Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vrRneltmhOeBBswVVoSUSgB59fs.roa
File: vrRneltmhOeBBswVVoSUSgB59fs.roa (raw, json)
Hash identifier: OKAe/gDA6xUkzebC7CnJJ+wU7BnfgTYBqr3fpxBBx3w=
Subject key identifier: BE:B4:67:7A:5B:66:84:E7:81:06:CC:15:56:84:94:4A:00:79:F5:FB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22BE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vrRneltmhOeBBswVVoSUSgB59fs.roa
Signing time: Fri 25 Nov 2022 04:41:36 +0000
ROA not before: Fri 25 Nov 2022 04:41:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.160.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8894 (0x22be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BEB4677A5B6684E78106CC155684944A0079F5FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:64:bf:ba:c7:70:05:10:4b:ae:f5:f8:2d:
14:3f:09:b9:84:d6:2f:36:29:06:58:de:65:84:46:
dd:47:eb:0e:a6:57:15:09:72:68:96:a3:fa:c3:7b:
b5:3c:5b:93:77:47:b9:8a:62:0c:58:50:40:df:0d:
8f:47:e6:90:d8:f3:87:c0:e4:c9:54:64:ae:69:0b:
96:b8:0a:a3:17:de:49:11:0c:11:8b:c8:60:65:62:
f8:58:1e:4f:28:cb:50:7d:25:e2:f1:02:68:2c:e7:
40:d8:fd:18:1a:8e:f6:21:4d:1d:ab:5a:0c:87:8b:
b8:84:34:65:31:df:64:dc:02:1b:0d:b6:68:52:94:
8a:2f:32:66:83:05:cd:3c:f6:a2:27:20:fd:71:54:
dc:e7:3c:41:60:18:2e:e4:b7:1c:82:3f:47:39:7c:
17:9f:a1:fe:cf:5a:6e:6a:20:78:aa:46:92:a6:0c:
a5:9e:ff:a2:11:d2:56:0d:05:ed:58:a1:a0:5f:21:
1e:ca:01:0d:69:cc:4d:ed:31:93:e4:d5:fd:1a:db:
1c:bf:57:fe:4a:fd:af:74:67:0c:b4:cb:f6:4b:fd:
91:91:2e:0d:57:ea:94:db:54:f2:b4:67:b0:6a:47:
80:1f:98:15:7b:f4:de:6a:60:53:bd:5d:6e:ef:30:
6d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B4:67:7A:5B:66:84:E7:81:06:CC:15:56:84:94:4A:00:79:F5:FB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vrRneltmhOeBBswVVoSUSgB59fs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.160.0/21
Signature Algorithm: sha256WithRSAEncryption
77:00:08:86:41:79:13:c0:1b:ab:07:ac:95:da:ba:70:ba:66:
41:1d:1a:72:6b:35:71:50:71:2c:1d:74:88:dc:a3:5a:08:27:
e0:dc:71:00:d0:43:35:7e:58:57:f4:11:55:fb:b5:c7:f6:93:
19:33:cf:0f:dd:fc:4c:49:77:c4:a6:01:7e:e7:86:f9:2e:5a:
3a:2a:ce:10:ff:99:34:18:f6:a8:2b:bc:db:d7:49:de:fc:87:
1d:13:e5:50:49:79:55:cd:af:81:46:2a:d6:c0:98:d5:eb:93:
c9:5b:66:97:7f:df:7b:79:86:d6:33:49:17:63:37:ff:eb:7c:
4b:00:da:a7:86:51:67:55:f8:14:9d:f9:ac:cd:33:a5:d9:cf:
45:8e:10:0a:ce:91:de:e4:cc:27:ee:83:19:a6:7b:fa:76:b7:
ce:18:63:b7:12:6c:04:4a:6d:45:be:fb:68:f2:97:c2:a0:bb:
fa:45:36:a1:92:82:f8:23:86:df:90:54:02:8b:83:a9:87:66:
80:40:b4:72:4d:3e:15:dc:f7:66:bd:1c:0e:88:6f:91:0b:3b:
04:07:6d:46:3e:07:ca:09:64:29:a3:4b:a2:25:67:0a:ab:c2:
6a:86:5f:e9:d9:f3:4e:12:89:38:6e:57:4a:39:8a:ad:17:93:
62:aa:f8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:12 2023 by rpki-client on console-fra.rpki-client.org