D7B6A20B9CB6210930EEB0DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:21:89:54:d4:0d:2a:70:09:dc:db:c5:45:
27:02:6b:39:97:fc:d9:cb:21:1f:2d:8e:1a:4b:14:
94:55:2e:d8:8d:6f:49:59:df:f4:40:7b:84:84:89:
5f:93:50:31:3e:c4:79:ef:56:db:5e:00:33:e0:e9:
0d:23:09:ce:77:b3:70:89:45:d5:55:e3:ac:ef:d9:
1e:80:93:04:49:93:01:b1:b7:2b:ff:76:7d:e0:47:
b1:99:66:b7:0e:df:57:05:e4:5d:ca:15:f5:5b:3d:
c6:2a:a9:e1:5f:28:1c:eb:7d:36:63:1d:32:e1:b1:
48:5b:ea:1e:74:6b:45:ea:68:29:2d:25:c0:7c:f6:
17:8b:aa:d0:7a:4a:63:39:d1:16:15:19:c4:62:8d:
c9:4e:22:87:99:0b:5a:4d:40:70:4f:9b:59:06:a8:
55:a9:0c:00:06:0d:47:8c:b8:ca:3c:40:4c:3e:b2:
65:b9:fb:74:00:cd:a4:84:84:d9:90:2e:06:f7:22:
a5:56:3c:c5:5a:36:fb:18:f4:37:ed:d2:68:ce:f3:
ef:72:7f:b5:eb:ca:07:71:0f:13:87:42:4a:c1:47:
51:b8:f8:49:c6:f7:48:2b:62:1d:b4:de:58:c3:b8:
a1:3a:f9:5b:f7:5c:a6:b2:36:c6:72:e8:0e:79:a5:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:65:B9:DC:04:6D:67:19:D7:B6:A2:0B:9C:B6:21:09:30:EE:B0:DE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hmW53ARtZxnXtqILnLYhCTDusN4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.12.0/22
Signature Algorithm: sha256WithRSAEncryption
06:38:d2:4a:22:1e:a2:11:9d:b1:fd:4a:8b:61:48:42:5e:db:
53:80:b7:6f:23:63:f8:7e:76:cb:70:61:30:e1:94:81:38:72:
2e:70:77:ac:98:ec:63:d6:aa:12:fb:72:fd:ce:8a:30:cd:ec:
80:52:1e:7d:70:e1:ed:6d:1e:9f:b2:5a:db:7c:60:c6:45:07:
cc:89:60:b8:23:bd:8c:6c:b7:d0:ff:f1:e0:39:3d:c4:69:bd:
70:f9:f1:f3:8d:0b:c1:3b:1b:9a:c3:c8:8f:25:e8:1e:3a:98:
07:ad:5e:c8:a1:bb:92:89:08:94:ed:1b:83:17:22:c6:f3:34:
b7:6d:d6:87:77:16:64:6d:c1:34:97:18:11:c6:95:69:21:d3:
89:2a:d5:ec:da:00:3f:90:67:59:38:78:98:09:d7:a1:99:6f:
c7:fb:01:bf:64:fc:81:a5:76:31:ba:d9:e4:e1:f8:20:ac:b1:
17:e8:8f:89:20:58:0c:e2:63:9f:85:b3:9e:e4:71:c4:76:44:
6f:22:63:78:21:b8:4d:1e:e5:65:53:1e:0a:d4:a3:8e:a1:65:
64:c3:26:71:a7:6e:65:6f:e9:af:ef:11:bd:3a:62:70:96:df:
22:25:86:3f:d7:e3:e3:84:bd:39:7c:89:35:c8:3b:2d:ab:15:
77:80:ee:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:26 2023 by rpki-client on console-ams.rpki-client.org