Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qxBBt6aAsGEdruEM4PEKpACmZic.roa
File: qxBBt6aAsGEdruEM4PEKpACmZic.roa (raw, json)
Hash identifier: owsdHlkbrnEaCnbDCsZbDoeUV7ob6KH8L4YYwVN1tDk=
Subject key identifier: AB:10:41:B7:A6:80:B0:61:1D:AE:E1:0C:E0:F1:0A:A4:00:A6:66:27
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FAE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qxBBt6aAsGEdruEM4PEKpACmZic.roa
Signing time: Wed 21 Sep 2022 09:43:16 +0000
ROA not before: Wed 21 Sep 2022 09:43:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.144.0/21 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8110 (0x1fae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 21 09:43:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AB1041B7A680B0611DAEE10CE0F10AA400A66627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:43:f5:fb:02:37:42:d0:e7:7c:9f:e9:59:
2e:7f:54:1e:b6:82:1f:02:b6:51:8e:0a:58:9d:91:
c2:07:fd:14:80:1c:92:83:7b:e9:2f:b2:8b:47:d8:
c0:31:1a:bb:e0:f9:31:c5:cf:55:81:09:ca:d0:b3:
ba:7a:bb:b8:e0:52:99:3e:7c:d4:09:4d:e1:a8:54:
8d:e3:e3:ff:dc:2d:73:01:87:c1:d7:28:ef:27:66:
2f:df:91:eb:56:a2:46:9a:c5:21:e3:68:e0:ad:18:
22:67:b7:e0:f3:0a:26:02:43:0c:3c:48:64:32:eb:
84:1a:12:23:7c:0d:24:15:ad:9e:0b:f9:c8:ae:d9:
19:43:63:60:d0:09:26:0e:28:8f:e7:47:ce:c3:5f:
d7:28:a4:c4:91:fb:b9:15:7a:c4:b0:35:fe:b1:66:
ff:38:66:19:0e:e3:29:6a:86:fb:25:16:ae:01:97:
77:12:45:5c:a8:9e:71:43:14:ad:26:07:04:b9:0b:
06:08:70:71:06:01:4a:87:77:71:c9:97:2c:de:91:
77:76:45:24:0f:d2:d6:8b:fd:28:40:e1:be:0f:e1:
21:1c:a9:64:1e:a9:5f:79:87:fa:9a:7e:3b:e1:5a:
29:1a:05:4a:5a:e8:a7:2f:ea:ca:5e:e5:31:8c:cb:
96:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:10:41:B7:A6:80:B0:61:1D:AE:E1:0C:E0:F1:0A:A4:00:A6:66:27
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qxBBt6aAsGEdruEM4PEKpACmZic.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.144.0/21
Signature Algorithm: sha256WithRSAEncryption
22:1c:42:d8:90:69:d5:a9:ed:22:26:ce:af:f9:28:cc:a5:1f:
64:bc:22:ee:02:48:16:70:15:8b:97:b9:19:8b:24:32:b6:4b:
5d:e4:73:fa:45:a1:57:a5:89:77:da:08:00:d4:f0:9e:ce:a2:
7a:e3:94:f4:bb:5a:3b:47:b2:23:56:eb:50:a2:54:f1:37:ba:
18:b0:ec:0e:06:49:dc:3d:41:b3:56:02:b5:a3:71:82:79:be:
e7:9b:8b:a6:fc:3a:dc:f4:f6:8d:b4:82:8d:34:2f:9f:3f:45:
23:95:4e:3d:48:8d:c0:94:1e:64:a0:47:c7:86:a9:df:7a:d3:
a2:5a:39:6d:11:1e:e6:bf:f5:87:c3:9c:55:9f:30:ea:18:32:
13:c4:0d:9a:6d:4b:16:b0:a3:85:40:2a:5c:30:47:02:03:65:
8f:12:a6:ca:ec:92:91:88:7d:96:90:8d:26:44:c8:9c:59:2f:
13:09:06:08:d6:dc:68:4d:bc:8c:73:b4:28:6f:37:41:f1:ef:
24:63:62:51:d3:be:b1:53:bb:39:95:f6:c6:28:b3:d0:fd:21:
8c:63:8d:28:2f:be:93:d8:5a:5a:6c:8d:4f:c6:65:d2:3c:06:
76:35:af:22:10:cb:e8:73:9e:0e:7f:c3:7a:05:7d:20:7f:06:
4a:50:c2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:40 2023 by rpki-client on console-fra.rpki-client.org