Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/o3YshrDoU7UO24P3IeZaOPtvSQ0.roa
File: o3YshrDoU7UO24P3IeZaOPtvSQ0.roa (raw, json)
Hash identifier: n0DECyfM60lnJ/uDqWtZw1MY96VwExQcgu3u92vG/pA=
Subject key identifier: A3:76:2C:86:B0:E8:53:B5:0E:DB:83:F7:21:E6:5A:38:FB:6F:49:0D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2167
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/o3YshrDoU7UO24P3IeZaOPtvSQ0.roa
Signing time: Fri 25 Nov 2022 04:39:54 +0000
ROA not before: Fri 25 Nov 2022 04:39:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8551 (0x2167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A3762C86B0E853B50EDB83F721E65A38FB6F490D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9e:ae:a3:3e:88:a9:9a:d8:0e:a9:9b:d7:38:
ec:60:26:da:06:79:e2:e3:6c:52:42:25:3e:40:a7:
ba:47:27:80:e8:84:7e:54:13:76:38:90:fc:4d:76:
b5:76:ef:4b:28:b6:22:07:3c:d0:3d:db:d5:01:c4:
c5:3a:0a:74:b4:04:8b:98:4d:d9:a4:a9:6d:7a:73:
6a:73:d0:a4:f3:86:45:9c:1f:2e:1b:1c:66:64:f1:
91:21:f6:5b:77:96:be:89:17:27:93:09:e4:7d:23:
5b:e6:b8:d9:af:2e:27:d5:d8:3b:ff:8a:1b:f0:c1:
d3:b5:30:da:a2:3b:41:e2:3c:80:10:77:b1:f6:25:
10:d0:b3:2e:e2:ec:0b:77:42:64:fc:fa:80:ab:d6:
65:8c:b6:f0:2f:a1:8b:74:3c:f7:2a:3f:08:8e:8a:
01:a2:4b:6d:2e:fb:83:df:38:7b:dd:42:75:42:53:
5b:58:24:3a:0b:bb:a1:9b:9a:25:53:2c:62:96:30:
81:f2:0a:e3:d2:bc:1d:b3:54:ad:83:9f:26:d9:19:
67:1c:57:89:0a:e9:c1:9b:5a:c7:6d:7b:98:8f:21:
ae:c7:54:9d:eb:73:48:0c:01:46:c6:ac:cb:b2:c7:
27:0c:38:34:a9:89:16:b0:66:fa:53:6c:15:f9:9a:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:76:2C:86:B0:E8:53:B5:0E:DB:83:F7:21:E6:5A:38:FB:6F:49:0D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/o3YshrDoU7UO24P3IeZaOPtvSQ0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.246.0/24
Signature Algorithm: sha256WithRSAEncryption
71:eb:69:e4:10:db:fa:41:57:80:37:32:09:17:96:ca:f8:50:
ed:8c:b3:84:02:47:4b:06:2f:b2:df:75:db:58:84:35:eb:ba:
2e:ea:11:66:a0:36:1e:15:26:9f:8f:be:5d:09:c5:08:fe:f7:
77:fa:8c:0f:a9:50:aa:e2:81:1c:8d:95:8c:bc:b0:b6:54:3c:
78:c0:1c:21:d2:92:7c:ef:0e:c2:45:5d:a7:d6:e8:6d:0a:7d:
5c:50:1c:4d:df:c1:92:79:41:41:7d:93:93:ed:4d:f0:eb:2e:
78:fd:c4:fa:04:94:48:4d:d7:cf:46:b8:1c:5b:82:8a:61:ef:
26:43:8e:b9:b7:c3:f1:36:39:64:e7:cc:ca:52:2f:7a:90:d5:
ff:b3:62:1f:4e:52:92:cd:6e:ef:aa:b0:a1:39:73:c8:a9:15:
a1:65:af:00:f5:52:02:1e:c5:6b:e2:0a:98:6a:87:04:5b:a0:
a4:4c:df:3f:42:27:c8:2a:19:f6:d3:36:bf:9a:a6:cb:06:b3:
8a:a4:04:bc:48:ab:a1:ab:a5:f3:c2:e9:d6:15:2a:99:b0:ee:
cd:04:fe:5e:7b:5a:50:98:24:d4:49:81:cb:42:fb:6d:6f:d8:
b8:d5:ef:3a:ff:ee:b5:0e:78:7c:fb:fe:4d:03:82:9b:d0:e3:
a9:8a:2a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:34 2023 by rpki-client on console-ams.rpki-client.org