Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xT_So7ppimVK1etIai8RHphQ0Ws.roa
File: xT_So7ppimVK1etIai8RHphQ0Ws.roa (raw, json)
Hash identifier: RLsfXS4CTkUx8Zg7zjp0ZJ6HxlIbxdE8Fr+OPb1sw2s=
Subject key identifier: C5:3F:D2:A3:BA:69:8A:65:4A:D5:EB:48:6A:2F:11:1E:98:50:D1:6B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xT_So7ppimVK1etIai8RHphQ0Ws.roa
Signing time: Thu 15 Sep 2022 02:53:21 +0000
ROA not before: Thu 15 Sep 2022 02:53:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.192.8.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C53FD2A3BA698A654AD5EB486A2F111E9850D16B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:aa:7f:36:43:8c:3e:ff:3d:62:12:38:16:
ed:86:9f:1f:2c:ea:47:61:db:38:8b:17:eb:c2:b0:
6f:01:b7:59:33:34:dc:15:ee:c5:c6:d1:6c:5c:a3:
1b:b6:0e:ca:f3:bb:70:70:04:98:0e:45:76:51:63:
e1:2f:b1:a4:05:c2:28:09:36:b6:46:96:36:b2:01:
35:d1:f1:e1:ef:d2:61:d3:59:28:4b:ed:0c:1e:63:
34:9c:f9:ac:05:8a:8d:5b:54:22:60:89:b0:96:5b:
29:17:8f:f1:6a:2a:32:98:48:8a:55:a6:97:9d:99:
98:72:60:6f:4c:ff:f8:3d:b9:4a:1a:5b:21:69:b4:
07:3c:c6:c4:82:98:a8:f0:6d:9d:2a:b8:c3:32:12:
e7:43:93:9b:32:03:06:07:18:21:38:de:38:59:34:
d6:ef:fc:77:d1:a8:29:b7:c3:9b:1f:82:c5:1b:fd:
78:33:ff:cd:28:44:a0:91:9e:ca:a8:fc:db:c6:f4:
45:23:89:0e:ec:5a:18:fa:4a:9b:71:47:83:df:9e:
1a:52:05:dc:79:93:a4:dd:14:4c:63:d6:42:fa:9f:
0b:5d:73:8e:e7:b3:87:b0:cb:95:08:49:f3:8a:d4:
6b:a3:9a:92:f6:99:04:94:93:9b:1b:80:c3:30:3b:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3F:D2:A3:BA:69:8A:65:4A:D5:EB:48:6A:2F:11:1E:98:50:D1:6B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xT_So7ppimVK1etIai8RHphQ0Ws.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.8.0/21
Signature Algorithm: sha256WithRSAEncryption
9f:1f:d4:35:6b:bd:83:56:d3:3c:1b:59:fa:21:22:53:bf:d3:
3c:e5:b5:76:dc:be:b3:e3:c0:a7:bb:1b:5f:9f:4a:7f:c1:f8:
f6:99:16:0a:7a:c6:79:fd:32:5b:05:a6:b8:83:3a:b3:08:18:
e8:55:58:99:44:aa:cf:6c:89:1a:28:53:41:ea:6c:e3:53:e6:
dc:9a:3f:e0:73:ef:b9:1e:1e:d0:0a:76:e7:db:12:90:2c:04:
0d:1b:0b:f9:6e:8d:66:4c:cb:c6:47:d3:f0:d3:b0:7a:22:2a:
f8:ff:16:78:c0:e8:20:b3:cd:65:f1:0e:5d:87:ed:b9:0b:2c:
f4:59:f2:9b:0d:54:96:15:d3:69:64:41:0a:e1:c6:38:7f:8a:
3a:8c:c4:fc:ae:ba:88:a4:fc:fb:e0:29:48:ef:53:b8:1c:c0:
5c:f6:7d:c6:f9:8f:ef:72:3a:d4:0e:9a:04:06:de:09:53:80:
22:09:06:1d:d1:1a:14:89:91:23:2b:95:97:38:cd:de:9b:79:
24:d4:27:fb:a0:44:42:9b:d3:61:00:da:2c:56:db:e5:8b:c8:
79:55:5c:50:11:88:0a:6b:99:a6:04:18:2b:03:23:66:f3:f8:
25:b4:0b:64:e8:7c:19:a8:24:6c:2d:d5:9e:dd:35:4d:c4:74:
ee:bf:18:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:42 2023 by rpki-client on console-fra.rpki-client.org