Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ohjpJhV-L8E8gnY7j93BaSks_ns.roa
File: ohjpJhV-L8E8gnY7j93BaSks_ns.roa (raw, json)
Hash identifier: o3bUcFoJS8R6sUnwvcn7BaRBToz/0oaDPsc0mJS/2BI=
Subject key identifier: A2:18:E9:26:15:7E:2F:C1:3C:82:76:3B:8F:DD:C1:69:29:2C:FE:7B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ohjpJhV-L8E8gnY7j93BaSks_ns.roa
Signing time: Thu 15 Sep 2022 02:52:44 +0000
ROA not before: Thu 15 Sep 2022 02:52:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.160.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A218E926157E2FC13C82763B8FDDC169292CFE7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:85:02:5f:7a:d5:fa:37:f1:b6:c2:d3:32:2c:
cd:9c:73:68:b0:95:be:ab:bd:9b:23:20:8c:fb:09:
92:04:ff:60:ff:65:26:7f:b1:5a:d8:c7:9a:12:18:
67:90:5f:f8:68:6b:bf:65:1f:40:86:7c:43:60:5c:
c8:fa:3c:6a:74:8c:b2:5c:fd:aa:bf:1b:ea:a0:03:
cc:7a:c1:a6:31:ff:83:7a:5f:60:4b:0f:cc:e9:68:
69:07:b1:ae:b5:35:15:56:ac:9c:a9:d4:0b:8b:ca:
ec:f4:31:d3:75:e6:7c:4c:28:48:71:f3:5b:e0:14:
30:78:69:e3:f2:83:31:81:31:b4:04:ae:ae:a4:50:
5f:75:5a:53:62:36:34:b6:4a:ca:c5:11:5e:eb:8f:
2a:5e:80:18:e0:1c:85:5c:ca:44:5a:ed:c0:4e:2d:
24:04:49:7b:35:58:87:55:ea:15:e8:6a:15:dd:84:
b7:14:72:a9:35:ed:83:3f:95:ab:76:cb:a8:0c:07:
24:92:73:ba:c2:54:97:1d:59:fd:f0:4d:00:3c:48:
96:af:17:20:9e:53:85:93:f9:b7:b6:af:4d:e1:ee:
72:ea:d9:07:a5:4c:d9:92:c9:2b:e6:9e:8e:29:90:
77:d6:71:b7:31:d7:6e:35:5e:9a:a8:c6:c5:5b:63:
88:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:18:E9:26:15:7E:2F:C1:3C:82:76:3B:8F:DD:C1:69:29:2C:FE:7B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ohjpJhV-L8E8gnY7j93BaSks_ns.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.160.0/21
Signature Algorithm: sha256WithRSAEncryption
13:19:ff:67:96:25:46:f4:ab:18:0c:d4:a1:43:d7:f2:e2:57:
9e:40:74:18:bf:dd:f0:ef:63:67:ea:db:80:b6:43:b4:5a:0e:
0b:f1:1b:91:6b:6c:e6:ab:5a:7b:67:14:08:77:ee:68:bb:6e:
69:00:55:e3:71:e2:ac:0a:b4:9a:c4:0e:6c:9e:5e:fc:7b:0d:
c4:48:18:38:e7:2b:c4:c6:9f:79:3c:c8:8d:ef:5b:47:15:44:
00:c2:fd:d8:c8:46:b4:49:6b:90:de:9c:3f:89:e1:80:1e:43:
55:86:59:71:18:41:07:96:ec:0b:de:81:f2:d8:3a:a7:32:f4:
1a:8f:69:ef:19:c4:b3:d9:9f:e0:b8:28:ae:62:ff:70:f5:f5:
02:51:91:a3:03:4d:32:1b:1d:c4:45:14:87:66:b3:29:1e:c7:
90:89:0e:96:4b:8c:3c:01:5c:7a:f4:3b:1f:97:00:b0:36:94:
c8:c6:06:b7:79:51:15:5f:c1:37:b2:96:09:4d:44:b5:99:6e:
3b:f7:6a:ee:64:b5:9c:b6:bc:f9:9c:13:d1:e1:88:59:c4:6f:
b5:25:81:6d:19:52:98:28:11:18:2c:32:c0:8a:53:f7:db:5e:
cb:b5:84:08:96:ef:2f:31:39:de:fc:c6:e0:e4:8c:08:4e:42:
8d:69:6f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:28 2023 by rpki-client on console-ams.rpki-client.org