Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oG1QedgzfGzohHztxUSok4gXMfc.roa
File: oG1QedgzfGzohHztxUSok4gXMfc.roa (raw, json)
Hash identifier: 4LmG5Ofcm1HHnLwX0W29d9WaNLfCN/vwIC6Egl3mQ9o=
Subject key identifier: A0:6D:50:79:D8:33:7C:6C:E8:84:7C:ED:C5:44:A8:93:88:17:31:F7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2220
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oG1QedgzfGzohHztxUSok4gXMfc.roa
Signing time: Fri 25 Nov 2022 04:40:48 +0000
ROA not before: Fri 25 Nov 2022 04:40:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.212.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8736 (0x2220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A06D5079D8337C6CE8847CEDC544A893881731F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:91:07:fd:75:b2:a7:4b:07:04:2a:fd:7d:bf:
14:30:e9:2b:19:dd:40:17:bd:fa:cf:90:b9:cf:97:
63:12:b3:14:b3:7d:35:fc:ef:89:03:f9:12:59:da:
19:b0:bf:e3:4c:34:d3:d0:4d:56:c3:5a:e6:4c:c0:
ff:92:3b:8e:35:b9:09:b0:5e:8c:1f:f8:3f:c6:e6:
8c:75:bb:8d:d1:27:9b:a1:94:fc:2e:da:0d:4d:b1:
42:47:a7:7a:30:cd:61:40:f0:8a:04:64:87:50:9a:
01:4c:4a:88:c5:83:b3:34:2c:9f:3b:f4:41:ff:89:
dd:09:8d:ff:45:4c:86:00:21:1a:47:27:cc:39:f0:
81:59:9b:e8:6c:c7:0e:d5:31:29:5b:88:55:13:8d:
88:3d:75:0a:89:43:cb:45:3a:c2:14:f7:3f:cf:15:
32:55:7c:0d:7f:07:b6:4f:1a:30:93:fb:3b:ef:f1:
d9:da:d8:66:56:75:65:69:4d:d5:62:52:af:d6:c8:
a5:da:1a:ec:4f:d5:0a:9a:ae:6c:ac:5f:c0:68:55:
31:40:f5:0c:20:27:06:78:03:64:dd:2f:0e:8a:cc:
8c:27:c6:cc:7e:4c:79:ab:14:e4:c3:7e:9f:57:15:
06:79:ac:b2:d7:fa:55:a7:68:6d:2b:b5:68:05:e5:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6D:50:79:D8:33:7C:6C:E8:84:7C:ED:C5:44:A8:93:88:17:31:F7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oG1QedgzfGzohHztxUSok4gXMfc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.212.0/22
Signature Algorithm: sha256WithRSAEncryption
24:5a:29:c1:e3:a6:8a:00:8a:d6:b2:34:ce:c6:1e:ea:d7:37:
47:b9:48:fd:10:5f:98:a4:92:81:8e:64:8d:86:ad:fe:3f:19:
54:03:58:14:2d:12:3c:6e:b7:ae:54:33:db:e4:ea:56:0e:f4:
89:15:a5:0c:36:e9:3a:66:3d:3a:33:33:e0:c2:36:a8:e3:e0:
f5:d6:e6:ee:65:72:8f:15:67:80:a5:29:58:25:61:00:91:20:
af:c8:0e:2c:cc:dd:69:c3:35:84:23:37:b6:f8:64:83:ce:8d:
14:fb:de:ce:e9:5c:2b:23:6c:58:34:0a:61:52:d6:f8:59:cd:
77:3a:17:ed:65:c0:ba:91:cf:75:6b:53:01:62:ad:a0:c5:9d:
64:8e:bc:5c:79:32:10:b9:22:fc:37:ab:a6:80:53:09:4f:01:
c4:af:55:d4:5b:93:2d:7e:4a:c3:71:03:b2:ba:14:8a:30:d1:
74:f4:6b:53:41:fb:48:3a:82:60:d7:13:d2:d8:a2:03:59:68:
b0:fd:2a:4f:a1:e8:1c:56:13:af:93:01:54:9f:cd:71:1f:73:
f5:9f:1c:f1:33:3a:ac:ab:b6:1c:c7:85:38:fd:46:d1:0f:fe:
e9:c2:e1:45:0f:de:fb:b2:43:ae:35:45:1e:80:ca:1d:95:ce:
66:90:fd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:10 2023 by rpki-client on console-fra.rpki-client.org