Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zvhznbKEtwN4QAs9XoI8utFnjOk.roa
File: zvhznbKEtwN4QAs9XoI8utFnjOk.roa (raw, json)
Hash identifier: PXQ0hQJtiyNVaTIg12RcbVRaVIjo4QzAsaQRxiwhyyk=
Subject key identifier: CE:F8:73:9D:B2:84:B7:03:78:40:0B:3D:5E:82:3C:BA:D1:67:8C:E9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2228
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zvhznbKEtwN4QAs9XoI8utFnjOk.roa
Signing time: Fri 25 Nov 2022 04:40:51 +0000
ROA not before: Fri 25 Nov 2022 04:40:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 211.76.121.128/25 maxlen: 25
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8744 (0x2228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CEF8739DB284B70378400B3D5E823CBAD1678CE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f1:d1:42:65:d5:81:01:da:c0:a8:a5:e0:91:
9d:0e:e4:38:59:cb:ad:78:48:b3:8b:05:27:30:44:
4c:fa:ea:80:1c:4c:49:5f:f0:fd:02:ee:f7:e5:5f:
b7:c0:19:9b:e1:0b:2e:c5:18:b5:74:b0:6b:85:d4:
e7:d8:6b:e0:fd:d6:c6:46:9d:c2:53:45:55:fd:6b:
39:04:3c:b3:8d:cb:02:88:2a:5d:e7:c4:66:14:a9:
35:b8:a4:65:f2:74:38:c6:3a:aa:20:4d:3c:59:3f:
03:72:23:40:b1:a1:87:1e:fe:ec:d0:c2:59:b6:58:
bd:86:74:16:b0:42:fb:a3:ec:22:f7:c0:4a:7a:b4:
75:19:9c:0d:01:14:2c:da:06:fd:ae:7e:f6:be:34:
70:83:98:74:32:a9:aa:1f:cf:69:73:03:0f:af:e3:
69:b9:db:c3:1b:ee:b2:27:4a:c5:dd:bb:5b:0f:63:
d8:c7:22:46:a5:f9:12:6a:c0:bd:72:0e:f4:0b:88:
69:dd:fb:d8:fc:96:d1:78:a4:78:ed:5e:4a:5c:ea:
42:aa:1e:6b:a1:7c:56:b6:0f:ba:69:45:17:aa:7e:
1c:f8:4b:d2:7e:5b:d7:ba:68:f0:d6:5a:44:85:2c:
f4:83:79:72:95:11:7b:06:a1:3d:39:11:3c:74:60:
29:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F8:73:9D:B2:84:B7:03:78:40:0B:3D:5E:82:3C:BA:D1:67:8C:E9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zvhznbKEtwN4QAs9XoI8utFnjOk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.121.128/25
Signature Algorithm: sha256WithRSAEncryption
74:e9:06:c1:f6:64:8e:9c:7d:7e:2a:01:c1:d7:4f:29:d3:2f:
6f:30:96:54:8d:dc:7a:71:00:5f:80:57:45:56:2d:3c:ef:0b:
c3:18:e0:11:6d:3d:ea:61:db:aa:53:40:2e:63:f7:41:82:dc:
3d:95:74:39:22:bc:35:12:d7:ab:83:c3:18:c7:36:33:d2:2c:
4f:bd:c9:0b:1f:a3:80:53:3e:ab:06:ec:4a:c0:5c:10:3e:06:
c4:b3:f1:e0:97:35:29:c7:ae:80:dc:f8:00:f4:b1:5c:3f:e2:
ff:7b:06:d1:74:7f:ca:b6:43:df:44:4d:62:78:d1:5e:34:08:
69:7c:b3:6b:4f:c5:e9:5a:97:40:f1:d4:29:00:b5:c2:64:7a:
8f:69:25:1b:d2:c6:e2:4a:4d:03:f0:64:c9:56:dc:f9:60:1d:
d2:94:6d:86:1b:e2:9c:12:5a:b9:2d:17:b9:bc:23:24:38:51:
8f:48:07:7f:8b:ce:5b:c7:c3:75:03:1f:26:5e:cc:e6:21:3b:
5d:7f:db:42:1a:d7:9e:a6:a5:05:f4:9c:d6:1c:fd:85:0a:c9:
9f:08:3c:aa:1b:22:8d:8f:a0:30:27:b7:06:30:4e:79:93:1c:
68:d7:b4:9e:99:59:5f:79:86:d9:b8:3f:b5:fb:07:8e:3c:b2:
6f:96:1a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:37 2023 by rpki-client on console-ams.rpki-client.org