Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zrUIvFNcejrHmDknnvzW7ROrTbY.roa
File: zrUIvFNcejrHmDknnvzW7ROrTbY.roa (raw, json)
Hash identifier: 4BHovP0T/ccm/y+2wPnSl8cgPRpGSJ2wlonDafhIq2Q=
Subject key identifier: CE:B5:08:BC:53:5C:7A:3A:C7:98:39:27:9E:FC:D6:ED:13:AB:4D:B6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2023
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zrUIvFNcejrHmDknnvzW7ROrTbY.roa
Signing time: Fri 25 Nov 2022 04:38:22 +0000
ROA not before: Fri 25 Nov 2022 04:38:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 211.76.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8227 (0x2023)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CEB508BC535C7A3AC79839279EFCD6ED13AB4DB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d5:77:38:e9:b6:4b:29:8d:5a:67:c3:de:02:
d7:e1:a3:c3:8e:cc:ce:5f:06:8f:35:f1:6f:17:8f:
a1:26:9f:35:10:4d:b5:ba:c0:80:5b:68:09:c5:bb:
f6:ff:3c:76:9d:24:a9:17:ab:76:2b:7d:7b:f2:14:
ec:00:d9:bb:23:7d:4c:e3:dc:e8:36:ac:05:d1:69:
be:62:1c:b3:52:dc:62:7b:d6:5b:ce:85:db:09:99:
32:20:b3:60:ee:e2:db:3e:27:f4:92:1b:53:c6:57:
25:83:9f:16:fd:d6:61:44:71:06:56:d4:1c:45:34:
8e:18:99:86:e2:0f:a5:ad:87:d1:20:a4:06:9b:1e:
f9:2b:75:1c:9a:23:70:13:71:99:58:c9:a7:bc:d9:
e7:22:3e:aa:cf:96:ec:d7:b4:27:56:c7:3c:18:60:
f5:61:27:12:ce:a2:0d:fa:2d:38:c2:d3:db:cd:b4:
18:ae:c8:b8:fe:fa:04:56:4e:85:53:17:34:50:3a:
e2:da:01:19:b3:2a:48:f7:d3:9e:18:f1:6c:44:98:
3b:13:16:c1:de:82:87:fc:6a:b1:85:96:39:48:29:
a9:d4:aa:1e:b6:86:eb:34:8c:f2:14:68:be:7d:54:
54:f5:e4:16:fb:86:20:cb:b0:f6:52:d0:64:2c:43:
45:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B5:08:BC:53:5C:7A:3A:C7:98:39:27:9E:FC:D6:ED:13:AB:4D:B6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zrUIvFNcejrHmDknnvzW7ROrTbY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.121.0/24
Signature Algorithm: sha256WithRSAEncryption
03:95:63:46:58:2a:83:87:21:3a:e4:0d:cb:66:cb:09:85:08:
5c:81:e5:a9:a0:c2:5b:c1:e7:32:a1:20:89:c0:61:e0:24:0d:
25:22:38:4c:1d:e8:a1:96:2f:e7:e5:0b:59:d2:4c:f8:d2:14:
5f:50:5f:e3:a7:49:2d:db:28:b5:e9:db:38:e4:13:59:82:25:
5c:eb:89:03:a4:fe:c9:c8:70:bf:5a:90:6c:35:5f:81:e5:ef:
90:09:9a:4c:0b:30:f6:10:8a:b1:5c:71:a6:50:4e:09:e7:ce:
c1:60:f4:21:0a:fa:0a:8f:9f:19:ca:2d:8c:dd:11:77:ee:e2:
1d:bd:ab:d6:2d:3a:3b:8f:96:b5:38:a1:4c:40:a2:ed:0f:e1:
74:b2:e6:84:bc:f7:51:6a:7a:23:47:90:0e:9f:3a:8e:24:53:
43:f5:ae:c2:27:65:92:4b:70:15:f3:13:d8:f5:3f:f6:3f:87:
80:82:fb:1d:77:d2:39:e6:2d:74:ac:99:62:b1:e4:4f:9f:95:
3b:19:7e:9c:5c:6d:41:7a:cb:ac:dc:e1:e3:cb:87:6a:70:b7:
d3:49:75:f7:7a:e3:dc:4a:4d:95:25:91:70:03:6f:92:e0:fb:
c2:5a:ba:84:fe:95:e3:d4:b8:ad:f3:20:c6:76:74:d3:e5:af:
2c:c2:15:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:37 2023 by rpki-client on console-ams.rpki-client.org