Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mqqlFKw9qUSX7z2QWoPMFid41pA.roa
File: mqqlFKw9qUSX7z2QWoPMFid41pA.roa (raw, json)
Hash identifier: XQXwSQxpt0OL+bEQufWtmCRn5bnFv1MB3deSBhuFR5s=
Subject key identifier: 9A:AA:A5:14:AC:3D:A9:44:97:EF:3D:90:5A:83:CC:16:27:78:D6:90
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mqqlFKw9qUSX7z2QWoPMFid41pA.roa
Signing time: Thu 15 Sep 2022 02:53:21 +0000
ROA not before: Thu 15 Sep 2022 02:53:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.160.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9AAAA514AC3DA94497EF3D905A83CC162778D690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a8:8f:63:8c:7e:e6:f0:25:23:68:22:ab:b5:
26:a9:48:cf:84:51:2e:62:0c:c9:ce:f2:ed:d9:b2:
2b:25:22:80:f2:e7:04:b2:06:4e:e5:76:56:37:90:
ba:73:ef:06:33:29:52:2d:9d:3d:94:85:12:41:ee:
2c:78:b2:62:87:fc:17:71:31:33:d9:2b:51:78:0e:
45:76:79:15:b2:88:3f:a1:73:27:11:05:d4:da:0b:
7b:14:61:cb:17:53:df:c7:1b:7d:eb:5e:00:6a:e3:
10:91:49:93:64:61:17:99:e5:b5:00:4d:11:80:00:
d3:10:a7:ca:4e:d0:7a:b1:66:04:cb:52:08:cb:cc:
13:56:bf:46:39:18:d6:3a:c1:15:f5:b4:b3:93:5c:
84:fd:77:f9:51:8d:0d:b4:79:2d:1b:b6:1e:7f:8d:
de:4a:4d:d2:d4:49:4a:b9:1d:2a:1c:d4:c1:d8:e0:
8d:93:e7:ea:0b:f3:52:47:67:16:7c:18:f5:ea:a4:
c9:34:1d:a9:7b:5f:90:93:f1:55:e4:63:c2:44:4e:
44:67:f3:8f:c2:85:f3:5d:d9:ae:48:da:59:4f:5b:
e7:75:e2:f4:bb:4b:28:6a:7d:9a:f6:b7:cb:20:45:
5b:61:60:bb:ca:b4:38:41:31:1d:e4:99:19:23:9e:
75:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AA:A5:14:AC:3D:A9:44:97:EF:3D:90:5A:83:CC:16:27:78:D6:90
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mqqlFKw9qUSX7z2QWoPMFid41pA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.160.0/21
Signature Algorithm: sha256WithRSAEncryption
67:dc:65:50:a1:05:ce:5d:dd:13:68:fd:fe:30:f9:ff:a1:a9:
35:22:d3:fd:e5:b0:8f:60:cd:0a:e3:26:f2:9f:9c:34:cd:33:
57:c7:5c:04:db:1a:f0:64:7e:6e:50:e8:1c:9e:26:2a:cf:ee:
3d:29:43:f6:8b:03:c4:c6:06:f3:fb:6a:86:aa:6e:dc:5a:39:
b6:ef:c4:54:12:8d:ec:7a:c3:80:68:87:02:23:d0:10:7e:30:
f2:ad:f6:d9:86:f6:e9:c7:53:5c:f5:db:e5:99:2d:e6:0d:0a:
78:1b:56:82:8a:75:aa:7d:22:68:1e:10:48:56:22:ab:46:a4:
6f:ba:98:0b:f9:c5:a8:c7:3e:e5:05:d8:87:ab:16:25:e4:f4:
fb:03:f6:66:c6:50:7a:bc:59:9e:19:5b:72:5d:06:cb:16:ac:
2d:be:0e:96:dd:01:72:13:19:86:9b:4e:f1:25:01:d9:92:64:
25:0b:02:13:2c:c5:a7:04:4c:da:33:3b:4a:59:ec:58:21:e5:
42:a8:49:45:f4:29:d3:61:1a:d8:2e:36:de:6d:c3:e8:b1:70:
05:d5:70:bf:af:e5:a4:cd:39:0a:43:66:07:21:a6:bc:9c:80:
d8:b7:84:6c:53:bd:7a:da:b7:47:6b:3f:3a:7e:67:c5:b4:86:
d1:f8:1c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:39 2023 by rpki-client on console-fra.rpki-client.org