Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wP6juGhCofa70pPYrkKBJK59vNA.roa
File: wP6juGhCofa70pPYrkKBJK59vNA.roa (raw, json)
Hash identifier: Spe6PJ7+hOMr6OoUBwFxs6m53AB2PaIDkrPS6+8/jvE=
Subject key identifier: C0:FE:A3:B8:68:42:A1:F6:BB:D2:93:D8:AE:42:81:24:AE:7D:BC:D0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 223D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wP6juGhCofa70pPYrkKBJK59vNA.roa
Signing time: Fri 25 Nov 2022 04:40:56 +0000
ROA not before: Fri 25 Nov 2022 04:40:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.194.232.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8765 (0x223d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C0FEA3B86842A1F6BBD293D8AE428124AE7DBCD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:07:3d:b5:6b:a8:58:05:32:40:a1:c6:50:
52:da:d8:69:33:f0:a9:c1:92:cd:aa:c4:24:66:59:
db:03:ad:cb:bf:f4:24:3b:54:5a:8e:fc:4b:cf:98:
52:e3:8d:cf:0a:c9:24:bb:a5:64:c1:19:ca:46:00:
15:2e:92:2d:2a:cc:60:80:97:b6:d9:b3:07:d5:59:
ec:dc:57:73:de:ee:3a:30:0a:8b:0f:96:ac:d1:04:
b4:8b:ea:68:5e:a2:e6:a7:67:5e:14:3f:81:0d:65:
2c:16:ca:49:e6:20:0f:a7:8d:5d:35:de:61:d2:9b:
91:d8:94:e3:f1:3e:c5:c4:f7:bb:a8:e4:fa:d2:b6:
8b:87:1e:e3:5b:39:1d:2f:b0:e1:39:d6:cf:6d:dd:
8d:07:40:c5:0a:a8:ac:13:86:78:73:3d:f7:2c:55:
70:cc:ca:d9:1a:00:1b:a9:f3:75:d9:de:33:45:ec:
d8:bb:d0:5a:87:39:0f:47:90:3a:b1:41:42:77:fb:
6f:ee:74:d8:85:8d:fc:a4:b8:1b:4b:29:23:2e:5e:
44:0f:ca:b3:14:28:bd:db:94:46:02:c1:50:a2:9a:
89:55:61:99:61:b9:d8:1c:ca:1b:05:e6:8a:02:c9:
60:45:a3:14:6f:c4:f2:7f:5b:5a:d1:cc:1c:55:5b:
cb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FE:A3:B8:68:42:A1:F6:BB:D2:93:D8:AE:42:81:24:AE:7D:BC:D0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wP6juGhCofa70pPYrkKBJK59vNA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.232.0/21
Signature Algorithm: sha256WithRSAEncryption
b4:35:c1:66:31:16:44:60:80:01:4c:90:f5:73:06:63:37:b5:
3e:79:08:39:34:25:52:44:ed:8a:81:a5:be:87:82:64:83:b0:
22:3d:f7:45:90:53:bd:15:4c:25:4f:f9:d6:43:39:01:31:d6:
10:6a:3d:84:0b:84:f9:3b:ca:61:0f:f2:1c:32:20:14:f7:71:
04:ed:fe:a8:a2:48:b4:df:12:27:e9:2f:4b:4f:38:81:71:8f:
00:42:0d:d5:fb:af:6c:9b:d8:22:85:3d:13:6b:2c:e6:31:26:
3c:08:7a:51:bd:aa:60:1c:97:92:21:9d:a2:5d:f2:c3:7f:aa:
de:52:cf:d6:35:c9:c9:f4:84:6e:e8:dc:2b:9f:e3:20:02:5b:
a4:87:70:5c:8c:60:39:a7:b2:5a:16:ab:cc:08:93:da:6b:8d:
51:fe:3f:c1:5b:d3:28:e4:c8:10:a0:0f:fa:7b:80:0e:80:bd:
00:a2:34:ee:95:fc:b6:a0:60:40:2a:6e:3c:ec:ea:34:53:46:
ef:60:d5:df:b8:5d:d4:d6:4c:6b:51:4d:ab:cf:f5:0a:a2:ef:
a7:73:a1:97:12:15:f5:0b:b6:7c:2e:4a:ca:66:72:b3:19:2e:
ad:eb:a1:32:1c:df:99:74:56:b6:94:27:1f:a5:86:f2:65:3e:
54:48:1b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:36 2023 by rpki-client on console-ams.rpki-client.org