Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n_HvjxTGDaO75kaPl6YQtG-NAWg.roa
File: n_HvjxTGDaO75kaPl6YQtG-NAWg.roa (raw, json)
Hash identifier: qK6pxwPSOfuh/7TaXInjhzL0GwkQkxvaGmwv4Jowcy4=
Subject key identifier: 9F:F1:EF:8F:14:C6:0D:A3:BB:E6:46:8F:97:A6:10:B4:6F:8D:01:68
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 214E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n_HvjxTGDaO75kaPl6YQtG-NAWg.roa
Signing time: Fri 25 Nov 2022 04:39:45 +0000
ROA not before: Fri 25 Nov 2022 04:39:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.176.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8526 (0x214e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9FF1EF8F14C60DA3BBE6468F97A610B46F8D0168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:01:42:a4:98:97:84:3b:75:74:a7:45:1a:
db:1c:97:33:83:5b:d2:fb:ad:9d:fd:91:76:ae:78:
8d:19:a8:36:07:d2:f9:54:0d:10:ad:83:23:30:69:
d1:fe:40:3b:1b:ff:87:01:50:90:ac:70:e1:74:2f:
b3:2d:b6:8e:d2:62:13:c5:c8:40:54:57:4d:a8:43:
68:cf:14:14:e7:d6:14:e4:3b:16:e8:3e:7a:d9:7c:
b5:5e:4c:02:b8:a8:1c:fd:b5:bf:1c:1b:a3:77:d4:
e9:94:31:9f:98:4d:b9:a8:a9:bc:07:4a:9d:78:3c:
1b:9c:c4:51:75:1e:e0:11:8c:7e:2b:e5:8a:66:52:
4e:eb:81:76:76:02:59:12:6a:09:24:6f:62:6a:a5:
6b:4d:04:77:b1:4a:2e:ef:51:81:d9:25:c9:bb:18:
52:77:d5:25:ab:dd:98:43:ad:06:7f:60:97:91:8e:
5c:57:89:eb:e1:a5:1e:07:ed:19:cc:2a:b4:22:6e:
dc:22:34:02:f4:9a:a7:4d:17:65:1f:9c:88:b8:a3:
d1:01:ea:73:08:ef:cd:d1:51:5b:75:b0:14:5c:f4:
c2:e1:75:5f:9b:ce:52:ea:29:44:92:a2:61:03:a0:
e0:89:7c:e3:7f:fb:05:14:ba:4e:9c:dc:fa:14:3c:
04:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F1:EF:8F:14:C6:0D:A3:BB:E6:46:8F:97:A6:10:B4:6F:8D:01:68
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n_HvjxTGDaO75kaPl6YQtG-NAWg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.176.0/22
Signature Algorithm: sha256WithRSAEncryption
12:82:5d:1f:18:87:c4:4f:2b:46:98:e4:7d:97:bb:a5:de:f0:
6d:83:a2:39:16:76:63:fa:75:d8:9f:c4:4e:0e:07:04:87:fb:
20:0c:84:c7:35:97:0c:ea:56:24:44:e9:c2:27:54:33:c7:7c:
30:32:0f:4a:96:a5:7d:6b:99:46:f7:6e:40:f8:50:4a:87:b0:
bb:45:12:aa:7a:dd:be:8a:22:86:2f:c2:69:58:1d:d0:7a:b6:
2e:1d:df:f2:64:91:7d:72:19:7f:87:16:86:87:e9:d6:01:7c:
a7:e3:ce:e6:e9:74:07:c0:a0:29:93:11:1e:69:2a:19:4f:0c:
e4:c7:85:a9:76:23:2a:56:bd:a1:72:ab:fb:15:dd:d2:5c:2e:
fa:29:a2:12:e0:98:75:8b:3e:73:31:4a:a0:39:7b:e7:2a:67:
9b:bc:68:da:6e:2e:c9:df:69:ea:b3:20:58:0e:0b:29:7b:bc:
cf:4a:a8:8a:bf:0b:1d:f5:ea:9f:5c:6c:0e:b6:32:5e:11:9b:
1b:0a:b2:d3:0b:f3:4a:c1:50:78:6d:43:61:14:9d:0d:6b:6c:
71:a4:e2:7a:cc:97:3e:78:58:4d:d6:e7:70:d4:99:07:55:5b:
50:b3:6a:26:c7:ec:da:74:d9:d7:57:60:53:af:43:b5:3c:28:
22:43:82:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:33 2023 by rpki-client on console-ams.rpki-client.org