Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w996RliYvGzwIpnoV3YxpHwxcnw.roa
File: w996RliYvGzwIpnoV3YxpHwxcnw.roa (raw, json)
Hash identifier: Xtu0cLhAhGWdyam6sNdnI3iAXE/aUGkivikEiefc4v0=
Subject key identifier: C3:DF:7A:46:58:98:BC:6C:F0:22:99:E8:57:76:31:A4:7C:31:72:7C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2358
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w996RliYvGzwIpnoV3YxpHwxcnw.roa
Signing time: Fri 25 Nov 2022 04:43:28 +0000
ROA not before: Fri 25 Nov 2022 04:43:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.252.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9048 (0x2358)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:43:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C3DF7A465898BC6CF02299E8577631A47C31727C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c8:87:10:7f:f5:11:78:93:a7:8e:d1:6c:28:
d7:31:c7:fd:ae:d2:1e:3d:dc:04:f8:4c:b2:e8:c1:
20:2f:48:6b:af:50:2d:dd:81:df:04:7a:4f:0d:71:
f3:39:96:2e:64:eb:c8:45:12:cd:b1:d4:67:99:84:
97:a7:d0:36:31:06:fb:59:5d:77:c2:9b:4e:da:71:
ab:d1:c2:a0:68:b0:97:06:ac:1a:86:65:09:02:5e:
fd:f9:b8:51:2b:1a:c0:4a:77:cd:bf:90:c3:56:dc:
c9:b3:e6:ab:62:8d:95:e8:36:86:49:da:6f:4e:ad:
3f:47:5e:46:1d:68:be:8c:1f:45:1d:30:51:aa:ab:
0d:6b:a7:d9:24:5d:f8:21:bb:84:08:2a:f9:98:4d:
b3:c6:c7:fe:95:11:3a:70:d3:2b:56:c3:26:b5:2b:
10:a0:44:0b:5d:da:66:00:d8:f1:ab:eb:8e:49:bf:
4f:11:36:b9:2a:2e:56:9c:fa:b7:57:18:9e:1b:77:
3c:5e:49:cb:0e:3d:71:cf:09:52:74:27:72:2d:85:
9f:06:c9:e8:1e:d8:f3:4d:51:58:ee:35:72:25:51:
c5:fa:81:7a:f6:bd:a5:24:6b:f5:ca:de:f1:36:c9:
fb:af:e7:1e:34:33:15:f9:1c:eb:30:bd:c1:1c:ff:
0a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DF:7A:46:58:98:BC:6C:F0:22:99:E8:57:76:31:A4:7C:31:72:7C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w996RliYvGzwIpnoV3YxpHwxcnw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.252.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:3d:5d:11:34:b7:43:7e:b3:23:56:28:12:39:84:c9:c5:13:
14:8e:89:9a:29:89:70:02:26:19:01:2b:82:53:a3:36:29:03:
97:dd:4d:f6:7a:b2:11:62:95:bc:08:43:d5:b1:e0:3e:f6:fa:
96:2e:62:9d:10:c9:ad:9f:93:e1:28:9d:9e:85:43:fa:44:ce:
c2:6f:9c:24:76:4d:11:62:0e:1d:1e:58:59:b1:20:ce:5b:6b:
38:b0:fd:c7:54:4b:f0:f6:95:4f:47:46:9e:09:b5:8b:80:ef:
40:7c:63:df:7e:07:4d:fb:f6:7e:b4:97:c3:b0:17:e1:93:b7:
e2:e8:e1:22:25:06:77:d8:3e:6a:0d:e4:d1:77:49:ee:59:8e:
04:bc:7d:fa:18:7a:8b:06:ed:e5:a2:7a:b0:62:d2:79:62:e2:
5f:bf:75:3c:4a:fc:e4:6e:8b:0a:a0:32:02:a7:e9:b7:b6:68:
9b:af:c4:5d:c1:16:4b:7e:a0:10:60:49:e6:af:40:ea:03:33:
bf:07:e8:38:94:41:1b:fd:e2:59:d2:98:36:5f:d4:04:0c:4e:
1c:b7:ce:58:12:5d:3a:50:52:1f:55:71:25:60:d8:21:17:e4:
f9:53:d0:38:af:2b:5c:53:96:b5:99:4b:74:e0:f4:1b:a0:c9:
64:dc:2c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:12 2023 by rpki-client on console-fra.rpki-client.org