Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t77g8sb6hUk0nAKUxi5IjL2cZUg.roa
File: t77g8sb6hUk0nAKUxi5IjL2cZUg.roa (raw, json)
Hash identifier: mwEf6JCSB8J4NoLkHCyMnp7Y5YKIJWqyOr2BkTCHg8E=
Subject key identifier: B7:BE:E0:F2:C6:FA:85:49:34:9C:02:94:C6:2E:48:8C:BD:9C:65:48
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22BB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t77g8sb6hUk0nAKUxi5IjL2cZUg.roa
Signing time: Fri 25 Nov 2022 04:41:35 +0000
ROA not before: Fri 25 Nov 2022 04:41:35 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.172.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8891 (0x22bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:35 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B7BEE0F2C6FA8549349C0294C62E488CBD9C6548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:11:a3:1d:f6:0c:81:2b:c8:ec:b8:af:41:d5:
68:62:b1:7c:d9:13:d1:c7:1b:37:34:d9:28:cd:83:
4d:51:3a:6d:48:0c:75:80:db:0a:65:ed:ff:e0:ae:
35:01:49:55:1c:a9:f9:3f:21:6b:de:6a:2e:6b:a7:
1b:2a:b0:15:2c:23:30:51:54:1e:7b:cf:a2:42:22:
4f:19:9d:b9:12:c1:64:c4:b0:75:c7:5d:63:27:1f:
fc:27:a5:cf:5a:23:a1:57:45:35:fa:10:60:e3:a6:
33:1d:72:02:06:1b:66:52:73:23:be:e9:b3:5b:5a:
c6:35:2c:de:a2:02:da:6a:b9:8d:5c:f9:3b:78:f8:
41:37:24:fd:2c:37:61:af:a1:19:4e:92:83:55:79:
75:fa:33:4b:c6:e0:c2:c8:d1:41:48:ce:4d:19:b5:
cb:35:2d:70:1f:49:68:1a:52:7d:fa:20:7b:ed:1a:
70:23:b2:8f:b6:02:ce:df:42:b9:74:c3:3b:1c:49:
20:59:54:d8:76:5d:8b:15:d3:86:4e:65:5e:57:b0:
af:58:8c:d5:f0:32:46:71:ed:2e:16:29:a6:fb:c0:
0f:62:21:17:29:59:1e:09:36:13:1d:1e:78:6e:fc:
37:1e:67:a1:c9:a7:e5:85:90:ca:52:95:a2:17:4f:
0f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BE:E0:F2:C6:FA:85:49:34:9C:02:94:C6:2E:48:8C:BD:9C:65:48
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t77g8sb6hUk0nAKUxi5IjL2cZUg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.172.0/22
Signature Algorithm: sha256WithRSAEncryption
92:4d:fb:0d:78:d3:51:6d:a4:5b:1b:4f:04:eb:dd:32:16:6b:
b2:4e:e7:f0:d4:77:57:c7:4a:cc:91:c1:31:fe:04:2d:7c:54:
02:92:71:d6:d8:02:a3:92:b9:72:ae:ab:78:77:d4:ee:d7:c5:
8f:45:14:43:8d:2e:f0:85:f2:7d:28:1e:15:96:e2:ce:74:ca:
af:51:81:6a:da:7e:de:65:b6:eb:61:42:59:3a:77:9f:38:98:
d7:6a:87:ec:90:ec:fb:e2:b7:7d:6b:ba:f8:a1:b5:06:20:18:
b4:46:98:da:c8:8e:f7:e6:e4:c0:3d:98:50:0a:9c:54:5a:0b:
d5:d1:7f:15:d9:34:70:31:95:d2:56:5d:88:84:ea:4f:11:b8:
62:f7:bf:a3:59:6d:da:72:53:14:bb:83:81:db:9a:3f:b6:84:
ce:93:14:4b:b5:2c:71:ec:1a:72:77:26:3a:bd:63:95:47:ed:
19:bd:29:e6:57:12:11:28:7e:5d:f2:9e:62:4d:2a:a8:6d:d6:
a1:58:20:15:be:4b:8a:ce:c7:4a:2c:da:45:67:71:ea:9d:5a:
06:f8:a8:c3:00:2e:60:a0:06:0d:4e:1d:46:95:4b:8a:98:a6:
8d:b9:af:37:ab:71:9c:b4:6c:8d:ee:83:e7:3e:69:40:cf:f2:
31:29:d1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:11 2023 by rpki-client on console-fra.rpki-client.org