Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tfKCcl9WD3BUKRf6yD7FRF6xyD0.roa
File: tfKCcl9WD3BUKRf6yD7FRF6xyD0.roa (raw, json)
Hash identifier: ZfCd+neSaxZKGAv7Cnvi6O9WhzC3JY2grbg1ZeXPupg=
Subject key identifier: B5:F2:82:72:5F:56:0F:70:54:29:17:FA:C8:3E:C5:44:5E:B1:C8:3D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2064
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tfKCcl9WD3BUKRf6yD7FRF6xyD0.roa
Signing time: Fri 25 Nov 2022 04:38:39 +0000
ROA not before: Fri 25 Nov 2022 04:38:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.148.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8292 (0x2064)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:39 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B5F282725F560F70542917FAC83EC5445EB1C83D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:8e:7b:57:56:27:82:18:fe:49:84:95:0a:
32:72:86:7e:7a:f4:7f:d0:16:47:99:b1:ec:ae:cd:
27:f6:83:d9:a1:d2:30:64:0d:36:d3:f0:75:a7:4d:
3e:27:8d:31:62:f2:56:bf:8a:95:a9:3f:c7:fb:c5:
7e:1b:d9:cd:f0:e8:12:82:a0:39:cd:b9:dc:d2:30:
9c:81:98:ea:e2:8f:3c:56:11:ed:eb:bd:f8:0e:0d:
aa:1e:37:77:ed:7c:e5:04:51:37:ae:b9:1d:18:fa:
d0:2b:3d:ae:5a:49:37:b4:6a:ba:32:74:81:ea:9f:
eb:47:9e:53:d2:56:df:c3:e4:12:03:b3:90:35:e4:
b8:d9:bc:f3:09:31:a5:9a:8b:77:f2:57:75:be:fe:
5e:91:d3:17:4c:12:05:43:13:0d:f1:7c:5b:69:95:
ac:cc:02:6b:ce:e4:e6:c5:49:d3:76:a5:06:23:31:
0e:81:8d:5a:3c:f7:61:9e:ef:66:24:eb:ba:6e:b0:
60:39:35:4c:f4:e0:7d:cb:c3:84:28:00:70:f3:cc:
d8:eb:07:5f:a8:8e:be:1c:3c:5f:40:29:cd:90:e5:
51:9b:ff:ab:d1:83:63:cc:cd:79:ed:a7:0d:9e:27:
0c:04:6f:91:9e:82:96:03:08:90:2e:b3:67:08:5c:
da:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F2:82:72:5F:56:0F:70:54:29:17:FA:C8:3E:C5:44:5E:B1:C8:3D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tfKCcl9WD3BUKRf6yD7FRF6xyD0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.148.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:c4:46:10:7c:f7:73:54:89:c1:5f:8d:04:4d:f2:f7:17:f0:
66:ea:be:9f:55:31:4a:78:31:93:6a:f1:da:89:e5:4c:61:9a:
ba:4a:44:8d:06:0a:92:35:b3:ec:93:de:59:b4:83:f2:b7:f5:
4a:32:55:29:c1:70:92:2e:6f:db:61:63:9c:db:1f:30:5a:88:
bc:73:62:f8:86:ed:de:2d:d1:2a:9b:be:40:1a:4d:78:73:f2:
fb:3d:86:91:ec:c8:58:91:bf:d4:5a:85:ca:95:25:96:b0:85:
ad:5b:16:73:1c:89:2d:09:63:7f:79:6c:80:14:da:56:55:e1:
d4:f2:92:2e:4e:06:d4:75:34:ad:b3:f9:ae:c1:51:dd:ff:80:
3c:04:68:30:a6:3d:28:ad:e0:a7:97:4c:a0:c5:4f:62:d0:0b:
94:27:3e:b6:17:57:5f:1e:70:1d:2d:2e:27:5b:02:b3:6e:25:
1b:2a:41:df:3e:4a:b9:cf:37:ed:4b:a1:bc:89:53:db:bb:f0:
5c:e9:d4:b6:e7:21:65:32:09:4b:4c:97:35:b6:4f:ba:a8:f5:
09:b8:93:19:03:8a:0b:1f:c2:ba:a4:3f:4c:b9:f8:1d:aa:fa:
a2:d6:4b:b5:1d:ac:02:aa:03:f0:66:7b:88:ac:ce:ff:32:e0:
b9:36:b4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:35 2023 by rpki-client on console-ams.rpki-client.org