Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/txbqZCBMUMAOUq4i16JLN6WrRVk.roa
File: txbqZCBMUMAOUq4i16JLN6WrRVk.roa (raw, json)
Hash identifier: 5pEfygEWx+Y70w5HH2DrCvKxHQS7F/YFKxtLtI/sHtA=
Subject key identifier: B7:16:EA:64:20:4C:50:C0:0E:52:AE:22:D7:A2:4B:37:A5:AB:45:59
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2061
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/txbqZCBMUMAOUq4i16JLN6WrRVk.roa
Signing time: Fri 25 Nov 2022 04:38:38 +0000
ROA not before: Fri 25 Nov 2022 04:38:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.228.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8289 (0x2061)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:38 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B716EA64204C50C00E52AE22D7A24B37A5AB4559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:a7:5f:67:8b:8a:b0:97:fb:2b:3e:c6:fd:
41:f3:ad:b9:72:61:44:54:f0:3c:ea:3b:be:ed:c4:
e6:1e:70:53:82:ed:ed:33:a0:a0:f4:73:e7:6f:0e:
39:12:1a:96:77:87:6b:11:e0:dd:b0:38:df:53:3e:
8f:8c:2c:8f:47:85:8c:15:6c:08:15:ba:d7:7a:57:
3e:d2:86:67:3a:28:1f:91:44:1f:f3:22:67:65:a2:
96:28:f4:22:67:2b:e3:20:27:af:34:05:c4:db:9a:
6d:c8:4a:72:29:09:6a:28:45:3a:47:8d:7c:5c:8a:
7a:4a:70:ec:54:c5:03:b1:7c:9a:ce:42:a4:79:ac:
3a:92:2d:98:c2:7b:89:20:e0:24:65:51:e0:b2:ec:
64:43:7c:ff:0f:43:fd:a3:97:bd:d8:d6:2d:f5:5e:
b5:f1:31:91:22:c1:a3:60:64:7c:79:be:74:8c:a6:
01:c8:4b:01:a7:88:13:87:9f:1e:2d:e3:88:b8:e5:
c3:32:76:bf:78:db:3a:6c:b1:99:6b:aa:02:03:f9:
78:da:cf:d0:c1:4d:62:a8:4f:6e:d2:7c:5d:48:6a:
23:c5:bd:00:a2:71:f1:cb:92:8c:5a:4a:f6:2e:ff:
0b:89:a9:33:c0:07:77:31:39:25:64:0b:95:71:59:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:16:EA:64:20:4C:50:C0:0E:52:AE:22:D7:A2:4B:37:A5:AB:45:59
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/txbqZCBMUMAOUq4i16JLN6WrRVk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.228.0/23
Signature Algorithm: sha256WithRSAEncryption
41:12:80:d9:bf:c4:86:e3:d7:28:8f:3e:28:0f:2d:b4:cd:d6:
90:91:76:72:20:9e:4d:5f:7f:bf:4c:02:31:a6:c8:8b:56:a3:
4c:08:2c:3d:a7:b1:60:8b:0a:8f:82:3d:2a:21:f5:fa:fc:bd:
37:b4:c2:f4:ae:91:80:99:db:8e:b9:12:73:69:d9:89:37:93:
00:63:07:87:fe:18:1d:ea:da:71:dd:00:75:9a:6b:b2:53:1b:
e7:e1:96:d9:b1:d9:31:45:c2:96:c0:02:41:8d:ef:0e:2c:b3:
2b:12:38:c1:e8:9e:4b:af:7b:f1:bb:da:fb:c0:02:80:19:41:
00:0d:9b:ae:c3:7d:87:81:d9:0d:12:7f:53:94:04:9f:c8:fd:
ee:21:8d:fb:68:9e:3e:c3:ec:ea:21:84:46:ec:07:f9:fb:ac:
db:39:f6:81:cf:40:ce:48:26:6e:ba:82:b2:f0:52:8c:26:57:
aa:1e:ca:10:b6:dd:15:e0:f6:79:62:ce:97:14:7e:71:b4:77:
64:18:91:2d:64:3d:73:2e:d7:81:0d:91:45:39:69:01:6b:7d:
a5:d3:09:11:1e:be:5f:e2:39:57:f5:b8:d9:62:b6:88:9b:41:
53:c9:e3:37:be:46:af:5e:fe:93:84:78:a0:c4:70:69:5f:d7:
a9:b0:0e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:11 2023 by rpki-client on console-fra.rpki-client.org