Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v05FC0WCLKZhNOvQG2ABv4PAZws.roa
File: v05FC0WCLKZhNOvQG2ABv4PAZws.roa (raw, json)
Hash identifier: WXn1yBRUyEP9QS/LQgQDsIxv5tKIpBSTWXAaovfy+zY=
Subject key identifier: BF:4E:45:0B:45:82:2C:A6:61:34:EB:D0:1B:60:01:BF:83:C0:67:0B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v05FC0WCLKZhNOvQG2ABv4PAZws.roa
Signing time: Thu 15 Sep 2022 02:53:41 +0000
ROA not before: Thu 15 Sep 2022 02:53:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.148.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BF4E450B45822CA66134EBD01B6001BF83C0670B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:ee:9c:dd:50:8d:e3:9a:07:be:e1:9e:87:
bd:4e:8f:37:a6:ef:b6:fb:8c:e0:e5:4f:c3:ff:5f:
06:2d:8e:19:81:ea:0f:89:6a:ca:99:35:20:de:1a:
3f:d5:f9:39:3d:58:22:e0:55:c0:89:45:99:88:de:
e3:37:45:9a:d5:a7:ad:74:da:76:4f:36:42:e0:39:
30:45:67:00:32:6d:ec:11:55:8d:81:6b:ac:84:44:
31:93:a8:95:6a:b5:99:7d:d9:ed:50:4e:8c:ee:e2:
cb:d7:26:e3:21:bd:5a:2c:5f:e1:24:09:2c:77:42:
d7:97:33:a1:80:20:70:57:05:cc:e4:dc:c9:6d:97:
91:04:2a:c2:18:ca:eb:46:68:90:d4:db:df:64:51:
ff:93:77:32:7c:e0:be:aa:5a:e7:c5:2b:db:73:51:
bc:0a:30:8b:db:22:c8:57:e2:c7:b7:c5:01:f0:f6:
de:01:c0:c2:33:7b:c6:8f:7d:7d:a8:ce:9e:c6:5a:
ec:e0:67:c9:db:a6:2d:3a:67:2e:37:aa:e5:90:7a:
c4:fc:45:0d:2e:e2:f9:1a:1c:ab:7b:ac:88:8a:f9:
e5:b3:ae:8b:04:37:8b:43:a6:ff:bb:64:2f:e6:c5:
59:8e:e3:3e:31:9f:72:92:d7:34:ca:0f:b7:cb:28:
ae:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4E:45:0B:45:82:2C:A6:61:34:EB:D0:1B:60:01:BF:83:C0:67:0B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/v05FC0WCLKZhNOvQG2ABv4PAZws.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.148.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:ba:2d:f0:0b:3a:97:1f:0a:67:75:0d:69:47:fb:31:cb:08:
59:a1:ce:59:24:5d:fc:73:68:5b:f6:f1:89:ad:ff:60:26:18:
10:46:4d:2d:b1:6f:6b:ea:86:0f:65:91:b8:cd:68:39:5c:21:
15:0e:07:32:8d:ff:b2:b0:b1:65:c9:38:3a:32:94:41:c1:f1:
40:f7:30:c9:02:41:a2:b5:da:de:8a:39:60:98:8d:0b:c3:65:
2c:36:ad:42:43:6f:de:c1:31:7a:fe:91:2f:ad:44:5c:29:0d:
24:3d:b1:2c:41:dc:d9:c5:a4:16:ec:8a:0d:d8:15:49:6f:99:
55:24:2c:ec:3b:a2:ee:dc:e3:4f:77:43:d2:a0:d5:52:d3:1a:
ad:d8:ae:19:b2:c2:eb:de:12:85:a6:72:ff:45:35:83:99:ee:
b2:35:a2:6f:55:05:79:ba:3e:f1:04:67:78:06:ae:95:ad:85:
d4:d9:64:0d:a4:27:73:8a:93:01:37:75:e0:24:65:fe:d4:18:
ad:a2:ec:0a:0e:78:8c:b5:3b:06:e1:38:fb:77:6d:fc:91:10:
4f:f6:32:47:1e:fb:2f:da:26:02:28:a8:6a:59:f3:d0:b6:95:
36:fd:99:65:e4:fb:27:c2:02:6c:2b:97:23:32:0f:61:94:a0:
54:a5:4d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:42 2023 by rpki-client on console-fra.rpki-client.org