Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nKLiEPymNzPnR9Q2COr7Zczj8cU.roa
File: nKLiEPymNzPnR9Q2COr7Zczj8cU.roa (raw, json)
Hash identifier: FsNrC707JsTL59BmNyA2XvbjHPyXCDeFHTUjlJq6Ulw=
Subject key identifier: 9C:A2:E2:10:FC:A6:37:33:E7:47:D4:36:08:EA:FB:65:CC:E3:F1:C5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 233C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nKLiEPymNzPnR9Q2COr7Zczj8cU.roa
Signing time: Fri 25 Nov 2022 04:42:14 +0000
ROA not before: Fri 25 Nov 2022 04:42:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.224.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9020 (0x233c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9CA2E210FCA63733E747D43608EAFB65CCE3F1C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:c8:07:93:63:c0:3a:4e:f4:87:f4:b5:0e:
75:a7:4a:6e:8b:26:3a:7d:64:85:61:7a:4e:2c:da:
2a:c0:76:76:f6:eb:44:09:c1:d3:00:d0:bc:83:60:
69:a5:c2:57:80:46:8f:fc:11:e0:59:5c:1a:70:4d:
1e:d1:f1:ce:db:37:d5:91:5e:3c:8f:4a:00:91:e4:
1d:7c:b2:7b:60:44:8d:91:25:6d:7f:f4:9f:da:f3:
4e:48:1a:52:c4:b9:90:81:70:3c:53:f3:c2:bb:38:
21:75:e1:67:5e:d9:a3:7a:01:c6:49:46:97:6e:36:
dc:cc:42:40:80:b7:ef:a3:4f:40:70:44:42:0a:dd:
ca:93:3e:dc:58:8c:cc:ca:67:6d:c7:98:02:da:60:
92:48:68:85:b9:c8:d0:3a:de:70:48:d0:94:fd:a3:
ce:22:50:05:3c:4a:d7:58:35:0c:da:c5:8f:93:15:
40:9b:42:23:ee:3d:d0:b5:d7:4f:db:0c:23:e1:ad:
b2:ef:8e:66:61:b3:9b:9e:dc:f8:34:e0:f3:32:9b:
08:6b:1c:ee:ca:ea:02:9b:19:ac:a5:38:e6:53:05:
86:78:8f:24:0a:bd:dc:05:ec:3f:ff:eb:8e:59:8a:
7d:8d:22:48:ad:33:f9:4b:30:99:dd:2d:04:fe:a5:
53:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A2:E2:10:FC:A6:37:33:E7:47:D4:36:08:EA:FB:65:CC:E3:F1:C5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nKLiEPymNzPnR9Q2COr7Zczj8cU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.224.0/21
Signature Algorithm: sha256WithRSAEncryption
81:6c:b1:7e:07:44:f9:f8:9d:24:6a:22:2a:6f:48:87:3d:e9:
17:fc:db:c6:ee:c1:8f:5f:4e:29:bb:2e:b5:e3:c1:6e:db:95:
a4:da:8a:65:2c:e3:a4:31:74:9a:32:3c:8b:cf:e8:97:3f:e0:
d8:fa:75:66:89:47:e0:26:cb:bc:df:bb:8d:33:31:ab:13:2e:
2a:ce:ab:38:70:3c:35:e2:12:47:23:dd:fb:6a:9c:b5:c5:6c:
0c:86:99:fc:0c:e9:7b:4a:59:2f:aa:6e:46:47:e5:8a:f0:eb:
5c:24:00:40:fc:24:d2:1b:50:aa:c9:32:e4:2e:03:f1:fb:41:
80:91:1d:63:d0:59:f6:81:4f:9c:6c:88:ee:2b:a8:aa:3b:29:
6b:89:12:1d:62:24:b1:6e:8f:dc:29:c9:c8:b8:61:89:24:88:
f3:ca:3b:87:10:3d:f6:25:c8:a6:43:54:6c:3a:93:b5:1d:a1:
36:ac:36:51:10:64:5a:c2:5f:3e:5a:1e:b9:70:6a:3c:2d:f0:
6b:2b:b6:e5:ca:5b:15:12:0c:46:13:78:19:f2:29:42:5b:47:
cf:2b:68:1f:e2:ad:80:bf:0b:25:13:d8:a7:37:d1:eb:4a:f2:
e0:28:e5:88:ff:b7:19:94:44:9b:86:cd:97:36:80:93:1a:c4:
a9:ad:01:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:10 2023 by rpki-client on console-fra.rpki-client.org