Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iq0pkAx9a81N3calCnqaUFZBv1I.roa
File: iq0pkAx9a81N3calCnqaUFZBv1I.roa (raw, json)
Hash identifier: sPDaBsrxFrlQ04np/QogpYf/IM0Ey86/f3DvK0IRcz8=
Subject key identifier: 8A:AD:29:90:0C:7D:6B:CD:4D:DD:C6:A5:0A:7A:9A:50:56:41:BF:52
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iq0pkAx9a81N3calCnqaUFZBv1I.roa
Signing time: Thu 15 Sep 2022 02:44:49 +0000
ROA not before: Thu 15 Sep 2022 02:44:49 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.168.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:49 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8AAD29900C7D6BCD4DDDC6A50A7A9A505641BF52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:b6:ae:a9:d1:38:ba:f7:0a:56:93:24:a1:
47:f3:85:0a:ae:fc:02:7b:70:f4:d8:aa:e5:4b:3f:
a2:77:af:53:7a:db:cf:34:f0:3a:6a:e1:b2:af:43:
04:49:ce:ec:61:f9:65:77:b8:ff:2d:d0:1d:3b:ea:
da:36:9b:32:c5:0a:85:c3:40:e8:d8:fe:a8:ea:ff:
39:e2:d1:87:06:98:83:06:1a:a2:84:66:5b:8d:9f:
b6:ba:27:5f:92:f0:f1:68:0b:09:f9:05:b4:a9:2b:
5c:65:fa:f8:02:40:a6:b5:12:55:25:33:96:d4:5e:
7c:ac:3b:79:4e:b0:2d:e3:48:81:f4:7f:80:ab:92:
cb:48:78:29:34:72:c5:35:e2:f9:cf:9a:51:06:5c:
3d:bb:f6:ba:7a:49:d9:fc:67:9e:00:3e:10:2d:8f:
76:89:b6:0b:1c:e7:6a:6f:92:85:85:08:68:2b:19:
be:81:53:a5:51:86:ea:ec:75:8d:50:6d:39:bd:8f:
bf:11:ac:1c:a9:5b:5c:79:9d:a7:e5:f9:89:78:76:
7e:fd:f5:b9:14:f4:07:3e:08:83:33:37:9a:58:8f:
62:3a:42:34:43:b7:40:c3:62:ff:9c:aa:a6:5f:c0:
66:18:91:95:11:d1:90:0f:58:86:9f:6b:61:74:f9:
d0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AD:29:90:0C:7D:6B:CD:4D:DD:C6:A5:0A:7A:9A:50:56:41:BF:52
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iq0pkAx9a81N3calCnqaUFZBv1I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.168.0/21
Signature Algorithm: sha256WithRSAEncryption
28:d8:30:e6:44:58:33:6d:a4:80:21:10:49:d5:6b:ad:82:b9:
5f:68:ca:0e:95:39:d2:dc:09:a4:14:b2:e1:30:d2:ac:ab:65:
09:2d:1d:3e:d0:cf:e9:18:97:ba:f0:6a:58:0e:47:63:68:98:
0a:89:4a:31:7f:32:32:77:c2:78:fa:8e:99:69:89:0c:f4:bc:
47:00:0e:00:69:7d:b9:c3:2c:16:a5:c8:c9:fe:bb:63:16:af:
40:86:59:66:2b:26:dd:9f:98:c0:f6:4f:1e:cb:03:90:e2:98:
7a:ba:aa:c8:8c:e5:e3:46:d0:29:25:bd:11:f1:c8:c8:33:70:
6e:77:81:ee:91:b0:fc:29:e0:7f:87:b9:d4:1f:0c:3d:9f:9b:
fd:1c:03:52:8b:bf:da:2b:bd:69:82:9e:35:61:60:6c:5f:75:
47:5c:5d:1f:21:e3:8d:90:81:2d:2e:b6:e2:ec:f5:c7:64:5d:
8e:c6:06:b5:8d:cb:87:0f:03:d8:7e:fc:b4:3b:7f:c0:02:f8:
d3:0d:2a:7a:61:4c:59:36:a8:f5:1b:3f:fd:a6:1a:fc:d0:8a:
e1:f9:59:13:6e:af:c1:84:53:5e:2c:1b:cd:34:c9:10:e1:cb:
75:23:19:47:98:cb:de:4e:dc:01:4f:ab:18:13:9f:49:ba:8c:
d7:5f:16:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-fra.rpki-client.org