Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kGmXbuzapEtQqPX3Dvq8p2mgFfs.roa
File: kGmXbuzapEtQqPX3Dvq8p2mgFfs.roa (raw, json)
Hash identifier: lVV8J/BmtDDArkS9clFNWEZ+6IX4RgJ+jdHdFlbn4/Y=
Subject key identifier: 90:69:97:6E:EC:DA:A4:4B:50:A8:F5:F7:0E:FA:BC:A7:69:A0:15:FB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21F6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kGmXbuzapEtQqPX3Dvq8p2mgFfs.roa
Signing time: Fri 25 Nov 2022 04:40:37 +0000
ROA not before: Fri 25 Nov 2022 04:40:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.12.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8694 (0x21f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9069976EECDAA44B50A8F5F70EFABCA769A015FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fc:06:ea:05:97:fc:6e:77:36:1e:e7:fe:95:
25:e2:c1:d0:1c:f2:9a:4c:a3:d2:cd:eb:ef:3c:63:
8c:cd:a0:b8:fe:97:b9:04:64:91:37:d2:5a:e1:2b:
4f:99:09:d1:d5:b3:2f:58:b9:d0:f8:f4:97:59:c3:
25:7c:c1:f7:d2:8b:a6:05:db:2b:3b:a8:7d:59:0d:
83:d5:9b:7b:10:4d:9b:a8:37:9e:99:af:3d:8f:b5:
6e:ed:dd:11:19:65:27:83:75:01:34:47:71:fc:4e:
17:bb:c9:17:52:9a:1c:ee:1e:3a:23:02:51:ab:ee:
d3:6d:bd:7b:60:bb:06:a2:0f:57:27:cd:6c:51:2c:
f9:39:6c:c4:5f:c7:de:be:3e:a4:82:fe:5f:76:7c:
74:bb:1e:43:89:10:a7:a7:92:d4:4f:2a:ba:57:9c:
08:58:66:c9:0c:74:e3:96:8e:c9:02:fe:de:46:27:
ac:51:e3:a5:01:02:5c:28:57:cb:d0:ba:66:f2:c2:
78:21:6e:0d:cc:0b:70:e0:d5:fc:32:06:31:f0:51:
65:91:4d:4a:f1:e5:de:f7:a7:4a:d3:07:38:03:56:
18:24:6f:c5:52:e2:21:af:96:c6:36:ac:b5:5d:0e:
8a:fd:9c:04:38:5d:18:45:00:50:e9:8b:b5:7a:0a:
41:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:69:97:6E:EC:DA:A4:4B:50:A8:F5:F7:0E:FA:BC:A7:69:A0:15:FB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kGmXbuzapEtQqPX3Dvq8p2mgFfs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.12.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:c8:2c:c6:ba:0d:88:9c:89:7b:b7:24:78:34:09:f8:a2:6c:
8e:95:84:74:a9:ce:a5:7e:8e:da:ed:fb:5c:a9:3f:b3:2d:90:
a3:7d:ce:d0:ca:2f:85:a1:78:91:29:d1:92:64:08:7c:6d:09:
e9:97:68:40:c6:ea:01:a6:16:b0:75:ce:9f:c8:d3:8a:01:8b:
f5:55:e9:0e:c7:6d:8b:12:84:d3:2f:9a:f9:5d:f8:71:db:ee:
3e:8e:d6:22:43:a6:67:80:38:03:59:30:ed:20:db:ea:69:4a:
3b:c6:0c:b2:c6:db:9d:51:29:d0:02:1d:50:3c:fd:2c:72:f8:
9a:50:d0:7f:14:6a:7b:11:af:eb:27:fc:f3:08:83:47:b9:c6:
c8:16:f0:94:5e:1c:df:d1:78:42:9c:0d:d5:4c:c1:6c:04:27:
fb:62:67:a6:fe:c4:ca:d4:25:b4:5a:db:9a:52:df:7e:4b:7d:
58:21:4d:25:36:f6:64:a6:9d:fb:23:ac:27:9e:e0:5b:f0:00:
f6:2a:26:a8:72:8a:82:8f:61:8b:dc:c2:a1:da:1b:53:78:5e:
e6:cd:61:0b:9f:2a:19:f3:b3:ee:72:19:f7:82:7d:45:ab:fd:
8f:42:e3:42:2d:23:fd:6e:32:2f:60:d9:42:59:c6:ea:29:76:
ac:93:d6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:09 2023 by rpki-client on console-fra.rpki-client.org