Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pfXYBPjE_tiACWtwQb4KphCOPxc.roa
File: pfXYBPjE_tiACWtwQb4KphCOPxc.roa (raw, json)
Hash identifier: iI/GNOxGyKTM1NFrA/XP47Pz6GbIqT2c3rCZL+ldMHY=
Subject key identifier: A5:F5:D8:04:F8:C4:FE:D8:80:09:6B:70:41:BE:0A:A6:10:8E:3F:17
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 203C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pfXYBPjE_tiACWtwQb4KphCOPxc.roa
Signing time: Fri 25 Nov 2022 04:38:29 +0000
ROA not before: Fri 25 Nov 2022 04:38:29 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.88.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8252 (0x203c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:29 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A5F5D804F8C4FED880096B7041BE0AA6108E3F17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:e0:cb:11:3e:be:1b:5e:cf:a0:7b:e3:5e:
21:ae:05:13:b3:e0:62:e2:00:32:77:d1:46:b4:95:
8b:b8:0a:d5:bc:2a:fb:4b:38:94:b5:dd:d5:b2:7b:
65:d0:af:33:8f:25:ac:1f:e7:9a:cb:c3:bb:20:48:
19:91:67:39:f6:4b:0d:35:ac:b4:6a:5d:89:a5:d1:
0f:6f:a9:83:1c:d2:4a:d9:f8:1a:9d:5b:70:8c:be:
8d:15:2b:bd:c0:61:5d:4d:cb:4a:ff:5c:f7:e2:da:
c1:8b:9f:29:a9:b0:27:c4:3a:59:f6:a6:dd:8d:1c:
4a:22:ed:13:94:5b:44:2f:ae:8a:2b:f7:09:5f:0f:
43:f5:0e:0e:c3:71:2a:c9:cd:1e:f6:e4:6d:fd:be:
69:37:ee:5f:f5:b4:c1:c3:3d:4e:b8:01:18:cf:59:
29:b4:9a:f9:d0:c2:0a:d8:a5:64:bf:12:e4:83:89:
4d:9e:60:15:ab:fc:14:33:0b:6a:b0:64:0a:0a:aa:
1f:1b:61:af:c2:57:c0:56:85:6c:54:da:ab:f3:9f:
b4:19:72:c2:5f:25:67:9f:47:c0:52:e4:22:fc:0c:
91:2c:38:8f:9c:a4:38:f3:7d:0d:e9:dd:79:d9:88:
b1:a7:3e:fb:3b:76:ea:b1:c5:a9:15:a5:68:56:b9:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F5:D8:04:F8:C4:FE:D8:80:09:6B:70:41:BE:0A:A6:10:8E:3F:17
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pfXYBPjE_tiACWtwQb4KphCOPxc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.88.0/21
Signature Algorithm: sha256WithRSAEncryption
56:b6:0f:bc:20:05:ed:fc:1c:6a:8c:9e:c1:2c:fc:69:a4:b0:
0b:19:71:74:53:87:e6:9f:17:b7:e5:88:36:99:65:d2:0a:f3:
5e:c5:7e:54:8d:dc:2f:15:ff:f9:79:71:15:9f:0c:2c:22:08:
d6:9e:f9:ea:00:cc:fa:16:c2:7b:c7:6f:3b:f3:e0:34:3d:a9:
b6:29:e1:5d:e9:c7:ee:75:71:f4:65:b8:bf:23:57:98:d0:59:
72:17:4a:79:a7:bb:5e:94:71:47:0f:24:3e:32:3a:18:ce:30:
eb:50:9d:35:df:51:77:8a:72:31:80:92:56:55:38:a7:37:19:
e4:47:2f:fd:27:12:00:82:9c:68:08:bb:ac:dd:90:e5:40:e2:
f2:1c:71:06:86:93:b6:f2:73:31:a6:85:0f:67:3d:a6:98:8e:
9e:13:c8:8d:69:ae:fe:cf:4c:9d:af:d3:7d:e8:84:b1:db:9b:
38:d0:4e:fa:9d:ec:55:34:41:6b:31:06:6b:18:d3:df:d8:e8:
ff:7c:a9:3a:65:9f:35:78:69:ad:8c:3e:3f:b2:21:ae:10:2d:
ec:b1:c3:c1:9a:f0:7f:ec:92:9e:ce:53:ee:8e:8d:42:2e:f0:
7e:73:07:d6:bd:2a:3a:23:8b:a2:7e:61:4d:5a:47:eb:39:c1:
e1:a8:a4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:10 2023 by rpki-client on console-fra.rpki-client.org