Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pVkjaSuXremVPJaWZJHP3XGZhr8.roa
File: pVkjaSuXremVPJaWZJHP3XGZhr8.roa (raw, json)
Hash identifier: 0PsV2e/adkH7rLjGLWM7ElfjZcP2tiM73ZDKUeBILts=
Subject key identifier: A5:59:23:69:2B:97:AD:E9:95:3C:96:96:64:91:CF:DD:71:99:86:BF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21C0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pVkjaSuXremVPJaWZJHP3XGZhr8.roa
Signing time: Fri 25 Nov 2022 04:40:22 +0000
ROA not before: Fri 25 Nov 2022 04:40:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.120.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8640 (0x21c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A55923692B97ADE9953C96966491CFDD719986BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:b7:6d:3a:5e:8a:8a:7d:bf:22:96:ef:d0:
ca:81:b8:a7:1d:f7:38:e9:4e:93:52:66:4f:69:73:
19:32:72:7d:9c:b0:db:ca:73:89:b8:67:cc:f6:71:
7e:2b:01:71:cb:80:f7:f1:dd:09:d8:e2:7b:4d:7d:
24:28:f3:a5:95:f8:a9:25:3d:2c:12:f8:72:f0:e5:
de:c9:b6:37:65:b7:3e:98:e8:9e:2a:4d:0e:40:fb:
44:48:7f:27:53:6f:91:a8:df:ee:e6:59:9b:87:c3:
2d:2f:ad:19:ab:31:45:31:32:30:86:8e:ac:f9:6d:
47:6c:a0:e3:dc:82:34:33:0c:c5:38:3b:ec:33:a3:
f0:b5:fb:0d:d7:20:24:b8:a1:dc:e9:b0:7a:83:cc:
51:b8:4e:d5:22:cd:0a:66:d4:e3:53:c9:54:c8:9b:
4d:61:7f:93:5c:a4:0f:9c:ab:81:89:64:21:e1:b8:
97:20:75:64:4b:a1:08:13:38:f1:7c:95:4c:89:97:
b5:cf:a0:bb:15:cc:fe:f7:67:23:d3:07:76:76:72:
93:22:04:ac:b7:e2:05:c8:9f:e9:5e:64:30:ca:df:
8a:f6:0e:6d:77:5e:20:5b:a5:a1:8f:8e:d3:ec:e6:
ab:95:18:cc:83:1c:93:ef:d3:3a:32:d0:78:c7:dc:
b4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:59:23:69:2B:97:AD:E9:95:3C:96:96:64:91:CF:DD:71:99:86:BF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pVkjaSuXremVPJaWZJHP3XGZhr8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.120.0/23
Signature Algorithm: sha256WithRSAEncryption
04:ad:87:9e:42:4b:ca:dc:e4:ff:7d:1b:37:57:6b:d0:3c:6f:
75:89:7e:04:77:98:76:b8:b7:ca:92:a5:4b:db:82:84:dc:62:
a8:77:80:29:a0:00:35:e0:ec:5e:73:c4:3e:70:3b:fb:91:21:
b9:fe:e0:10:0c:45:c4:79:11:7d:9d:89:29:e6:1d:2b:38:b7:
05:89:d5:ab:10:8e:8f:5a:4f:17:ba:f6:5b:72:89:da:ab:29:
cf:17:e0:3c:95:26:08:aa:db:70:ad:0b:3d:74:ef:19:84:a1:
dc:1a:93:d3:1b:70:9c:f7:1e:7d:45:aa:1a:df:80:cc:f9:fd:
f5:79:01:5e:b5:ca:e2:b1:32:1c:bb:c4:f2:fd:4f:6c:8e:b2:
9d:57:d9:c4:73:dc:78:ef:64:27:fe:ab:24:a3:42:1d:8e:6a:
c1:fb:72:a2:4b:25:e1:21:ff:57:79:4b:b1:6f:2d:07:f1:1e:
b1:b2:d8:88:82:ec:11:52:09:08:bf:cb:d3:a0:28:b0:7a:71:
7d:23:1f:bd:9c:8b:b4:61:3d:81:74:ac:7e:69:c9:bd:7e:01:
fc:88:e9:1b:fa:19:ef:fe:4e:66:1b:76:57:6e:66:09:fc:1c:
7f:35:d9:b4:49:71:56:20:4e:4a:e6:30:79:ad:65:53:9a:1d:
0a:70:ae:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:34 2023 by rpki-client on console-ams.rpki-client.org