Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yqEN_C020TYAJ12N2jE4fxj7QCk.roa
File: yqEN_C020TYAJ12N2jE4fxj7QCk.roa (raw, json)
Hash identifier: 6rdFc08HsjHNG7Y4Tx82aCQa74PYhNpfj4k7acZed/Y=
Subject key identifier: CA:A1:0D:FC:2D:36:D1:36:00:27:5D:8D:DA:31:38:7F:18:FB:40:29
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 232F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yqEN_C020TYAJ12N2jE4fxj7QCk.roa
Signing time: Fri 25 Nov 2022 04:42:10 +0000
ROA not before: Fri 25 Nov 2022 04:42:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 123.195.172.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9007 (0x232f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CAA10DFC2D36D13600275D8DDA31387F18FB4029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:62:d6:0e:7f:cb:45:93:6c:bc:57:f2:0c:
fa:d9:7e:5f:c4:ab:98:44:fb:d8:47:cc:f5:dc:ec:
f9:8e:af:e1:6c:30:eb:19:74:f5:4c:c5:ad:16:32:
14:5c:5d:35:f2:c6:af:87:84:0b:56:6c:7b:36:93:
bc:ee:89:b4:11:81:0b:42:a6:6a:6e:f4:09:89:0a:
91:b8:af:c8:2b:d0:39:53:a9:d8:35:75:fe:5b:90:
d4:94:ea:59:5e:88:72:b4:99:39:8e:49:8c:3c:e1:
e1:4e:73:60:73:6e:a0:d9:11:4d:4e:7f:b2:7f:62:
3a:ff:b0:12:c5:17:b5:c6:b3:ac:29:f4:42:65:5d:
ea:f0:a2:a1:ea:9b:d1:e4:b2:7f:2d:b6:89:f5:62:
8d:df:5c:ce:28:3b:db:4a:f3:81:46:a9:53:50:09:
43:f1:a2:a0:a6:bb:bf:3d:35:44:63:97:79:00:50:
31:78:80:a7:dd:bd:3a:95:12:4d:bb:0b:e8:4b:30:
b8:5f:26:ac:31:64:67:b2:5d:25:9c:e0:d4:3e:39:
09:ef:f9:9b:67:0e:b1:01:36:a7:0d:72:c1:94:37:
0e:10:88:53:96:ec:4f:5b:86:6a:d5:cb:96:c0:22:
a7:a0:94:80:ee:4d:ce:3f:5d:74:ed:ca:24:46:32:
02:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A1:0D:FC:2D:36:D1:36:00:27:5D:8D:DA:31:38:7F:18:FB:40:29
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yqEN_C020TYAJ12N2jE4fxj7QCk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.172.0/22
Signature Algorithm: sha256WithRSAEncryption
75:b1:80:ee:bf:3b:66:af:30:de:5a:82:ed:cf:61:f4:00:5f:
6a:6b:ba:8c:c1:df:ed:0e:8f:07:63:4d:c4:ff:71:52:94:d9:
e2:8c:38:7b:d7:73:a0:60:b0:77:5a:08:14:97:c4:6e:e8:8b:
3a:b3:ec:f3:31:64:84:6c:08:1c:f6:46:35:e1:6b:32:75:3f:
7e:62:11:2e:92:ad:ea:65:6a:97:b2:8e:46:17:79:b4:d6:c1:
d8:7d:42:6f:f7:d6:01:c1:c8:6e:ff:ac:c9:df:de:8e:9d:78:
a5:cc:bc:34:c8:cb:fd:7e:bb:80:91:28:63:56:4e:8b:13:f3:
34:87:5b:01:f4:60:52:c3:e5:1b:43:5c:4e:c2:3b:e1:c1:dc:
b8:8f:83:73:dc:8e:54:cc:4d:fd:80:4a:80:9c:fe:ab:7f:a6:
4e:94:d1:76:87:3f:ef:e6:d7:dd:51:3c:65:5f:01:a5:ff:2d:
21:50:e8:91:11:51:f4:a5:55:c4:c7:35:c8:12:d7:a5:1e:b0:
84:38:32:8c:b3:fe:bd:f5:88:48:8f:c5:5b:54:ed:7b:7f:22:
f4:c8:46:91:20:75:50:53:ac:da:ea:0c:05:ef:b9:88:a9:76:
d3:87:4c:b0:6d:1a:de:1d:7f:69:ea:87:27:ec:c4:4a:fc:34:
bc:cd:3b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:37 2023 by rpki-client on console-ams.rpki-client.org