Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tVzNpDbWpNUJaQZ7oRlZRkfu8yU.roa
File: tVzNpDbWpNUJaQZ7oRlZRkfu8yU.roa (raw, json)
Hash identifier: 51pXHS5hQnGZySjSUPM/D/eDhVa0n5aIjT4WdaI2lTg=
Subject key identifier: B5:5C:CD:A4:36:D6:A4:D5:09:69:06:7B:A1:19:59:46:47:EE:F3:25
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21F8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tVzNpDbWpNUJaQZ7oRlZRkfu8yU.roa
Signing time: Fri 25 Nov 2022 04:40:37 +0000
ROA not before: Fri 25 Nov 2022 04:40:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 118.232.32.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8696 (0x21f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B55CCDA436D6A4D50969067BA119594647EEF325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a9:07:fb:86:38:62:44:f4:02:30:67:e4:89:
01:32:03:d6:de:be:94:d3:c1:11:bb:4b:bd:2b:e0:
2e:f9:a0:bf:df:c7:3f:0e:b5:61:dd:f3:b8:ae:63:
35:66:21:a8:78:01:8b:cd:eb:13:00:62:f1:5d:92:
76:03:a3:6e:42:cd:61:ac:fc:42:06:7f:b9:35:03:
f1:c4:5d:cb:35:ea:51:23:2a:31:6b:a0:a4:47:a3:
41:72:ff:c2:29:29:c3:5d:71:ba:9a:f7:ef:33:b5:
54:21:3a:4d:12:81:04:99:ce:cd:63:4f:84:fd:82:
17:a6:9a:5d:a7:63:69:07:27:5e:15:83:dc:f5:d1:
46:f0:98:2c:e5:cf:4b:28:7c:42:4e:73:76:84:23:
bf:63:cf:5f:30:ee:06:e8:6f:71:e1:23:1e:4a:d5:
3b:72:45:41:6c:7b:53:b0:37:87:62:05:2d:d0:36:
60:33:9c:d0:48:de:37:d0:4c:30:74:71:27:79:fc:
56:40:2e:b6:2b:c8:1a:36:7e:bb:3e:33:93:77:26:
00:07:32:ca:39:27:24:86:e1:7d:2d:9e:8f:36:d6:
23:aa:34:a2:82:2e:c1:4c:c2:63:38:93:f8:5d:71:
fc:09:4a:b5:3e:91:c5:0c:e2:4d:b4:b4:e2:3a:f9:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5C:CD:A4:36:D6:A4:D5:09:69:06:7B:A1:19:59:46:47:EE:F3:25
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tVzNpDbWpNUJaQZ7oRlZRkfu8yU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.32.0/19
Signature Algorithm: sha256WithRSAEncryption
b4:32:b8:9c:4c:b3:20:64:66:0d:98:e7:5f:1f:73:2a:1a:19:
bd:bf:7a:cb:41:c4:50:a4:80:2f:14:63:f1:ab:0a:a5:f4:f6:
8d:55:09:f8:96:50:58:1f:97:1c:cc:42:2a:62:ef:0c:4b:d2:
46:ee:2c:5b:be:0a:dd:19:bd:f3:13:fd:9f:c2:3c:8c:35:7e:
10:06:27:5c:0c:a5:25:62:52:6e:73:3e:b4:81:9f:6d:5f:e0:
e8:74:82:ac:64:95:f1:c4:f7:50:07:70:15:1b:06:ef:6e:75:
b1:d6:00:4d:67:a2:b1:2f:24:ca:b8:1e:55:e4:09:d8:12:24:
7d:e8:6d:17:b3:52:28:0b:17:17:a8:16:50:c5:10:45:8a:d0:
4a:58:f9:10:b5:fb:42:00:36:02:2c:c9:f7:59:8c:81:a3:7d:
47:39:e5:8c:0c:81:e9:e3:56:d8:c4:20:43:90:70:b0:79:b4:
95:c8:18:8b:a3:4b:12:62:ca:c1:e3:be:b2:2b:6e:cd:f5:d8:
28:1c:49:62:36:f7:e1:11:00:95:73:a7:82:51:c5:11:38:2b:
e7:6e:b3:b4:dc:2a:39:be:ad:9f:09:ac:f0:a6:8f:76:53:27:
5c:9f:1c:5b:93:aa:78:a6:d9:3e:ed:07:ef:a3:ed:91:40:3d:
3e:2f:53:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:11 2023 by rpki-client on console-fra.rpki-client.org