Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sj-JdfK5OzTdTveL4O_zdQD5cos.roa
File: sj-JdfK5OzTdTveL4O_zdQD5cos.roa (raw, json)
Hash identifier: y8RNVI8+3EhJcqIVvTyzJAdPzU8W7SQfDDcc6nPupmk=
Subject key identifier: B2:3F:89:75:F2:B9:3B:34:DD:4E:F7:8B:E0:EF:F3:75:00:F9:72:8B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 208F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sj-JdfK5OzTdTveL4O_zdQD5cos.roa
Signing time: Fri 25 Nov 2022 04:38:52 +0000
ROA not before: Fri 25 Nov 2022 04:38:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 123.195.128.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8335 (0x208f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B23F8975F2B93B34DD4EF78BE0EFF37500F9728B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2d:5e:3b:c0:27:bd:67:5c:31:97:aa:61:a2:
a1:39:19:64:87:7a:59:72:6e:97:a5:34:d8:32:2d:
55:69:7e:a3:c4:aa:c9:77:f1:78:7a:b9:a7:a0:4f:
80:44:7e:25:e6:61:9c:b7:75:62:cd:3e:71:72:aa:
b5:a1:8d:06:c7:a4:b1:b3:c9:2b:dc:63:cf:76:57:
4b:25:b1:c2:44:f1:ba:1f:09:2e:96:e0:96:ba:5c:
51:3d:f1:63:d9:b1:a6:98:d3:a1:48:ac:d3:bb:59:
ad:c5:ba:40:ea:d3:e4:a0:38:23:b2:34:93:f9:fa:
2e:e0:90:fc:5a:38:60:56:2d:6c:10:b5:f7:15:3b:
ae:18:c1:8d:db:6c:2c:49:05:d4:5e:3b:31:49:ce:
aa:9c:a9:9e:b4:35:34:f3:5e:62:60:22:71:9b:86:
55:39:35:98:7a:0c:be:75:81:6f:b3:4a:12:4e:b5:
97:61:3d:c6:38:89:88:bb:31:4b:ea:8e:f1:40:54:
74:49:f6:a5:8f:86:50:bd:ae:76:6e:24:9f:35:39:
df:34:84:0e:0b:62:91:71:09:64:af:15:55:5a:19:
32:92:af:b4:20:52:d6:83:25:ca:0f:89:a4:91:30:
c5:01:d3:e1:9c:e6:7f:29:0e:05:78:0b:84:62:32:
17:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3F:89:75:F2:B9:3B:34:DD:4E:F7:8B:E0:EF:F3:75:00:F9:72:8B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sj-JdfK5OzTdTveL4O_zdQD5cos.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.128.0/19
Signature Algorithm: sha256WithRSAEncryption
48:99:18:c3:8c:92:45:b5:42:67:34:a8:18:d7:e7:fb:c8:10:
4c:65:85:56:5e:4d:02:00:0f:68:6e:90:c3:76:b1:7f:85:d4:
d9:dd:bd:21:7e:d1:9a:ff:a0:ef:38:21:4a:a4:44:3f:6d:14:
19:75:63:b6:1c:b1:8b:a1:b3:e7:fe:80:3f:53:c6:0a:6a:b3:
1e:79:00:a7:9a:b5:e3:1c:04:72:3d:17:8f:78:61:7b:fc:53:
f3:62:a6:ba:8e:20:9e:0e:b6:b5:19:1e:7c:7e:c0:dd:80:63:
1b:55:74:c2:50:8b:e2:b2:fe:73:85:d7:a7:ea:c8:1a:c4:19:
eb:77:62:ce:dd:c0:a9:db:0f:5b:4f:0b:f6:68:14:33:13:d7:
54:72:92:c2:fc:2d:c1:e0:84:05:a4:04:3f:63:12:77:c6:e0:
bf:99:05:20:9c:7c:24:11:f5:65:3d:65:dd:20:c5:54:81:48:
aa:93:3f:44:fc:b3:57:37:f5:40:40:a9:0c:d6:fc:2d:94:ef:
9b:c1:9c:f8:1b:fa:9a:20:20:79:f8:c9:98:e7:81:38:f6:5e:
61:3b:39:2b:23:20:28:23:91:f2:33:8c:c2:bd:10:b7:aa:26:
6b:f5:1c:cd:c1:92:66:76:5d:33:43:7a:65:2b:d2:8f:b2:f1:
eb:70:37:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:11 2023 by rpki-client on console-fra.rpki-client.org