Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m_Boa610Gel6V05iHRwuCHKeUMs.roa
File: m_Boa610Gel6V05iHRwuCHKeUMs.roa (raw, json)
Hash identifier: zurS+et2ylDwnuqDpPx9A4y5xHDd7qHK3L1U27objrg=
Subject key identifier: 9B:F0:68:6B:AD:74:19:E9:7A:57:4E:62:1D:1C:2E:08:72:9E:50:CB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2321
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m_Boa610Gel6V05iHRwuCHKeUMs.roa
Signing time: Fri 25 Nov 2022 04:42:04 +0000
ROA not before: Fri 25 Nov 2022 04:42:04 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.20.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8993 (0x2321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:04 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9BF0686BAD7419E97A574E621D1C2E08729E50CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:bc:00:60:a9:c9:7f:a1:e8:f4:d0:23:d0:c6:
75:71:23:ca:43:ba:28:fd:8f:77:15:f4:bd:6d:fe:
ad:55:fd:47:70:a1:14:29:ba:ab:19:c5:4e:5f:d8:
d8:73:03:9e:44:6b:8b:27:fa:d4:72:05:96:f3:93:
b0:9a:32:43:71:ef:c0:7a:fb:8b:99:8e:54:7f:14:
d0:bf:6c:3e:2f:34:f6:8a:ba:bd:dd:77:fe:f1:ac:
81:ca:93:46:1b:23:97:25:83:2a:4c:c4:c0:4e:57:
a6:94:bf:ed:92:81:83:68:de:0a:d2:07:f6:5e:2d:
54:ee:b5:38:17:43:fb:68:c5:c9:ee:42:89:e7:e7:
fd:f1:21:0b:e3:91:cb:b8:66:ac:44:bc:15:19:05:
94:65:79:b3:1d:6b:f6:ae:a4:1e:b6:8b:76:c4:bf:
f6:36:b2:95:55:c6:71:d5:b4:0f:7c:08:e8:47:b4:
e7:33:01:b9:99:6b:3d:57:bb:ad:96:b1:14:dc:a9:
b9:6b:b0:5a:c1:7f:38:0f:a3:49:ab:74:26:18:d8:
47:b2:bf:10:dd:23:ab:aa:f3:a5:ea:5a:7a:bc:ea:
2c:7f:e5:48:1a:ba:d6:b3:61:b5:c4:2d:16:c7:b8:
b0:3a:09:8c:39:e5:dd:99:d3:7a:61:f9:ec:fd:c5:
67:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F0:68:6B:AD:74:19:E9:7A:57:4E:62:1D:1C:2E:08:72:9E:50:CB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m_Boa610Gel6V05iHRwuCHKeUMs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.20.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:fa:fc:77:49:b0:43:cc:fe:d4:1b:76:2c:9c:d7:87:62:6c:
35:13:7e:cb:de:b8:5a:1a:60:03:eb:59:ed:02:48:6e:74:99:
3d:0f:43:72:f7:6e:55:02:1b:b5:ce:87:ab:11:a2:08:85:4c:
64:d7:48:2c:a4:8a:85:77:35:e2:dc:d2:cf:5e:06:e4:01:3c:
f6:d4:14:60:da:aa:2a:08:2b:0d:e4:f4:5d:9d:c2:04:75:bd:
34:6c:9a:a2:0f:87:96:28:1b:41:aa:ba:62:7a:d3:7b:04:af:
28:e6:a9:78:fe:14:5a:ff:8c:1b:b6:3a:55:4c:b1:41:77:b7:
57:bf:99:81:83:14:60:d9:7b:21:96:06:0a:19:09:35:2a:35:
a9:4c:bb:eb:5c:fc:d7:99:a3:ac:c0:c3:79:a9:1e:f0:b6:fe:
d2:a8:38:1e:02:e0:b2:33:69:d1:79:cb:ca:55:f6:98:94:4d:
64:dd:68:3f:4a:1c:c5:ee:ba:00:ab:6d:cc:cc:65:26:90:ca:
78:b9:50:3a:7a:b0:c4:a5:c2:fb:cc:79:2a:08:8e:c1:b5:01:
a1:11:29:92:88:37:81:20:45:b7:e5:ac:3a:bf:02:50:7b:ca:
ea:50:8b:42:2e:7b:aa:f0:19:a7:10:6b:5a:01:3a:a2:11:0d:
86:85:50:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:09 2023 by rpki-client on console-fra.rpki-client.org