Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jC_2Sm6dnEMvc7HjtFv76fl8GO8.roa
File: jC_2Sm6dnEMvc7HjtFv76fl8GO8.roa (raw, json)
Hash identifier: gqWhXkz3xOlrKnt02unglT9W1xb98Dl2QJRESPCo3e8=
Subject key identifier: 8C:2F:F6:4A:6E:9D:9C:43:2F:73:B1:E3:B4:5B:FB:E9:F9:7C:18:EF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2282
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jC_2Sm6dnEMvc7HjtFv76fl8GO8.roa
Signing time: Fri 25 Nov 2022 04:41:17 +0000
ROA not before: Fri 25 Nov 2022 04:41:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.24.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8834 (0x2282)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8C2FF64A6E9D9C432F73B1E3B45BFBE9F97C18EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c6:ba:ad:cf:53:72:55:71:35:fe:61:b6:4a:
84:8b:27:1e:ed:4d:6b:c2:bc:77:83:15:7f:ec:cd:
b7:08:21:7f:3e:c7:af:d6:c9:a3:c3:87:c9:1e:09:
af:9a:6a:c0:91:17:b3:91:84:af:dd:8b:69:b4:41:
16:71:e8:f1:ad:85:54:e0:91:fb:4b:e2:5f:0c:67:
99:ed:b0:93:8b:48:f9:f2:dc:d7:06:90:7d:a2:c0:
81:48:75:0e:03:62:2d:8a:16:19:52:d5:46:16:5c:
77:9f:20:5e:bb:45:69:7a:b3:74:1e:05:f3:95:9a:
ec:19:a6:94:bc:a3:e4:70:37:93:e6:3a:fe:f8:87:
08:4d:f2:c2:6b:6f:77:c2:ac:d0:cd:9c:d5:aa:21:
7a:df:55:fb:cb:06:11:68:c9:97:87:2e:1b:1b:57:
97:30:45:1e:a8:1c:94:0b:06:d2:9e:ca:3f:06:be:
e8:e8:85:63:41:58:69:11:9e:ee:10:44:7b:7c:24:
d4:58:82:02:9b:2d:89:1a:c1:53:17:e8:54:ef:96:
3d:06:dd:34:b7:3e:27:bf:f0:27:e6:72:ee:1e:c9:
6c:e6:77:bb:14:f3:46:56:39:81:1a:7f:ff:15:d0:
7c:75:c1:7c:7d:2e:0a:1f:ad:64:fb:00:3f:60:54:
37:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2F:F6:4A:6E:9D:9C:43:2F:73:B1:E3:B4:5B:FB:E9:F9:7C:18:EF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jC_2Sm6dnEMvc7HjtFv76fl8GO8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.24.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:28:4a:b4:04:d3:ee:bb:18:11:2f:05:c9:5e:26:89:f6:28:
9c:11:0e:a6:87:35:b9:7d:ca:f4:66:06:52:cb:b0:8c:79:64:
1d:e1:88:e3:3c:25:3d:f4:a1:fe:55:98:fc:28:1b:0a:93:95:
7d:bb:85:d0:38:41:b2:bb:ed:3d:6c:d3:34:4e:a2:14:65:44:
f7:f1:0f:ce:f9:bc:01:ed:aa:5d:e8:3f:82:e2:0f:3f:5c:68:
d7:fb:d7:cd:1a:41:e9:3a:c6:37:8b:2b:87:c5:08:34:64:b1:
9e:d7:9c:89:f5:bf:af:2e:4e:12:cf:68:92:c6:89:f9:eb:ad:
70:0b:64:e3:c5:79:62:05:95:89:c2:72:5c:c9:93:4c:0f:2d:
1e:58:83:fd:9d:9d:ae:92:bd:f9:1a:fd:31:81:01:ce:fc:d9:
97:88:58:82:c4:dd:cd:3b:32:d7:32:b8:8a:39:ee:9f:11:45:
40:7d:cc:ca:c0:1e:d1:c3:ad:8c:83:5a:be:77:a4:57:1f:67:
1d:ce:b7:65:88:f0:8d:09:aa:9d:6f:f0:b9:0f:5e:a5:75:b6:
28:4a:a9:db:57:0e:0d:f7:d9:46:09:9e:40:ef:c5:52:da:4f:
70:ae:97:a4:29:00:e6:06:2d:7e:91:06:9a:72:c1:3f:94:c4:
bc:d9:dc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:09 2023 by rpki-client on console-fra.rpki-client.org