Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qSnFt3PpyftU-82JY01ebm4185I.roa
File: qSnFt3PpyftU-82JY01ebm4185I.roa (raw, json)
Hash identifier: BXC1wBHej1STLibqDBMv/RPGrQE1PVi2SRF+eBcTnpI=
Subject key identifier: A9:29:C5:B7:73:E9:C9:FB:54:FB:CD:89:63:4D:5E:6E:6E:35:F3:92
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2296
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qSnFt3PpyftU-82JY01ebm4185I.roa
Signing time: Fri 25 Nov 2022 04:41:22 +0000
ROA not before: Fri 25 Nov 2022 04:41:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.8.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8854 (0x2296)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A929C5B773E9C9FB54FBCD89634D5E6E6E35F392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cc:92:82:cf:95:e9:ed:a8:4f:90:db:7c:4d:
b8:46:ce:c2:3e:da:e5:99:dd:4d:b6:71:fe:25:a7:
8d:7a:35:7c:07:82:7f:b7:e7:93:c2:a7:73:55:9f:
ad:7e:93:bb:84:ce:95:1b:f3:2f:c5:04:cd:ed:5a:
c1:ba:a2:b3:6e:1a:20:12:a5:48:06:94:30:ef:6c:
51:28:a1:8b:f2:77:bb:42:a8:4c:a5:28:44:d8:27:
be:4b:c6:4a:1b:9a:77:c8:e8:28:6e:22:73:b2:54:
15:db:11:da:e5:9e:55:d0:0b:20:c5:80:79:25:a3:
d9:41:53:28:f8:55:20:e2:0e:c3:17:c7:fb:c5:4a:
fb:9d:e5:ca:15:0c:d1:72:e4:f7:f7:d5:22:63:1b:
8d:6c:37:24:c8:61:61:78:4d:89:70:55:10:44:82:
33:0a:b3:dd:24:a5:1a:cf:07:33:7d:52:d4:76:cf:
6a:53:25:b6:ee:64:5a:6a:c8:28:c6:00:ec:46:2b:
4a:37:d0:5e:6a:67:d7:8e:82:40:9c:64:26:c3:70:
01:bb:c3:20:f5:2d:d5:38:a2:bd:23:89:af:b3:1d:
99:3e:66:22:9d:b4:8c:9f:2c:35:53:46:4b:52:a4:
e2:62:f0:ea:53:90:8f:23:db:3e:d0:3c:f2:ed:ab:
fe:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:29:C5:B7:73:E9:C9:FB:54:FB:CD:89:63:4D:5E:6E:6E:35:F3:92
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qSnFt3PpyftU-82JY01ebm4185I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.8.0/21
Signature Algorithm: sha256WithRSAEncryption
17:55:bd:77:f8:6c:f5:63:9e:8f:ef:bb:0a:ae:c8:2b:82:f3:
2e:a6:d1:7f:4c:28:6c:23:93:b3:29:2a:af:f8:a6:b9:84:3a:
47:4d:9f:44:04:32:3d:24:7c:76:c7:45:a9:5c:b6:90:ba:68:
48:53:ab:e6:d0:fa:b4:34:ac:0d:cc:31:5d:ed:c1:72:42:35:
ab:1a:22:ff:43:9f:84:bc:60:ab:c1:fe:a5:5f:92:1d:56:4b:
52:00:64:5d:e7:e7:2d:8a:7a:b0:df:93:77:ca:e2:00:2e:4c:
8a:f6:ff:3b:61:e8:d6:36:59:05:09:40:5f:5d:21:fb:16:6a:
52:95:e7:fe:ec:fe:1a:e5:14:53:ee:ca:a3:4d:c4:b8:d8:59:
2e:0b:1a:44:51:fb:60:44:f4:b0:9b:70:cc:87:4a:68:1a:3f:
cd:f2:f8:7b:52:1f:9d:40:7e:2c:f6:81:bb:be:02:1b:05:a1:
b3:22:d9:92:42:0f:d8:95:e1:9f:b3:c6:c3:c1:2a:9a:c5:0e:
7d:a1:9a:ee:aa:0e:fa:2e:5e:68:d8:4a:b7:d7:a2:0e:0a:8c:
4b:27:d5:ad:88:f2:95:df:fc:48:87:37:c1:90:16:b1:3e:ba:
05:45:b9:3d:fd:29:a7:bf:f2:b8:ca:b6:be:65:ed:0c:77:07:
9b:b2:3a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:34 2023 by rpki-client on console-ams.rpki-client.org