Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s6EVTNX9p4NTY9LVZCMmK_zkE10.roa
File: s6EVTNX9p4NTY9LVZCMmK_zkE10.roa (raw, json)
Hash identifier: 1b5MDMJLA3Ry3xkfWivsNLKpMKpINubpfMfH5fXSLb0=
Subject key identifier: B3:A1:15:4C:D5:FD:A7:83:53:63:D2:D5:64:23:26:2B:FC:E4:13:5D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 218C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s6EVTNX9p4NTY9LVZCMmK_zkE10.roa
Signing time: Fri 25 Nov 2022 04:40:02 +0000
ROA not before: Fri 25 Nov 2022 04:40:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.124.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8588 (0x218c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B3A1154CD5FDA7835363D2D56423262BFCE4135D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:35:84:fb:6b:80:31:72:b8:dc:5a:c7:c5:
34:dc:a5:0f:10:0f:35:a3:85:bb:f8:d5:a6:0d:7c:
af:22:e5:70:64:92:e0:ff:b8:83:37:2f:eb:f6:4b:
31:bc:d1:27:72:e9:1c:78:a1:f3:d7:a0:a0:0f:ac:
b9:9e:e0:74:b7:66:86:b4:1a:e4:27:e2:46:83:44:
51:10:5c:60:b6:29:83:3d:5d:58:fa:eb:12:8c:aa:
8c:ae:af:62:02:1b:48:e9:80:42:12:65:8c:21:14:
2a:a4:df:35:93:8c:e9:71:2a:e4:46:07:e9:87:61:
31:00:34:83:b4:f2:56:1a:fd:fb:d0:aa:d5:94:f9:
48:41:1c:28:17:92:01:22:8c:8b:05:69:6c:be:8c:
6c:a3:5e:67:5a:cb:d9:ce:80:fe:8d:e0:15:e8:19:
92:da:fb:db:c3:e1:81:d0:7c:63:ec:79:dd:01:1e:
5d:a2:56:b1:e0:41:7f:1b:95:3e:d9:00:2a:f0:70:
0b:fe:87:46:e4:3f:84:10:f3:f6:d2:f5:b0:f5:d1:
06:81:7d:b5:28:8f:83:a7:bf:59:97:f3:be:f3:f7:
6c:4b:9e:78:e3:d7:52:1c:0f:81:7b:d9:31:9a:8d:
d0:8c:7c:16:e1:8f:fb:98:58:89:c5:2d:32:6d:eb:
8d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A1:15:4C:D5:FD:A7:83:53:63:D2:D5:64:23:26:2B:FC:E4:13:5D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s6EVTNX9p4NTY9LVZCMmK_zkE10.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.124.0/22
Signature Algorithm: sha256WithRSAEncryption
90:dc:d0:8e:c4:e4:7e:00:c1:16:35:f1:a2:60:99:4e:7c:2f:
dd:28:c0:91:04:14:ae:9a:79:38:cf:0f:ab:15:eb:2b:52:64:
53:24:dc:74:65:e2:70:92:89:46:8d:63:f4:13:97:fd:e6:8c:
e8:b3:31:c5:b9:ae:98:43:eb:2d:b8:d8:3d:59:29:7a:52:52:
f1:4c:65:f7:8a:62:a8:6f:c6:ac:67:8a:b3:77:a2:3e:53:8b:
99:1c:2e:49:34:69:f0:d8:9a:34:f9:c3:12:6c:e7:5a:35:23:
d4:2f:f1:7c:24:52:0a:38:09:97:fe:06:02:3d:02:bd:ff:e5:
d6:33:0e:a8:47:9e:45:54:5a:bf:f2:62:d1:27:87:f1:bf:c7:
1f:ef:b4:69:6c:ac:1c:70:94:c9:91:50:a9:9a:ec:74:00:36:
07:70:e1:2b:66:2d:ad:7a:70:9f:8f:8a:b7:3a:67:1a:34:02:
92:60:76:6c:a0:85:0e:e5:3c:95:be:8c:63:ce:b3:90:c9:99:
5b:4c:f7:c0:39:c9:48:d4:d3:e4:fa:79:76:fb:5a:66:93:22:
07:cc:66:58:c7:a8:c1:f3:b5:e6:87:50:d8:b7:bc:51:9f:c8:
58:1e:dc:f2:45:ce:50:0c:4d:c2:a6:a0:3e:7a:fb:a1:b6:b1:
21:92:04:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:11 2023 by rpki-client on console-fra.rpki-client.org