Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zPIT_qGFt7eNOjbNCLb8xrYXBDM.roa
File: zPIT_qGFt7eNOjbNCLb8xrYXBDM.roa (raw, json)
Hash identifier: dRB/LYt7GdM2UnxjXyFvakNm059fJqb53ynAqRRpBBQ=
Subject key identifier: CC:F2:13:FE:A1:85:B7:B7:8D:3A:36:CD:08:B6:FC:C6:B6:17:04:33
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zPIT_qGFt7eNOjbNCLb8xrYXBDM.roa
Signing time: Thu 15 Sep 2022 02:45:12 +0000
ROA not before: Thu 15 Sep 2022 02:45:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.123.128/25 maxlen: 25
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CCF213FEA185B7B78D3A36CD08B6FCC6B6170433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:37:4b:ea:39:21:21:1f:f9:b6:af:ca:8b:d3:
0f:a5:c6:2b:a6:01:95:84:c1:18:e3:4d:88:86:3f:
ae:8c:54:44:01:eb:dd:92:b5:6b:d4:2e:0d:47:ca:
69:69:88:1d:2e:67:33:11:5a:32:6e:99:4b:bd:b7:
e1:d2:20:33:5a:72:5a:c7:67:22:76:a5:d3:77:81:
b9:5c:49:94:fa:38:10:d2:0e:5d:05:4b:fb:b5:e3:
3b:cf:c2:2d:bf:29:46:f7:de:70:62:0d:8a:78:0c:
97:5f:33:16:23:fa:5b:c0:32:12:bf:19:3c:6e:7b:
96:a4:67:23:6c:ec:31:3f:19:d6:99:92:e6:71:cb:
69:33:2f:18:c6:1e:f6:b9:d6:92:92:d7:6f:dd:95:
17:3d:49:60:25:4b:15:68:d4:92:0a:f8:9e:be:f1:
6e:3b:ee:73:91:ef:f9:ae:18:13:ed:7a:7b:3e:1d:
69:5b:cf:f4:70:ca:af:e9:ee:1b:ef:62:18:31:58:
0a:36:ea:ba:53:73:a2:4d:bb:98:81:09:42:ad:0f:
9f:3e:33:82:c3:73:b7:08:05:ce:60:b2:fd:1d:35:
8c:03:c9:15:25:80:70:3b:3e:88:f7:26:21:28:2c:
33:fb:8c:b8:4f:ca:09:c3:33:41:cf:72:06:72:01:
3e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F2:13:FE:A1:85:B7:B7:8D:3A:36:CD:08:B6:FC:C6:B6:17:04:33
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zPIT_qGFt7eNOjbNCLb8xrYXBDM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.123.128/25
Signature Algorithm: sha256WithRSAEncryption
21:c9:38:0a:78:d2:11:49:b9:55:d9:3b:c5:0b:a6:1d:53:9a:
a6:84:6c:b0:d7:b1:5f:34:b7:6c:28:6a:6e:1f:99:30:f0:16:
7f:41:84:56:8d:85:9f:17:27:27:f4:c0:cc:e8:16:6d:b9:a1:
ba:c3:a0:a8:da:14:76:0f:b8:8e:c7:f0:da:d4:bc:35:18:2d:
b6:2c:07:3c:e9:67:88:e2:08:33:69:50:31:de:90:6c:23:ce:
b5:86:c9:be:9a:ed:0e:7d:22:ba:74:99:5f:0a:86:4c:db:c0:
ea:59:1b:74:e8:f6:a4:6c:e6:7e:9d:cb:eb:45:1a:a8:fe:76:
c3:40:30:81:d8:e4:a2:01:10:12:1c:ab:a7:4e:a3:7c:96:5d:
36:10:dc:05:91:eb:75:06:47:7b:6c:af:f2:d1:fe:9a:42:d0:
c0:70:dd:24:97:fa:09:cc:2a:94:8b:78:23:ed:4f:d7:6a:4a:
43:3e:f9:f5:85:b5:db:4e:0c:d3:5c:ea:9e:aa:f6:c3:ce:5f:
a9:62:af:36:71:61:04:da:18:03:4a:8c:6e:83:eb:46:fc:a8:
1c:bb:26:4f:58:0d:66:ff:ab:32:f8:3b:d3:8b:8c:e6:70:a0:
69:1c:dd:77:a2:42:bf:a2:9a:60:50:21:b1:6b:c9:35:1a:8e:
9c:6e:8d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:32 2023 by rpki-client on console-ams.rpki-client.org