Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j2VkK40mASot59kDtVe4KIz_bkc.roa
File: j2VkK40mASot59kDtVe4KIz_bkc.roa (raw, json)
Hash identifier: 1WWzRKq34zS8RfiLXE9oTxTMldLGhOZuVQCGj/Q8nZ4=
Subject key identifier: 8F:65:64:2B:8D:26:01:2A:2D:E7:D9:03:B5:57:B8:28:8C:FF:6E:47
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j2VkK40mASot59kDtVe4KIz_bkc.roa
Signing time: Thu 15 Sep 2022 02:52:15 +0000
ROA not before: Thu 15 Sep 2022 02:52:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.252.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:15 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8F65642B8D26012A2DE7D903B557B8288CFF6E47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:fb:13:3e:a8:d9:15:57:0e:1c:92:fc:3e:
7d:7b:56:51:84:4b:07:55:17:6d:93:53:a5:4c:92:
dd:52:c0:da:98:16:0c:da:f2:22:a8:a8:c4:22:b0:
f2:27:45:0e:42:2a:13:60:66:ba:d6:bd:88:70:f2:
3d:6a:11:08:12:f6:b6:55:90:f3:0b:ce:24:e0:b8:
13:83:5f:66:29:9f:f4:9d:ed:50:be:63:2f:99:2f:
cf:69:a3:9e:62:a4:c8:4f:56:bd:01:93:66:c4:ea:
4a:f7:35:7c:90:5f:21:5c:ef:c4:07:e3:df:e2:41:
d9:80:ed:57:df:0e:90:c2:10:20:0e:1b:1d:89:f0:
88:20:5c:93:fd:ab:54:a5:2b:06:ae:83:99:d8:54:
be:91:aa:99:0d:f7:a6:6d:f4:52:a0:04:b5:d8:07:
49:f1:71:29:2a:a1:fb:2f:f9:56:7f:a1:13:d0:3b:
7e:f6:c1:1a:dc:5f:c8:41:53:9a:ed:5d:d4:6b:e9:
8b:81:39:e8:43:8c:d2:66:28:2b:50:4b:49:69:d6:
20:ac:b4:31:6d:f4:bc:6e:d1:71:e9:44:d6:7a:53:
e6:d1:e9:15:36:28:00:3f:b9:ad:f2:00:10:4d:73:
48:5f:4a:86:0a:0f:94:c3:91:07:fe:cd:ce:dc:0b:
77:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:65:64:2B:8D:26:01:2A:2D:E7:D9:03:B5:57:B8:28:8C:FF:6E:47
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j2VkK40mASot59kDtVe4KIz_bkc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.252.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:0f:a6:c0:b0:61:60:1c:fc:93:d6:7f:95:4a:69:70:b5:ca:
23:65:40:99:46:3e:68:ef:0e:4a:41:bc:e3:31:2d:02:3e:ac:
07:d9:24:4a:1c:f5:46:cf:84:64:43:68:52:4d:1a:43:3f:16:
fa:f0:1c:46:49:c2:23:15:aa:f1:58:ad:d2:c9:dd:e9:7b:9e:
c0:44:a8:57:23:ba:58:a1:47:da:2c:3b:50:15:f4:1a:3c:a7:
17:c3:31:06:1f:ca:d6:42:ef:b9:58:4a:ff:26:fd:92:da:ae:
cc:f2:e3:33:21:6c:f8:d2:a7:7a:dd:5e:6c:67:ac:cb:7e:c2:
68:ab:40:7e:7e:d6:1e:96:dc:0e:f2:62:58:cd:d5:16:c6:b9:
89:90:e9:1e:0c:50:ef:19:09:a3:5a:49:bb:c9:52:bc:ad:1b:
2f:88:65:f8:32:9f:6a:df:b2:9f:94:b6:b0:8c:96:28:90:d0:
d3:56:e4:aa:52:75:fa:da:a2:d1:a3:59:28:04:83:b3:23:bb:
41:b1:86:c5:bb:ae:26:15:76:44:32:c6:c8:44:e6:1c:bb:3e:
4f:60:1a:64:6d:43:42:71:a5:25:6b:10:67:66:00:ab:67:3a:
82:93:83:2e:a6:e5:2e:d5:7f:22:af:82:db:e6:1e:c7:00:0e:
c6:2a:52:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-fra.rpki-client.org