Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ksfIt2q7XOMZuDKkhRU6E68ufE4.roa
File: ksfIt2q7XOMZuDKkhRU6E68ufE4.roa (raw, json)
Hash identifier: XIBGWSyw8aebwso7fQLwtkr1DbCInRWDma2TbCDc+Is=
Subject key identifier: 92:C7:C8:B7:6A:BB:5C:E3:19:B8:32:A4:85:15:3A:13:AF:2E:7C:4E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ksfIt2q7XOMZuDKkhRU6E68ufE4.roa
Signing time: Thu 15 Sep 2022 02:53:27 +0000
ROA not before: Thu 15 Sep 2022 02:53:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.252.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=92C7C8B76ABB5CE319B832A485153A13AF2E7C4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:23:ef:bf:f7:33:5a:3f:23:d1:2d:35:cc:06:
0b:18:04:c2:72:bc:6f:26:8b:b6:4c:3b:6f:44:83:
6a:88:97:11:d3:61:0c:a6:89:e7:1e:48:c7:57:ef:
d3:51:dd:4c:f2:7e:db:e9:24:c7:ee:64:b6:7f:9e:
d1:99:a4:d4:5d:53:18:88:8b:1e:8b:4f:0e:78:11:
e7:55:f4:f9:25:7f:a8:20:d5:a2:b4:98:57:69:48:
ae:72:cd:89:8a:7b:6e:18:fa:37:2d:5d:d0:48:8d:
77:e8:95:19:6f:68:bd:a7:93:24:70:fc:4f:8d:46:
d0:2b:d6:61:16:2d:cf:e8:b5:ff:01:80:5b:e5:56:
d8:7b:71:3b:e7:9e:eb:52:9d:e8:a9:a3:85:2f:b4:
17:7d:7b:06:f3:5a:6d:da:e6:a4:fe:3a:c3:4e:2e:
c5:b1:51:f1:c0:36:03:38:89:4b:c4:30:de:7b:71:
1a:13:4d:24:39:d3:2f:82:f1:98:35:8f:06:b9:b2:
0a:36:8d:95:d1:04:44:32:ae:39:d9:06:10:75:4e:
b2:17:e4:87:64:ac:7a:33:1d:28:85:2e:56:02:10:
d9:97:eb:d3:16:1f:18:3c:32:38:aa:f1:22:8e:15:
93:ae:f9:f3:f3:8b:73:30:4a:d7:80:50:34:1a:a1:
f5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C7:C8:B7:6A:BB:5C:E3:19:B8:32:A4:85:15:3A:13:AF:2E:7C:4E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ksfIt2q7XOMZuDKkhRU6E68ufE4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.252.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:d7:50:2e:53:7f:71:f3:10:37:b5:a2:2c:42:dc:7d:ce:57:
b3:95:c2:8d:67:00:7d:9e:0a:03:48:b4:6b:46:36:01:00:2c:
b4:27:9a:0d:5a:75:75:be:bf:0f:37:12:48:9a:cc:d5:53:e1:
21:74:f1:e6:dc:e6:55:52:dc:e2:59:41:1c:54:4b:ec:5b:ec:
fd:2c:77:23:e9:23:f5:11:38:a9:8d:89:fd:d4:44:fd:82:91:
89:6c:f9:41:85:dc:eb:d3:4d:85:31:f5:d5:1f:37:69:19:32:
b9:7a:da:91:b8:3f:37:06:12:fb:5e:17:01:13:92:bd:57:af:
83:75:28:78:e8:3d:d6:d8:28:dd:02:2e:02:5f:56:d1:12:29:
fa:49:c8:39:80:d1:0a:47:b0:62:f3:c7:a7:21:3b:a0:ad:0f:
dd:39:39:47:a5:bd:17:95:b1:d6:28:c2:6a:5d:8a:50:b7:da:
62:17:71:37:96:e6:84:d6:58:7d:37:3e:a5:ab:f0:2b:45:36:
04:5c:8e:38:c8:ef:e7:ba:41:49:da:45:9d:9c:04:16:c1:39:
e0:c1:ee:1f:8d:40:2a:f2:51:7f:af:8a:d5:4f:d2:83:83:83:
49:88:64:5a:a0:49:52:33:08:58:7c:03:3e:e6:44:8e:72:e6:
b9:e8:2a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:38 2023 by rpki-client on console-fra.rpki-client.org