Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mljgPR0HvAkHB3JTueDdIk94VlE.roa
File: mljgPR0HvAkHB3JTueDdIk94VlE.roa (raw, json)
Hash identifier: a5yJBoBd/Edwiz+w1ly3Lk0982M1ktGykpSwEzgFsEw=
Subject key identifier: 9A:58:E0:3D:1D:07:BC:09:07:07:72:53:B9:E0:DD:22:4F:78:56:51
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 237C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mljgPR0HvAkHB3JTueDdIk94VlE.roa
Signing time: Fri 16 Dec 2022 03:34:22 +0000
ROA not before: Fri 16 Dec 2022 03:34:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 103.224.192.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9084 (0x237c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Dec 16 03:34:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9A58E03D1D07BC0907077253B9E0DD224F785651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b3:a1:e6:2a:5e:98:97:84:dd:fd:03:ae:e9:
68:7a:94:0a:2a:65:4a:25:91:b5:51:95:ff:c8:cd:
ca:b7:3c:3a:37:70:31:8d:85:d4:d4:71:96:07:03:
f4:57:11:47:3b:a9:83:04:f1:5e:2e:88:06:83:89:
c5:95:62:ed:80:bb:f4:4f:58:06:4a:7b:64:bd:a9:
df:fe:6d:0b:14:a2:97:fc:bc:43:35:80:9a:c8:06:
0b:b0:26:bc:3b:41:d9:0f:47:2a:2d:78:7c:42:13:
1c:35:fd:7a:a2:f1:4c:13:4a:18:ce:63:18:ce:a2:
d5:4c:69:b4:84:59:e3:22:e2:51:a8:e1:ae:80:fb:
ce:3a:3b:97:ce:26:16:8e:31:1f:cf:19:ba:b5:82:
81:16:5d:b4:91:27:81:39:8f:da:f1:88:7f:fd:eb:
6c:77:5a:96:61:9d:58:de:a6:00:77:28:d3:ff:d6:
a0:d1:ff:13:57:b0:88:8c:4b:0c:3a:81:d6:52:f6:
b8:2d:23:88:54:37:fc:69:27:21:0b:12:7c:90:da:
51:18:c4:06:87:7d:14:12:a0:12:87:3b:b6:ee:1d:
e8:6e:f9:1e:b4:9c:ce:ef:37:29:ea:0c:dc:a0:e5:
3a:1f:53:4a:d5:b9:6b:85:9a:60:61:b5:ec:4b:7f:
f4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:58:E0:3D:1D:07:BC:09:07:07:72:53:B9:E0:DD:22:4F:78:56:51
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mljgPR0HvAkHB3JTueDdIk94VlE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.192.0/22
Signature Algorithm: sha256WithRSAEncryption
01:84:73:a7:00:6f:9d:02:b5:e8:08:73:9b:a3:d4:e0:1d:b4:
56:13:7d:0a:5a:50:f3:ab:61:f8:3e:d6:ef:f6:9e:47:5c:94:
ae:35:27:6c:cb:d7:f2:93:2e:8c:76:33:4c:84:27:f1:99:cc:
bf:85:82:e4:57:f3:ca:48:78:80:b3:0a:7c:5f:95:3e:1d:2d:
a9:2a:48:57:27:7b:82:25:1e:2b:05:ec:3d:ab:fa:45:cb:23:
57:f8:ad:7c:84:04:7d:50:63:e8:a2:9e:cf:6a:cc:2b:b1:7b:
da:8e:de:44:8f:65:3d:03:48:77:f4:9f:3c:88:60:05:2c:50:
6a:7c:b2:50:33:36:21:0b:6c:15:85:6f:fd:4f:69:69:55:52:
6e:f6:5f:21:80:c8:41:11:49:28:2b:a7:a3:cc:74:2a:e0:0a:
db:ff:df:9f:f7:45:14:b7:f6:92:24:32:57:e0:99:ea:59:83:
ce:77:64:49:f1:ec:b2:b3:21:00:a1:dc:e5:80:a9:f5:ac:73:
aa:6c:44:b8:48:45:46:f1:18:57:88:c9:b6:31:f5:57:30:6f:
71:90:f0:46:9b:ae:6b:0f:0c:ea:91:f8:71:a3:c9:5f:5f:3b:
d6:94:98:11:b1:c9:ea:46:ad:62:3b:e2:39:ec:aa:42:60:41:
c7:43:4a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:09 2023 by rpki-client on console-fra.rpki-client.org