Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mNM3BjGHjeH9LPeczwliBZJT6ko.roa
File: mNM3BjGHjeH9LPeczwliBZJT6ko.roa (raw, json)
Hash identifier: UdPgoflhFMNo28Un9mQ2VhxWKyqBn2xJjnU6Zjz0n90=
Subject key identifier: 98:D3:37:06:31:87:8D:E1:FD:2C:F7:9C:CF:09:62:05:92:53:EA:4A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 235D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mNM3BjGHjeH9LPeczwliBZJT6ko.roa
Signing time: Fri 25 Nov 2022 04:43:30 +0000
ROA not before: Fri 25 Nov 2022 04:43:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.8.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9053 (0x235d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:43:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=98D3370631878DE1FD2CF79CCF0962059253EA4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e2:2f:7c:7e:f9:42:af:88:44:e1:37:70:83:
d8:a2:f9:0f:4a:66:54:65:c4:85:c9:8b:a4:51:6e:
94:e1:87:e6:f7:a2:35:e6:5b:8e:bb:cd:5f:62:c8:
57:f5:4b:50:44:5f:2f:37:51:c7:23:5e:d2:11:72:
e5:98:f1:1a:dd:50:e9:98:79:85:0e:9a:ce:59:d4:
3b:12:9f:c3:01:3a:38:c1:d7:2d:12:e7:90:d1:65:
fc:c3:2b:e4:46:b8:66:a9:0f:55:8f:f3:c4:48:89:
fe:a5:e8:23:40:30:0f:f0:68:05:10:3d:8e:c3:e1:
8c:ac:2d:9d:66:12:a5:38:52:cc:c1:99:a8:9d:a8:
24:bc:e8:8b:27:51:d5:e6:b2:41:f3:50:5f:f4:5a:
e9:55:3e:1a:cf:70:76:6e:94:47:a1:c5:3e:35:11:
f0:a0:18:d1:26:85:4b:24:73:c5:46:ea:15:c2:f1:
f1:63:e4:08:e6:ee:f7:97:82:9a:47:6e:0d:da:4e:
7b:d3:62:dd:54:f5:81:af:ed:2e:49:ae:fd:0e:fc:
5c:b8:4f:52:9f:c3:13:91:8f:2e:5d:b9:f7:e9:8d:
a9:4b:9f:43:d1:ae:f6:e5:3b:19:a1:2c:59:e6:19:
58:60:f4:a9:d6:4c:60:5e:0d:6e:4c:74:30:0f:07:
1b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D3:37:06:31:87:8D:E1:FD:2C:F7:9C:CF:09:62:05:92:53:EA:4A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mNM3BjGHjeH9LPeczwliBZJT6ko.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.8.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:77:89:c8:89:3b:ee:88:b5:a1:d3:1a:59:57:48:fb:4b:c0:
c5:1e:a5:80:19:34:7f:eb:19:1b:cd:8a:5f:20:dd:95:03:1e:
5f:45:6c:ce:d4:45:b3:76:72:54:7b:f9:5c:cf:2c:16:23:68:
4b:3a:10:c2:17:90:ff:8f:09:4b:e6:bc:fe:19:7b:63:8b:9f:
b4:cd:28:c8:3d:c7:be:8b:e7:02:4d:c2:cb:da:e5:11:fe:a8:
58:cf:fa:6f:88:81:2d:ff:4c:88:d1:07:cb:1d:d9:52:a0:72:
b5:bb:c3:f6:8e:0a:01:6c:23:31:ca:4d:a1:55:5a:ed:a6:94:
a6:81:0d:05:c8:8c:b3:bf:de:ff:a4:b6:19:1b:1c:84:07:1c:
84:97:13:84:31:44:4c:8a:80:ab:04:cf:03:b5:54:dd:bf:d4:
64:f7:a1:e5:99:96:e2:07:1b:53:61:2f:dd:bb:e4:b2:5e:2f:
6b:c6:6d:4c:96:54:06:34:6a:4c:05:82:a6:49:bc:82:c5:4f:
16:88:dc:83:ad:11:80:09:0f:37:db:e4:97:75:9b:83:f7:68:
59:1b:b0:a9:f0:6b:61:55:f2:77:57:c4:a3:d4:51:ea:0d:04:
4c:71:6b:d9:a6:6d:bb:e6:57:72:77:9e:87:39:91:8f:f5:3a:
83:35:bc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:33 2023 by rpki-client on console-ams.rpki-client.org