Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s54ZUo3yfY3mEkMHQORwuEfD1qY.roa
File: s54ZUo3yfY3mEkMHQORwuEfD1qY.roa (raw, json)
Hash identifier: qk78a4bWXlfknQbR8pgUOd4/M9QLqOGhi3+hSh1xUa8=
Subject key identifier: B3:9E:19:52:8D:F2:7D:8D:E6:12:43:07:40:E4:70:B8:47:C3:D6:A6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22DE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s54ZUo3yfY3mEkMHQORwuEfD1qY.roa
Signing time: Fri 25 Nov 2022 04:41:45 +0000
ROA not before: Fri 25 Nov 2022 04:41:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8926 (0x22de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B39E19528DF27D8DE612430740E470B847C3D6A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:19:e2:fe:4e:7c:21:26:b0:42:f6:93:71:ff:
e6:1a:a1:9e:ce:b0:d8:34:80:1b:b9:f8:65:57:e1:
91:b6:a8:2b:06:d8:e4:8d:07:47:0f:36:c1:d3:60:
b5:58:0f:be:48:99:f0:6b:6c:01:61:8d:1b:1a:46:
44:c4:9e:29:52:c1:61:40:e3:34:67:72:79:0d:aa:
1d:a5:d4:ed:cc:41:fc:46:0a:57:1f:f5:39:95:ab:
1a:25:4f:16:da:71:e2:01:7f:c7:c4:9f:e7:72:7d:
fd:fb:49:a0:bd:cd:e5:30:f0:e2:fb:d6:78:e5:a6:
4e:96:ac:05:3b:27:9b:85:43:e9:17:13:32:ef:4e:
a3:5c:0a:91:a8:cb:30:f6:d6:fd:bc:56:db:51:48:
20:3e:c4:b9:2c:2c:89:be:51:a0:a9:f6:dd:a0:05:
a3:31:61:e1:23:0e:91:be:69:bf:80:e2:9c:98:7e:
c7:3c:84:01:ae:46:47:fa:6f:eb:51:65:6e:a6:a9:
e2:8e:8f:a3:dd:19:d7:0c:26:44:4e:cf:92:59:2f:
c7:20:ac:32:f0:15:c1:0c:7f:52:ba:ce:d4:86:86:
cc:0e:84:c0:63:1d:f2:f7:24:ae:0d:f0:79:f8:23:
48:9e:78:4a:d2:2d:f2:43:9b:19:94:44:a0:97:4f:
12:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:9E:19:52:8D:F2:7D:8D:E6:12:43:07:40:E4:70:B8:47:C3:D6:A6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s54ZUo3yfY3mEkMHQORwuEfD1qY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.247.0/24
Signature Algorithm: sha256WithRSAEncryption
21:06:0b:00:7b:04:aa:02:94:ec:66:8c:dc:24:8a:ca:bf:8d:
c5:3b:fa:a0:2b:9d:ad:62:b6:da:b8:a2:7c:d1:b5:09:68:08:
c7:ca:4b:82:f3:ff:77:60:14:e7:0a:eb:32:62:8c:9c:3a:1d:
9b:c4:35:48:62:c8:df:d0:f8:f2:55:47:24:e9:23:eb:e9:c5:
05:b4:a4:49:a3:84:34:10:f9:bd:bc:4a:32:58:b8:43:27:96:
92:d4:d3:13:c7:46:4f:82:3a:13:ce:d1:97:60:f6:48:55:69:
36:bb:c9:9e:84:48:c6:02:55:72:f2:de:f5:12:5d:21:26:6f:
df:18:e1:52:de:a9:86:e2:e8:4b:16:d4:3b:1f:02:62:a2:1f:
3f:2f:ce:06:b3:4f:f8:a9:4d:7b:3a:24:05:aa:7c:30:68:ff:
86:4a:9f:97:b0:0e:a1:05:71:d2:29:ff:10:cc:43:98:d0:6a:
04:ba:1a:99:0b:68:a6:a9:26:22:37:f6:6c:0e:ac:8d:f9:34:
38:0c:fc:2f:ef:36:f5:c7:53:a6:fe:e7:42:4f:87:b2:76:5d:
1a:17:9d:9f:34:d4:78:5d:88:6e:3a:c0:d2:9a:49:19:0c:75:
71:08:d1:e9:f6:63:1f:d4:c1:9d:7c:16:54:41:c3:ab:32:13:
03:9e:81:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:35 2023 by rpki-client on console-ams.rpki-client.org