Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sCpQpAVS1KAAj1F-hWxRo_csPZ0.roa
File: sCpQpAVS1KAAj1F-hWxRo_csPZ0.roa (raw, json)
Hash identifier: so4IlRPxhCG+hBdU4T5hw2y8J9PAplEqtqZI0R5kCqg=
Subject key identifier: B0:2A:50:A4:05:52:D4:A0:00:8F:51:7E:85:6C:51:A3:F7:2C:3D:9D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2199
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sCpQpAVS1KAAj1F-hWxRo_csPZ0.roa
Signing time: Fri 25 Nov 2022 04:40:06 +0000
ROA not before: Fri 25 Nov 2022 04:40:06 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.124.0/25 maxlen: 25
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8601 (0x2199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:06 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B02A50A40552D4A0008F517E856C51A3F72C3D9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:ee:8d:73:42:f1:1d:e5:60:6c:50:b8:ce:
7f:f1:ff:7b:c0:41:6e:07:11:87:36:09:54:a7:07:
3c:e3:87:37:64:4f:86:30:56:c7:e1:01:14:03:85:
15:1f:b8:0b:a1:07:ca:a8:93:85:29:f2:69:3b:66:
a1:a7:3d:38:d2:4a:c6:29:45:d4:c3:3a:60:d1:40:
8f:6b:7b:47:c2:37:c1:8e:05:d3:0a:ba:e1:d6:32:
b4:a2:0c:86:17:d5:c2:a9:61:21:ae:e2:3f:77:30:
02:4a:af:1c:40:dd:46:53:18:c7:e6:b3:e4:af:ba:
e4:b9:62:3c:f5:29:71:a3:2f:ad:75:f3:bb:eb:a4:
6d:cb:0b:5e:3e:ee:ce:14:2e:0b:bf:25:79:1c:e3:
80:2c:c1:9a:63:b2:40:27:17:88:ae:8f:77:77:a5:
54:a9:75:02:0a:4d:2d:2e:6a:96:88:57:cf:a4:6d:
f8:3d:1c:fc:1e:51:62:6d:cb:c2:f9:dc:f2:d2:64:
c3:29:c1:f6:ba:68:50:97:64:1e:3d:b2:3f:5b:95:
d8:70:de:f4:83:af:24:17:59:49:49:bc:ce:89:f9:
7d:19:09:1c:7f:b3:e6:4b:c5:b7:59:7f:0a:2d:a0:
1c:2f:24:aa:92:f3:d4:bb:c6:63:18:ab:bf:e2:73:
48:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2A:50:A4:05:52:D4:A0:00:8F:51:7E:85:6C:51:A3:F7:2C:3D:9D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sCpQpAVS1KAAj1F-hWxRo_csPZ0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.124.0/25
Signature Algorithm: sha256WithRSAEncryption
00:b2:35:80:80:20:11:e0:47:d9:c7:57:57:df:2d:53:54:f9:
0a:6f:b8:c4:75:e0:49:c3:e4:7c:64:5b:4d:3f:d1:af:b1:ed:
db:ae:c0:c8:fc:a9:64:15:13:64:0a:b1:a4:23:79:da:2e:d4:
db:b4:06:ee:4c:e5:36:c3:88:71:b8:ef:da:ff:c4:ba:a4:6a:
33:03:d1:60:da:b6:e5:ab:95:99:1f:05:7a:70:29:50:bc:fb:
35:3b:7b:da:a3:f4:5e:3d:18:07:05:22:97:cc:ad:e1:9a:da:
73:d8:d8:5f:09:00:d8:2e:3d:77:60:38:cb:fb:1b:21:28:db:
ac:14:3f:a6:d4:61:0a:01:3c:e0:d3:d0:ee:f8:48:46:c9:54:
ab:ec:2d:95:dc:1e:d0:a8:76:f5:8a:66:5b:8b:e1:a7:ad:6c:
40:10:8a:9d:2f:9a:2f:b9:8b:ce:c0:98:7f:a1:3e:59:23:b7:
ef:21:4a:e7:13:a5:e2:eb:01:af:e2:ea:aa:ac:90:34:17:83:
9f:df:04:65:81:b9:fc:6b:b5:9e:5a:ee:4a:9c:41:1c:c8:03:
fe:ed:21:37:d9:07:3b:a8:a3:92:88:a7:c8:63:6e:77:83:7e:
e5:84:45:09:08:9a:68:a2:30:6f:79:da:fb:8c:90:24:15:21:
cf:ce:62:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:35 2023 by rpki-client on console-ams.rpki-client.org