Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qnt1sjGGR61CG62wxjplgsJ8xLs.roa
File: qnt1sjGGR61CG62wxjplgsJ8xLs.roa (raw, json)
Hash identifier: DbXgp317QC1PXmT0PqUj1O8CvETWTFX4nJV8BFMIBII=
Subject key identifier: AA:7B:75:B2:31:86:47:AD:42:1B:AD:B0:C6:3A:65:82:C2:7C:C4:BB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2029
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qnt1sjGGR61CG62wxjplgsJ8xLs.roa
Signing time: Fri 25 Nov 2022 04:38:24 +0000
ROA not before: Fri 25 Nov 2022 04:38:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.218.64/26 maxlen: 26
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8233 (0x2029)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AA7B75B2318647AD421BADB0C63A6582C27CC4BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d2:d6:f7:6d:32:ba:7f:4c:28:95:83:b9:cb:
47:9f:73:a0:f1:c0:cc:58:dd:00:6d:88:3d:0d:85:
d1:2b:b7:16:1f:81:0d:8e:4e:e1:01:92:36:08:51:
15:04:15:83:c4:d3:d4:ef:15:31:1a:8a:2e:f3:16:
12:c9:d1:6d:1c:8c:4e:74:fe:2c:09:39:09:60:a6:
56:ff:18:57:1e:99:aa:50:89:60:50:82:f8:77:57:
66:c9:53:7a:8c:b9:ec:4a:ee:b2:0c:42:05:5c:72:
b2:c8:ac:7e:23:a1:49:ea:2c:53:3d:9e:1f:d8:5a:
eb:8b:7d:6f:a1:e2:a6:fb:09:8d:78:55:3f:02:0e:
a7:99:16:50:5b:7e:62:61:8f:5b:f5:5d:74:69:08:
36:9f:93:50:96:ea:31:a1:8a:5e:43:c6:66:4f:b1:
0d:38:07:f4:3e:65:b4:7a:94:8e:96:27:1c:11:0e:
ca:61:41:dd:6e:f5:fd:d2:9b:16:25:2a:fd:c0:c3:
29:6d:5c:6a:dc:2e:70:33:ee:a3:11:b3:40:e4:1d:
56:03:2b:4b:32:2a:e2:52:ec:a0:cb:52:87:c3:54:
84:74:c5:5f:11:fa:6d:42:9b:b5:53:48:45:cf:9d:
af:fa:39:88:13:c7:6e:c3:99:87:6a:ba:9c:bf:62:
ae:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7B:75:B2:31:86:47:AD:42:1B:AD:B0:C6:3A:65:82:C2:7C:C4:BB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qnt1sjGGR61CG62wxjplgsJ8xLs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.218.64/26
Signature Algorithm: sha256WithRSAEncryption
53:90:c5:62:07:6a:fc:52:75:c6:28:d3:dd:f7:c0:d2:95:6f:
c9:bd:65:8f:f5:ea:05:f3:43:f3:4c:de:ce:18:84:7b:72:72:
ac:55:5c:0d:f5:81:51:8f:4a:44:60:44:90:9e:ba:07:d6:3d:
09:8a:e0:da:e9:b5:a6:ba:ec:53:e2:88:14:32:39:d1:58:7f:
df:26:f6:11:b6:38:42:ac:a2:35:09:11:40:1e:86:0e:2e:e4:
8f:aa:1b:cf:95:4d:43:e9:3a:7e:11:46:d8:1e:b9:84:de:a7:
36:e0:95:9b:e9:21:66:8c:e5:d5:a2:59:2f:b8:48:ba:30:04:
8c:83:5a:a0:a2:6b:f5:21:c8:ce:d2:b6:02:30:b4:88:1c:ca:
d3:38:8e:ae:ca:58:2b:1e:89:96:3d:32:60:f6:f7:18:6d:26:
b1:d4:1d:a7:28:fe:25:57:1a:7b:09:df:58:66:d0:09:26:e1:
d8:ce:b4:fc:df:78:72:e6:71:c1:1a:4c:67:af:bb:f5:02:a7:
26:15:b7:87:53:08:5a:1b:c6:f2:0e:f3:e8:72:0a:cf:fc:12:
f4:e0:05:c6:60:93:70:3f:00:bf:38:9a:c9:31:19:2b:10:40:
5d:93:e6:42:ca:b0:49:a8:bb:f4:cc:8e:f1:ea:5f:d4:db:79:
fe:ac:93:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:11 2023 by rpki-client on console-fra.rpki-client.org