Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jknrZJLiY-80OiC9Im5pjFWcm3w.roa
File: jknrZJLiY-80OiC9Im5pjFWcm3w.roa (raw, json)
Hash identifier: au9g65a+8EeI3h83SoGHEPSKM64GFY9dyOtxlQqXd5s=
Subject key identifier: 8E:49:EB:64:92:E2:63:EF:34:3A:20:BD:22:6E:69:8C:55:9C:9B:7C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21C4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jknrZJLiY-80OiC9Im5pjFWcm3w.roa
Signing time: Fri 25 Nov 2022 04:40:23 +0000
ROA not before: Fri 25 Nov 2022 04:40:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8644 (0x21c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8E49EB6492E263EF343A20BD226E698C559C9B7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:8e:c1:9a:d8:0b:fc:e6:10:a2:76:4c:21:
60:93:28:09:e0:f9:53:c2:e9:5a:4a:f3:7e:ba:a5:
81:95:92:4d:42:3c:a2:03:0f:5e:6a:b2:6e:7d:ff:
09:8b:f5:3a:6f:73:50:28:41:f8:01:3f:01:0c:bd:
87:23:70:f5:ed:39:38:ab:24:db:e2:cc:44:54:2b:
d6:a7:5c:ff:03:79:45:08:a1:5d:7e:73:20:7d:94:
62:b7:24:ba:90:42:d3:4e:1a:ab:39:54:8b:e4:e3:
34:b4:c0:6b:25:26:4c:c2:38:89:6d:1b:7f:27:f8:
c0:f4:13:c3:6a:02:20:0e:f1:a5:83:35:0d:32:04:
15:92:b3:fa:ea:90:45:1b:46:10:d1:45:10:5b:a1:
a1:36:29:35:82:00:b1:7f:d2:2e:2b:ac:cd:0c:84:
fc:b4:19:ce:25:83:5d:fb:19:f6:76:5c:f3:ad:d8:
f1:e5:39:10:7b:ad:85:fc:36:aa:83:ea:bb:69:ed:
bc:5a:56:b0:2e:30:a6:e5:ec:de:80:5d:76:c4:9a:
68:31:b5:19:3b:41:7c:c9:71:58:dc:6a:ce:38:7d:
f1:65:52:f1:a2:dd:2d:59:00:48:00:14:84:59:4d:
da:cc:e8:11:be:0c:20:a6:7a:b9:e3:70:b3:19:87:
21:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:49:EB:64:92:E2:63:EF:34:3A:20:BD:22:6E:69:8C:55:9C:9B:7C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jknrZJLiY-80OiC9Im5pjFWcm3w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.252.0/22
Signature Algorithm: sha256WithRSAEncryption
52:45:ff:87:dc:cf:42:2c:7f:ff:b3:52:bb:da:9d:44:6b:e1:
21:79:a0:55:e9:f3:1d:35:99:cf:80:5c:bb:e6:88:1f:24:7b:
d7:1a:9a:36:23:32:c5:c8:13:25:4f:40:e1:89:81:86:01:4b:
16:28:ec:d7:0e:61:3d:55:ff:bd:af:94:ed:73:70:b1:96:18:
fb:8a:6a:a2:f3:3d:70:92:0d:9d:82:94:00:78:ef:22:2f:67:
24:e7:5d:8e:35:9d:97:92:15:4b:da:76:5a:27:06:a1:dc:51:
68:cb:6a:17:2f:0c:ef:94:29:e3:af:d9:b5:5a:87:ea:77:b3:
45:44:53:77:37:1d:64:03:b8:48:1c:fc:40:6e:da:92:bb:db:
05:7e:6a:f4:68:18:14:87:62:2c:0a:20:e1:da:17:46:b1:b0:
c1:a5:b6:4b:67:1d:ba:6f:a3:79:4c:f8:ad:9e:6b:70:8d:37:
a2:c8:f8:1b:22:67:e7:b9:42:a2:25:c7:1d:23:d8:f8:73:d7:
68:27:33:0f:9a:a7:97:f9:61:f9:a5:0b:8b:f5:ad:c6:74:33:
7a:60:81:38:d5:b2:a4:a1:02:01:17:6d:c9:b1:32:50:28:c3:
15:d0:8c:69:38:7c:f7:40:ef:55:5b:bf:8c:89:35:f9:f8:04:
d7:32:eb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:32 2023 by rpki-client on console-ams.rpki-client.org