Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tXRy_4Wp-_px856jdg-fFnXUnAQ.roa
File: tXRy_4Wp-_px856jdg-fFnXUnAQ.roa (raw, json)
Hash identifier: +P8LbYQ07b3b64vhP+thsMd1yNxgZeNcSZ03yWlM70Y=
Subject key identifier: B5:74:72:FF:85:A9:FB:FA:71:F3:9E:A3:76:0F:9F:16:75:D4:9C:04
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tXRy_4Wp-_px856jdg-fFnXUnAQ.roa
Signing time: Thu 15 Sep 2022 02:52:48 +0000
ROA not before: Thu 15 Sep 2022 02:52:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.232.100.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B57472FF85A9FBFA71F39EA3760F9F1675D49C04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:8c:33:e2:4e:ec:18:9a:a8:2c:1c:5f:8e:
a8:63:5b:6c:b4:cd:27:98:4d:f2:45:ab:50:5e:2c:
c6:92:84:a7:cd:92:5e:63:b7:fa:4e:89:e5:ad:4d:
93:e2:68:68:97:fb:37:ac:d1:80:b9:a7:91:dd:f4:
da:ad:bb:0a:b0:7a:44:9b:94:3f:8f:08:4f:89:72:
c3:8e:7e:f5:76:2f:1f:d0:f8:07:fc:7a:96:e1:41:
0c:ef:72:3f:1a:58:e1:bd:a5:96:12:5d:a4:e2:fc:
96:5f:3f:cd:12:80:10:33:b4:5e:b3:cc:7e:d3:51:
41:dc:d5:a0:43:ac:1a:6f:db:d5:87:4b:ea:92:c7:
a6:ca:18:99:6e:1b:6b:94:a1:77:c0:0e:16:f3:e3:
ac:07:31:c1:e8:c1:73:a2:5d:23:03:63:39:cd:2d:
92:31:41:64:49:61:16:ee:21:d4:fa:8a:f8:43:ec:
43:28:34:0a:1d:b3:8d:b0:a3:6b:f9:27:e4:cb:e7:
bc:6c:78:b5:cf:08:08:75:05:5f:73:8a:de:cc:60:
f2:a5:5c:45:69:c5:01:cc:20:19:45:e7:2c:aa:50:
e1:7a:69:47:bc:bc:5e:d2:7e:14:05:c5:72:77:df:
87:0d:f0:93:50:70:6e:7b:0c:4a:66:ad:79:a6:2e:
a4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:74:72:FF:85:A9:FB:FA:71:F3:9E:A3:76:0F:9F:16:75:D4:9C:04
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tXRy_4Wp-_px856jdg-fFnXUnAQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.100.0/22
Signature Algorithm: sha256WithRSAEncryption
82:60:b7:ca:2a:f7:5c:ae:43:97:7b:f3:c2:d9:cc:16:da:ba:
31:0e:a9:b6:05:0b:fc:e9:9c:4d:13:c0:b8:50:62:6d:5c:63:
eb:a2:9b:e1:58:b8:d4:94:88:62:63:9e:82:c6:92:ec:7a:fb:
02:18:8c:a7:54:2e:e6:ac:10:29:9a:7f:6a:a3:63:fd:cf:b5:
60:d8:35:e2:94:4e:02:5c:87:11:bc:65:e6:46:a9:05:aa:5a:
76:1b:f9:12:81:ac:64:93:11:bc:91:65:54:ca:2a:7e:35:66:
1b:c8:f6:7c:de:3c:92:06:2a:a5:80:8b:46:82:82:0a:6c:cf:
1f:a4:f3:64:40:0a:29:d2:43:f3:f8:93:8f:34:7b:ee:03:39:
49:91:64:12:2f:f1:2f:35:16:cf:4e:36:99:ad:88:74:0d:bb:
2d:12:15:44:c1:34:d1:c1:20:f7:57:04:c6:c8:87:4e:96:0a:
e3:96:8f:3c:b6:94:2b:d1:50:4a:e7:7e:5a:22:e7:35:23:77:
7d:b0:1c:98:2c:e4:bf:06:6c:13:7a:ae:2e:e4:50:b8:6b:a2:
3c:2f:09:14:a7:c6:b7:66:d7:85:7a:0e:46:25:a4:c0:1f:bb:
53:1f:be:7a:90:d7:c9:52:8d:f7:8d:25:67:57:3f:da:99:9c:
cb:70:d0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:41 2023 by rpki-client on console-fra.rpki-client.org