Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vzWjwYEdWgiy2dezCFsVXQGR4to.roa
File: vzWjwYEdWgiy2dezCFsVXQGR4to.roa (raw, json)
Hash identifier: foCfLk5i5JNgQbbZDeg9RXu+Qc7wUB9VXxQq+2skBHM=
Subject key identifier: BF:35:A3:C1:81:1D:5A:08:B2:D9:D7:B3:08:5B:15:5D:01:91:E2:DA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2277
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vzWjwYEdWgiy2dezCFsVXQGR4to.roa
Signing time: Fri 25 Nov 2022 04:41:12 +0000
ROA not before: Fri 25 Nov 2022 04:41:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.104.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8823 (0x2277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BF35A3C1811D5A08B2D9D7B3085B155D0191E2DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:92:7b:02:e4:8b:29:28:79:5d:1f:90:d9:be:
77:23:e0:b3:34:b4:a6:03:0d:2e:29:ca:12:11:5e:
0f:dd:7c:71:63:9e:da:41:63:9e:85:44:f2:7b:37:
c4:2b:01:29:bc:df:69:07:17:a5:e6:8c:89:21:46:
66:ce:5f:75:e1:97:e6:2d:00:b9:9a:97:ee:46:b9:
d8:4f:55:f9:b3:78:7f:28:7f:2c:f2:ca:26:31:40:
25:5d:33:bd:d4:88:de:aa:24:f2:f5:14:e5:ec:f6:
40:93:e3:b0:83:42:ad:3e:7b:88:75:18:97:78:09:
fc:bb:75:dd:e7:29:c1:6f:f2:9f:40:1e:5d:5a:18:
83:ff:48:6c:cc:1c:91:dc:c6:bd:3a:d4:81:44:8a:
81:79:0a:0b:6f:d2:96:97:71:2a:43:77:db:ee:d9:
f3:36:72:7c:a0:0b:0a:c8:0b:3f:15:a3:02:62:e7:
68:fc:84:28:b9:c6:0f:92:18:8e:88:d4:69:3b:1a:
be:2f:13:f0:f0:71:63:b2:4b:86:e7:15:6d:a2:bf:
5b:d5:f6:4b:3b:19:8d:e1:48:c9:c2:9f:c9:fe:ad:
79:53:4e:c9:60:33:17:99:17:38:70:20:0b:1b:5a:
eb:66:d7:f4:4b:5c:6e:17:ad:e5:8b:0f:28:7b:ed:
92:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:35:A3:C1:81:1D:5A:08:B2:D9:D7:B3:08:5B:15:5D:01:91:E2:DA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vzWjwYEdWgiy2dezCFsVXQGR4to.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.104.0/21
Signature Algorithm: sha256WithRSAEncryption
48:2c:a9:ec:55:a9:90:1e:a8:27:99:ac:f1:89:d5:18:3a:17:
0f:4c:d4:d3:3e:cd:6d:56:a0:7f:f7:a5:52:dd:54:a9:d6:ad:
ff:9a:54:6e:0c:b4:6c:ac:92:88:b6:59:a5:ba:e5:4a:4e:d1:
d2:2d:a5:00:58:7d:1c:b5:7c:42:30:2e:5c:3d:f5:26:67:00:
59:bb:f7:4d:ac:76:a3:4a:10:38:5e:1a:ef:a8:3c:05:1c:14:
8e:6d:d2:c3:bb:53:59:52:ad:54:4f:9e:aa:86:a1:e7:07:47:
ff:b9:f7:56:99:c9:64:0a:09:7f:7d:e7:b1:c8:64:7c:48:9f:
61:de:3d:4d:92:df:62:7a:cb:e4:e5:e0:fb:68:bf:69:1d:b2:
b8:23:00:a9:e4:1f:46:ed:3b:de:a5:dd:bb:b6:a0:d8:dc:76:
a8:1c:09:f1:b1:99:10:13:10:52:e8:81:b6:e9:43:54:d7:a1:
ec:31:d4:fc:54:df:60:83:7d:ed:00:91:ec:7f:9d:3d:d4:44:
84:cd:62:cc:77:49:60:29:5e:91:14:68:23:17:3d:c7:60:e1:
c6:77:1b:7e:1e:5d:4d:93:12:68:6a:46:d4:58:5a:0c:ea:01:
d1:ef:99:e9:b1:7d:f3:44:60:c9:f5:e2:79:eb:6a:93:20:3d:
6a:4b:df:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:12 2023 by rpki-client on console-fra.rpki-client.org