Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r7VdurpD9o6DhR1bFDFONT4arjw.roa
File: r7VdurpD9o6DhR1bFDFONT4arjw.roa (raw, json)
Hash identifier: EuEPbI9WUVwOBrp9LIO8v5dppj1CRX3leIEEVaRYWYM=
Subject key identifier: AF:B5:5D:BA:BA:43:F6:8E:83:85:1D:5B:14:31:4E:35:3E:1A:AE:3C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 207C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r7VdurpD9o6DhR1bFDFONT4arjw.roa
Signing time: Fri 25 Nov 2022 04:38:47 +0000
ROA not before: Fri 25 Nov 2022 04:38:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.128.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8316 (0x207c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AFB55DBABA43F68E83851D5B14314E353E1AAE3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cb:f9:a0:ee:c2:4c:40:38:43:11:54:a7:7c:
28:f9:bd:3c:a6:d0:88:c4:b7:00:87:c5:fc:6b:18:
91:27:27:d0:4d:92:dd:b4:3d:c4:84:d5:c1:d9:26:
23:9f:17:15:e1:aa:0f:b9:61:c9:60:f0:46:7a:62:
24:36:f2:d8:c1:db:bd:fa:44:03:55:ba:78:76:d3:
e9:d4:55:d5:fd:ab:86:03:fb:46:14:f6:cc:2e:eb:
86:18:7b:c8:61:83:f6:af:9f:23:d2:0d:4d:53:fa:
e2:ed:bf:6a:15:64:4f:fa:a5:88:44:52:0a:de:fa:
35:ea:f1:a5:e3:47:72:ee:b0:ee:c5:07:39:62:7c:
5d:9f:ce:cb:f3:aa:3c:d7:94:89:84:5d:15:08:4a:
33:08:da:7b:c7:9d:45:80:a3:20:90:01:1a:51:75:
d5:20:f6:3a:11:cd:50:d4:dc:0c:20:3b:46:d9:e7:
fe:61:fd:aa:b0:3a:4c:dc:64:71:69:23:32:1d:2a:
67:8d:78:cb:4b:66:67:7b:f1:4e:08:a6:8c:60:d5:
2b:04:d3:0c:0c:df:39:9b:ae:4c:65:71:82:f8:81:
66:2d:a9:89:93:22:9c:e3:b0:f9:a5:59:48:18:85:
02:81:0f:35:26:bb:c1:ee:85:5b:89:d1:70:c0:fb:
48:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B5:5D:BA:BA:43:F6:8E:83:85:1D:5B:14:31:4E:35:3E:1A:AE:3C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r7VdurpD9o6DhR1bFDFONT4arjw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.128.0/21
Signature Algorithm: sha256WithRSAEncryption
46:1b:11:93:5d:23:b7:c8:1d:aa:82:56:b4:5e:b8:eb:c7:a9:
29:93:5b:83:3f:0e:f7:eb:4b:c0:65:d2:1b:0e:28:bf:f8:b4:
4d:9f:30:e4:6d:c2:8b:fd:65:24:bb:44:d9:2b:92:2a:1b:a5:
8c:1a:79:20:89:5b:5d:d1:11:ab:46:6a:c8:1f:1e:91:ae:be:
e1:f3:a1:8f:32:a5:80:68:88:a7:14:bf:87:6b:3f:21:3e:f7:
85:a7:3c:06:c2:96:a0:74:30:4b:d0:b2:4f:14:a8:72:75:b9:
6a:31:11:28:53:16:13:e1:8c:56:31:db:b0:5a:23:c6:6b:b7:
34:b6:31:6c:e5:bc:fb:e9:d3:5d:0e:bb:f0:bb:02:0f:23:36:
12:0a:1a:59:78:99:bd:94:c8:be:08:6f:c4:3c:1a:88:9a:79:
ee:4d:44:fc:e4:1b:17:2f:63:12:e0:04:1c:52:14:02:7f:f2:
8c:e1:35:fc:a7:d1:59:68:12:6b:25:dd:eb:ff:5e:59:e7:98:
7d:61:8a:d4:9e:ce:5d:bb:49:a5:80:a7:34:c4:49:54:1b:50:
be:7f:84:69:83:05:f3:d7:05:5e:28:0d:51:9f:ad:b8:65:c0:
3f:9b:3a:10:7a:1b:1b:40:b8:50:39:79:7f:a8:d2:f1:ec:02:
16:d0:9f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:11 2023 by rpki-client on console-fra.rpki-client.org