Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xWuT-e4NwkIhF1ZMj475FrhfYsc.roa
File: xWuT-e4NwkIhF1ZMj475FrhfYsc.roa (raw, json)
Hash identifier: VIj4m/ps2YKsvDEq5+MgTDH+o4K33k6BxyHeGlsRXM4=
Subject key identifier: C5:6B:93:F9:EE:0D:C2:42:21:17:56:4C:8F:8E:F9:16:B8:5F:62:C7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xWuT-e4NwkIhF1ZMj475FrhfYsc.roa
Signing time: Thu 15 Sep 2022 02:52:53 +0000
ROA not before: Thu 15 Sep 2022 02:52:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 118.233.104.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C56B93F9EE0DC2422117564C8F8EF916B85F62C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:8f:ba:e6:89:81:4a:42:15:bc:80:7f:38:
49:5a:53:ab:93:f3:d2:36:3e:b0:e9:83:95:89:0b:
f5:5f:a3:19:05:f0:aa:7d:35:1a:ca:ce:b1:1b:30:
27:2e:78:11:98:bb:a7:53:fd:57:2f:ca:8c:be:ae:
0a:44:50:96:e9:45:95:42:39:af:69:c8:5d:29:96:
c7:6c:ff:bb:13:2f:b0:57:ee:27:12:ee:f7:6b:bf:
05:48:7a:a1:9e:16:dc:f3:1c:6b:02:99:70:f2:c9:
88:e6:ab:59:de:7b:a4:13:14:29:38:68:da:c5:0c:
a8:d0:a9:c7:eb:a2:c8:29:fa:da:f6:18:fa:86:bc:
23:15:51:32:28:89:14:03:8c:dd:57:49:82:76:ec:
20:77:ae:9a:56:85:29:7f:86:82:83:72:a4:e3:01:
95:fd:e9:f8:c1:d1:ef:40:f4:07:86:8d:fd:76:54:
d7:06:05:60:83:7c:57:47:a3:88:91:ca:0f:de:40:
54:4a:6d:a0:61:19:fa:3c:d2:d3:ff:74:e4:79:8f:
cf:9e:9a:14:71:03:dc:27:53:03:9b:45:b4:71:18:
e9:bb:ae:99:f5:00:54:86:84:37:0c:5a:1d:a5:ec:
d5:d3:6d:a0:9b:1e:c1:d7:37:9d:aa:19:2b:ee:29:
43:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6B:93:F9:EE:0D:C2:42:21:17:56:4C:8F:8E:F9:16:B8:5F:62:C7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xWuT-e4NwkIhF1ZMj475FrhfYsc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.104.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:87:49:34:9b:c9:c5:b0:73:e9:f5:e5:ac:4d:46:67:0d:7b:
af:99:29:30:b7:d7:0e:e0:7b:e4:a4:0c:e5:97:90:c4:05:f2:
b4:25:97:bc:d7:0e:ac:8e:56:cd:e9:82:ee:d4:a0:8c:6c:3a:
dd:e1:b9:ea:4f:27:33:da:77:23:89:d6:79:a6:50:e3:1f:7f:
62:af:08:04:c0:68:55:d3:70:3f:1b:83:31:ef:2c:1e:92:20:
11:b6:d4:d3:df:34:cd:ad:2d:df:08:cc:c8:aa:28:53:4d:56:
73:39:dc:54:0a:89:72:45:3e:8b:42:f5:ed:57:cd:6d:a7:be:
20:fa:b4:f0:f6:a9:44:44:46:3f:c2:85:2f:37:44:ff:53:7c:
c1:58:f5:1c:47:56:02:d1:af:60:27:8d:4a:cc:32:90:c6:5e:
d0:cf:a0:42:be:06:a5:f1:27:29:58:14:c0:6f:4a:32:6f:6a:
ad:e4:ed:5d:68:85:ab:44:53:5e:ea:23:be:a0:80:89:ff:ba:
f4:aa:36:6c:fc:6b:8a:3e:5d:77:ff:04:96:66:0e:f4:5d:ee:
39:e7:5a:31:9c:1e:58:c5:d6:27:78:3a:eb:52:77:c0:4e:75:
ef:31:24:56:10:ae:b9:09:9c:f0:24:a2:81:03:7f:a1:ea:6d:
6c:f9:ea:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:42 2023 by rpki-client on console-fra.rpki-client.org