Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nlUb6cEhYbMhmFSHE_yYrj-pXWM.roa
File: nlUb6cEhYbMhmFSHE_yYrj-pXWM.roa (raw, json)
Hash identifier: 87zFMULC8+Gnw/fSTxCTfVldhXH0f7XtEBmr2bsfnZ8=
Subject key identifier: 9E:55:1B:E9:C1:21:61:B3:21:98:54:87:13:FC:98:AE:3F:A9:5D:63
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22C5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nlUb6cEhYbMhmFSHE_yYrj-pXWM.roa
Signing time: Fri 25 Nov 2022 04:41:38 +0000
ROA not before: Fri 25 Nov 2022 04:41:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.148.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8901 (0x22c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9E551BE9C12161B32198548713FC98AE3FA95D63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:29:cc:ee:df:24:1a:8b:4e:0b:ce:2f:cc:d1:
9b:ca:08:86:c5:0e:f0:05:d1:af:47:0a:58:bc:ed:
98:0a:ac:12:7b:e7:8b:0e:80:1e:d1:05:03:19:66:
6c:32:d3:09:73:90:b7:99:8a:63:ee:d0:09:0a:73:
93:39:18:d3:c4:0e:40:60:58:05:e9:17:31:1c:28:
db:80:41:56:e7:8f:ab:43:6b:66:ba:c5:d0:06:1e:
db:c6:68:d1:c0:dd:68:21:59:bb:95:17:f4:7a:c5:
67:9a:ac:46:17:1e:1d:d3:f3:36:70:43:3e:19:8d:
34:92:62:82:7f:4c:9f:2e:91:3f:8d:1f:26:fe:c6:
ad:89:0e:de:85:4c:19:f3:db:23:89:c2:95:4f:6f:
80:76:27:96:1c:9a:b8:52:f6:f9:d5:69:c6:3b:26:
69:05:f0:55:52:e0:3d:05:00:f7:13:db:ef:7b:f0:
c2:73:cd:4b:95:6c:a3:6b:ec:89:d9:c9:62:63:c4:
fb:56:5e:ba:2e:1c:02:8d:cb:f0:66:ef:97:6e:4a:
ce:13:09:01:89:4f:c8:92:6a:96:71:e1:1b:9c:57:
95:37:e6:88:15:f8:92:d2:d0:df:e9:b7:8f:eb:d4:
8b:17:ef:3c:9f:a8:d4:fe:25:26:fd:e6:c8:9a:9c:
8f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:55:1B:E9:C1:21:61:B3:21:98:54:87:13:FC:98:AE:3F:A9:5D:63
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nlUb6cEhYbMhmFSHE_yYrj-pXWM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.148.0/22
Signature Algorithm: sha256WithRSAEncryption
38:0f:cd:db:7a:97:32:f5:33:23:e6:4c:f2:ae:c8:42:18:9c:
b2:f6:14:b5:ad:6f:73:64:ce:d1:9d:fa:1e:1a:01:52:1c:a2:
83:1a:72:f9:eb:a1:5e:fe:47:80:58:10:27:1c:a3:b0:90:6a:
29:0c:c4:b0:9f:90:8d:af:4c:15:22:b6:31:a8:6f:89:6d:3d:
c1:85:2d:67:86:fd:42:fc:30:19:d7:c2:c2:a5:2e:73:e5:be:
27:a4:74:32:1e:2c:52:74:ee:91:44:bd:59:61:4f:fb:e2:4d:
30:25:eb:09:41:6c:94:ae:fa:26:d0:76:a9:a7:63:28:bb:99:
8f:1f:a7:c1:db:4a:c4:f8:b4:40:a5:87:51:ad:be:41:de:ea:
7c:7f:8c:65:4a:98:e3:71:a8:97:d7:56:4b:8a:79:bc:78:a7:
86:b8:84:0f:4e:a2:85:1d:6f:f5:50:9d:4f:f7:b5:20:1e:be:
11:c9:85:7f:04:f0:d1:40:ec:68:85:4f:95:6d:2c:0d:04:42:
31:57:24:27:cf:8f:f5:59:fa:66:fb:04:7d:9a:5b:1b:06:06:
b4:58:01:56:99:1b:18:0f:3b:dd:22:6e:e6:4d:f7:8c:b5:39:
a8:a4:23:a7:fa:3c:78:c1:f9:1b:76:3c:28:b0:b7:8d:51:3e:
cf:5f:03:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:10 2023 by rpki-client on console-fra.rpki-client.org