Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nFCzwRXZDPP-_Rqy0vJwbMaRX6s.roa
File: nFCzwRXZDPP-_Rqy0vJwbMaRX6s.roa (raw, json)
Hash identifier: AqBIh6nOB1A+qBS6K6VWRu5HJAgwXXwzjgQXx071GgI=
Subject key identifier: 9C:50:B3:C1:15:D9:0C:F3:FE:FD:1A:B2:D2:F2:70:6C:C6:91:5F:AB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21F0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nFCzwRXZDPP-_Rqy0vJwbMaRX6s.roa
Signing time: Fri 25 Nov 2022 04:40:35 +0000
ROA not before: Fri 25 Nov 2022 04:40:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.184.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8688 (0x21f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9C50B3C115D90CF3FEFD1AB2D2F2706CC6915FAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3e:b1:a7:d3:47:a9:a4:b9:b6:6e:81:bc:ea:
02:82:ea:6b:e8:6d:04:5b:30:4f:7a:df:c8:ed:3c:
db:4b:f9:39:d8:4e:07:3f:68:71:56:31:5c:e2:69:
64:8d:fb:9c:56:b2:56:88:9f:05:96:0e:70:8b:36:
bb:07:ef:e7:27:7a:1f:1d:9d:7f:ba:a1:79:53:f9:
15:2a:33:93:8d:8a:f2:b1:a2:ba:a1:d1:13:1d:4b:
ad:d8:c7:c2:f5:f6:0a:80:1b:25:66:3e:63:46:21:
ec:12:4a:9c:bc:26:dd:4a:be:b1:af:7c:a7:25:90:
a1:61:e5:65:9d:0e:37:a3:a1:32:5c:da:2b:97:b6:
4d:70:4b:9c:f4:68:cc:35:53:7d:0a:cf:a5:3c:5c:
9d:7e:f0:83:db:15:d6:1c:8f:9f:6c:9c:8c:10:94:
c6:59:5c:e7:5e:ce:a1:1d:fc:43:6b:5a:eb:70:f1:
8e:52:69:43:f4:04:37:52:c9:a8:92:59:89:71:85:
19:9c:69:30:6a:1f:ee:c3:a8:ed:55:1b:34:1d:89:
97:44:c0:52:ca:7b:b9:a1:1b:3f:25:f3:eb:b6:ef:
60:64:a5:eb:8f:10:bc:23:c2:1f:e2:87:47:85:d4:
5b:38:91:f5:b5:88:d6:69:e4:c7:86:2a:f2:57:40:
8f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:50:B3:C1:15:D9:0C:F3:FE:FD:1A:B2:D2:F2:70:6C:C6:91:5F:AB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nFCzwRXZDPP-_Rqy0vJwbMaRX6s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.184.0/22
Signature Algorithm: sha256WithRSAEncryption
14:df:8e:1f:81:ee:44:bc:60:5f:3c:54:70:15:43:70:02:38:
30:6b:99:20:66:b8:09:0c:b4:1d:5b:ef:be:3d:95:39:6e:21:
e0:a8:2e:3f:2c:f1:81:ae:dc:24:d9:0d:ad:3e:0d:d0:db:ef:
0e:de:b5:3b:25:0e:4b:ea:ac:22:d5:83:57:22:0d:40:0a:7e:
7b:8a:6a:f2:27:a6:ad:3b:1d:7d:30:4d:5a:db:d6:b5:0f:90:
2a:37:6f:27:66:a1:f7:6a:a9:3b:e3:5c:1d:31:69:ff:39:05:
1d:8f:9d:97:08:08:32:44:12:2b:6f:d2:bb:04:1e:98:31:b9:
8f:8c:76:ef:52:5f:11:97:ff:4c:2b:aa:e9:a9:5c:f6:7d:4c:
f7:38:41:34:15:69:1c:55:18:ab:1b:a9:b1:78:26:5b:c9:7f:
89:a4:21:8a:11:f1:ba:f8:69:8c:90:aa:18:0a:75:b0:98:c3:
a8:13:c7:71:1e:07:77:64:cf:65:78:33:fe:0d:01:99:5f:a1:
2d:3c:5f:cc:65:e7:d1:13:0e:5e:e4:93:61:46:13:df:37:04:
8e:a0:67:58:8e:68:2e:50:79:dd:d5:2e:0d:12:f0:21:9b:24:
98:ad:76:a5:6e:bc:01:f1:a1:a4:9d:e4:e7:71:96:9e:64:63:
ad:98:35:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:33 2023 by rpki-client on console-ams.rpki-client.org