Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oP3vV_tsIfmoveTv5Jx6B-Rf8xY.roa
File: oP3vV_tsIfmoveTv5Jx6B-Rf8xY.roa (raw, json)
Hash identifier: zvAnAzz9s4qoP82J09I5KPyfNhG5MiMw2/xNY26IRpw=
Subject key identifier: A0:FD:EF:57:FB:6C:21:F9:A8:BD:E4:EF:E4:9C:7A:07:E4:5F:F3:16
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oP3vV_tsIfmoveTv5Jx6B-Rf8xY.roa
Signing time: Thu 15 Sep 2022 02:45:14 +0000
ROA not before: Thu 15 Sep 2022 02:45:14 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 211.76.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:14 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A0FDEF57FB6C21F9A8BDE4EFE49C7A07E45FF316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f2:6f:0f:db:ba:d7:b4:a8:20:82:da:2e:b4:
f3:2d:64:63:de:c7:c6:a8:f3:61:07:80:68:ff:72:
b1:17:4d:10:86:03:e5:ec:ca:a7:6a:db:8c:d5:a1:
4a:6c:35:d8:d5:a6:a0:c0:de:ad:b8:af:00:14:a8:
36:a7:22:c2:a4:8d:f8:0e:c0:37:23:46:b0:ba:62:
68:16:03:6d:9b:a3:e9:b2:de:36:2c:4a:d2:04:4a:
04:2c:da:e7:d0:e0:79:d9:9a:c4:5a:cf:76:8f:11:
ef:d1:4e:20:7c:8f:37:c6:25:cf:68:a3:4a:08:ec:
5b:fb:83:43:2e:18:29:cf:4f:cb:5c:47:16:b8:dd:
ce:e2:22:0a:51:fc:26:c1:f8:c8:71:8a:88:92:c8:
e0:7a:31:a4:18:20:30:81:e6:6b:9a:93:43:a1:c8:
ce:28:bb:47:c1:db:22:f9:c4:f8:1c:a9:eb:27:26:
48:fc:80:d1:2b:bb:78:d1:e1:a4:10:9e:fb:11:0e:
14:69:cf:fa:c3:74:19:24:c5:c0:25:a1:8c:bd:4b:
c7:98:64:7b:e9:6e:ad:e8:cc:4c:6a:85:87:ce:5d:
58:84:87:54:7c:f7:3f:af:68:af:81:34:d1:60:f4:
c5:84:2d:35:0f:a8:64:28:57:ab:95:c3:8e:83:ce:
53:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FD:EF:57:FB:6C:21:F9:A8:BD:E4:EF:E4:9C:7A:07:E4:5F:F3:16
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oP3vV_tsIfmoveTv5Jx6B-Rf8xY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:4b:fd:a3:99:92:3d:a8:24:f2:7b:b0:47:d8:c6:40:6a:1d:
15:81:ee:70:14:69:26:bf:d4:47:72:6c:b7:6f:67:69:82:2d:
bd:28:9f:05:40:f9:5f:dd:a3:cd:ee:6e:3e:2d:27:93:b9:91:
b8:d8:6f:53:c5:24:8f:2f:64:c5:4e:75:4e:46:e3:ff:76:8a:
74:77:04:dc:33:c9:17:92:2b:48:7b:6c:0c:59:00:41:8f:db:
b1:c7:40:49:e0:53:f6:e5:c4:57:67:b2:bd:8f:58:e6:69:02:
6b:33:20:86:39:05:10:1c:11:c9:65:89:e5:1c:cf:ff:2e:a1:
11:f7:85:48:5c:67:07:fe:4a:66:98:58:93:23:19:7b:11:b5:
4a:ac:f4:8b:9e:b5:c3:5f:52:9d:5c:e6:c9:de:47:d9:ea:8a:
14:be:f5:48:99:60:5d:fa:99:5d:6e:54:2d:52:7c:1a:f7:fe:
1e:db:40:11:7c:af:68:d1:fa:13:88:51:cc:d9:3c:60:77:ee:
ac:89:36:99:eb:02:5c:00:8d:0a:a4:fa:44:4c:6b:4d:74:26:
ae:48:76:2c:c4:49:48:de:69:3e:84:aa:6b:68:0a:b1:36:e6:
87:9f:79:aa:85:a2:8f:bf:f9:be:b4:09:03:bf:c5:b6:2f:30:
ef:2a:b1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:40 2023 by rpki-client on console-fra.rpki-client.org