Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sc5P3IT6Z72hXuL-rdpFh9WNKR4.roa
File: sc5P3IT6Z72hXuL-rdpFh9WNKR4.roa (raw, json)
Hash identifier: ntExNKu9nq95I3biFfKWKBuNO0xYc3szOVDIIKvpHAg=
Subject key identifier: B1:CE:4F:DC:84:FA:67:BD:A1:5E:E2:FE:AD:DA:45:87:D5:8D:29:1E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2306
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sc5P3IT6Z72hXuL-rdpFh9WNKR4.roa
Signing time: Fri 25 Nov 2022 04:41:57 +0000
ROA not before: Fri 25 Nov 2022 04:41:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.193.140.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8966 (0x2306)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B1CE4FDC84FA67BDA15EE2FEADDA4587D58D291E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a6:52:ef:3c:bf:90:ad:77:64:d3:06:7d:41:
4c:09:86:4c:b4:74:2b:17:29:88:02:6c:67:42:07:
af:e6:4d:49:17:f1:73:4b:48:3e:67:3b:ed:88:05:
05:1f:4a:24:cc:13:6b:b1:79:3a:e0:92:3f:27:44:
af:a4:aa:2a:7d:1d:2a:46:bb:91:6e:b2:d8:07:63:
05:f4:67:b5:42:7e:be:ec:d7:61:64:97:a1:7b:00:
69:b6:10:ab:1a:ec:41:00:89:6a:ae:c7:69:02:ae:
dc:84:ae:65:ea:92:d5:a5:e5:aa:d3:f6:a4:9b:a9:
a1:15:71:9f:e2:f2:35:77:71:48:b2:58:64:31:94:
d1:2e:27:de:f1:e7:eb:27:39:c7:60:32:7d:5a:28:
06:37:46:9a:0e:92:5d:a4:d0:a7:b1:06:34:d1:fd:
37:34:4d:ff:0e:48:ce:70:ab:c4:dd:14:71:d4:87:
2f:72:2d:04:af:11:9c:39:17:ca:d5:d6:c6:15:77:
51:87:40:a1:51:53:22:53:ab:fe:a3:00:67:43:02:
3e:bd:5a:fb:93:47:8b:50:ec:ea:26:8d:ad:66:6e:
97:af:3d:fc:e1:73:45:3f:db:9e:ef:df:a7:32:aa:
e2:40:f6:68:b6:70:00:a2:08:30:d6:ca:14:c8:da:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CE:4F:DC:84:FA:67:BD:A1:5E:E2:FE:AD:DA:45:87:D5:8D:29:1E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sc5P3IT6Z72hXuL-rdpFh9WNKR4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.140.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:64:cc:e8:e3:6c:b8:da:46:ef:8d:5f:02:3b:7c:c7:f0:77:
5a:bd:32:89:3e:4a:35:87:00:c9:d7:4c:7c:78:74:7b:a1:f4:
66:ce:fe:1f:85:f3:1c:ad:a8:25:e8:d4:4b:d6:1d:b3:dc:e8:
c3:6c:72:12:7c:01:ff:b6:37:e3:df:b5:c7:97:b8:e6:21:c7:
50:69:01:68:4e:69:63:88:56:19:ed:26:46:d8:2a:a5:91:53:
77:43:da:de:28:e6:03:22:f6:15:4f:76:35:d9:bd:e5:00:70:
d4:be:cd:90:ee:0d:f0:a9:a0:cf:d4:0b:fe:c1:45:0b:d6:a5:
f8:70:86:7c:d5:90:6d:8f:d0:67:ba:84:db:6c:fc:11:51:98:
48:0f:12:ee:68:49:06:e6:f5:3f:86:e7:72:a9:6c:c8:0c:e1:
9d:ba:08:bd:06:1a:95:bf:3b:e9:26:fb:6a:88:81:f1:fb:fa:
d3:11:ec:5d:8d:f2:ea:a4:34:8e:61:0c:15:86:b7:7f:59:b3:
cb:a8:4a:b8:ec:61:fe:b0:b1:b6:71:fa:22:63:38:e4:ea:40:
58:43:cb:df:94:1a:51:ff:6f:6a:88:ff:82:c0:15:10:bc:d8:
fc:a5:c9:2c:8e:fc:9c:f6:15:41:a3:17:41:b8:ca:eb:19:d0:
0e:44:cc:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:35 2023 by rpki-client on console-ams.rpki-client.org