Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nl8j86Sn6q_r7Ex056H-i5lqAm8.roa
File: nl8j86Sn6q_r7Ex056H-i5lqAm8.roa (raw, json)
Hash identifier: FY2tW4gl995wTsJJlwdv4gh6XYHvMiHq1ucHTK0skWg=
Subject key identifier: 9E:5F:23:F3:A4:A7:EA:AF:EB:EC:4C:74:E7:A1:FE:8B:99:6A:02:6F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FD7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nl8j86Sn6q_r7Ex056H-i5lqAm8.roa
Signing time: Sat 22 Oct 2022 11:11:11 +0000
ROA not before: Sat 22 Oct 2022 11:11:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.0.0/20 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8151 (0x1fd7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Oct 22 11:11:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9E5F23F3A4A7EAAFEBEC4C74E7A1FE8B996A026F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:94:55:9b:ad:61:d5:d5:9d:9a:2f:40:fa:7a:
96:5e:f9:3d:d7:29:b2:d5:87:2a:de:2a:01:8b:13:
fd:12:47:20:0f:a0:de:9e:02:62:e1:ba:fe:29:64:
ef:30:96:39:1d:11:cc:e5:ad:db:94:1e:77:65:95:
f0:54:56:0f:c0:a0:8a:63:ac:42:ea:17:bc:6a:ef:
33:f9:13:78:4e:be:dd:9b:93:b3:d5:c6:d5:48:e7:
af:b1:6c:15:b8:49:01:04:ac:61:48:39:58:90:24:
31:ef:03:0b:07:51:b1:75:3e:37:3d:51:53:b8:73:
75:4c:73:20:9d:f6:5e:df:7d:7b:d2:98:79:7c:95:
62:74:3f:72:97:5d:7f:c8:6f:da:1f:c2:07:33:b5:
0e:d0:b3:26:7c:52:a5:dc:19:53:dc:78:76:e0:45:
32:72:83:5b:ec:af:af:3d:0b:de:33:5e:21:9f:53:
8b:11:7c:d0:23:1a:d1:8b:6e:58:08:c9:2d:22:61:
76:7f:4b:c9:aa:cc:22:0b:5c:fe:97:2d:40:3a:b1:
76:40:01:a1:bf:44:02:45:25:38:97:06:d4:e1:1b:
9d:02:b5:5e:bf:b7:88:cb:f6:bc:0f:ce:60:3b:14:
d5:d3:c8:e8:1d:ac:8b:da:30:b7:78:34:ff:60:f1:
29:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5F:23:F3:A4:A7:EA:AF:EB:EC:4C:74:E7:A1:FE:8B:99:6A:02:6F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nl8j86Sn6q_r7Ex056H-i5lqAm8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.0.0/20
Signature Algorithm: sha256WithRSAEncryption
35:50:0e:60:2e:c0:99:74:b0:17:23:4d:ec:f8:8e:70:0e:89:
f6:49:a8:3f:ac:23:52:cd:c0:63:e4:79:f9:e2:0d:e8:6f:22:
80:ac:f0:7e:04:4a:98:c6:32:fa:62:1e:c5:66:60:b5:c7:19:
ec:8c:96:f5:78:90:77:fb:98:bf:07:fc:d1:91:2e:72:3d:a4:
98:29:65:1b:ee:af:eb:a4:74:3d:bb:66:d9:72:ff:88:bf:10:
cf:58:24:bc:5c:86:cf:a5:ba:d8:bc:ed:b6:61:d6:cc:6d:d8:
ae:a1:9d:1b:cf:d0:b8:09:6d:4e:26:01:86:ee:b3:9d:bb:d1:
2b:6f:b5:05:92:c4:3c:b5:ba:66:b0:7f:5c:96:d1:aa:7c:ab:
49:51:dc:39:af:fd:5a:07:b3:d3:31:10:31:ec:1e:bb:cf:99:
dd:0d:81:9e:bd:52:03:cf:51:e2:6d:37:33:37:f2:56:d9:c5:
34:15:b7:86:b0:42:20:3a:ae:2d:e0:f3:7b:89:8d:b0:92:c9:
3a:9b:43:bb:3d:5e:21:23:1d:3a:50:62:9a:63:84:41:4a:09:
ac:e1:c5:c7:02:3d:c9:fd:d0:85:11:38:f1:06:3e:25:97:99:
9b:65:6a:be:b6:19:c3:70:ce:e2:05:1c:f7:e6:a9:db:3e:33:
22:10:ae:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:28 2023 by rpki-client on console-ams.rpki-client.org