Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-E7ALy7xMuMd8a78tlXphfcsyNw.roa
File: -E7ALy7xMuMd8a78tlXphfcsyNw.roa (raw, json)
Hash identifier: naGy7cJBNmCqszEXsDOqh6wyo4zTnz2dIwcG1Lrl9es=
Subject key identifier: F8:4E:C0:2F:2E:F1:32:E3:1D:F1:AE:FC:B6:55:E9:85:F7:2C:C8:DC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2269
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-E7ALy7xMuMd8a78tlXphfcsyNw.roa
Signing time: Fri 25 Nov 2022 04:41:08 +0000
ROA not before: Fri 25 Nov 2022 04:41:08 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8809 (0x2269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:08 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F84EC02F2EF132E31DF1AEFCB655E985F72CC8DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3a:d8:a9:c1:ab:2e:86:19:06:2c:6f:3e:23:
3f:65:5b:7e:6f:77:78:39:6e:74:b5:04:88:c8:95:
ab:37:19:79:2f:c9:bd:3f:8e:cd:c9:d0:16:24:cd:
f6:38:48:0b:85:53:85:33:23:b2:51:34:2b:fe:49:
87:c2:b8:de:46:17:3c:32:ee:d8:85:02:6d:be:8b:
de:29:7b:f8:c8:34:c1:da:0b:4f:c0:a1:3d:85:d2:
c1:4b:06:34:c3:d2:55:06:b9:03:d5:f1:ac:2a:f6:
3f:92:72:52:fc:f3:04:a7:1a:e8:a9:58:91:00:b6:
6e:f6:c7:c0:24:4b:83:df:59:6d:c6:98:b3:56:1f:
cd:41:d8:25:4c:52:71:37:c3:fb:b1:b7:72:71:3d:
d7:67:08:9c:5d:43:ee:fc:71:34:10:0c:e4:7d:f2:
95:16:c2:78:07:5a:6d:23:5c:3e:fb:f9:81:fc:02:
6a:91:89:18:3c:0a:61:8d:12:1e:be:f9:e1:a5:42:
25:8a:72:a8:16:55:21:c6:1d:65:16:8f:c6:20:c7:
78:ef:7a:88:c9:cd:a0:a5:1b:c0:d2:b0:8f:c3:22:
3d:24:05:45:50:6f:44:7e:1d:b3:6e:81:8e:6b:df:
16:5d:4d:95:55:f5:a8:40:74:61:9c:48:f0:86:cf:
cf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4E:C0:2F:2E:F1:32:E3:1D:F1:AE:FC:B6:55:E9:85:F7:2C:C8:DC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-E7ALy7xMuMd8a78tlXphfcsyNw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.166.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:b1:f1:ae:b6:19:be:e8:32:3d:86:88:c6:aa:d6:77:8b:4a:
16:40:49:ad:b9:bc:23:91:1e:2e:3f:11:2c:19:c5:2c:c8:77:
7b:eb:8a:e6:f7:65:19:cb:c1:a9:51:8b:ea:47:02:ed:cd:2d:
9a:ac:ce:a8:c6:42:20:e2:43:3f:5d:be:e6:df:0a:0a:d5:12:
fe:4e:b4:aa:96:07:1a:92:4c:ee:3e:d5:a5:dc:f0:69:ac:78:
59:06:f0:b1:ea:db:a6:01:3a:54:5f:28:a2:b1:01:c2:ee:7b:
08:76:1e:11:5a:c2:86:2c:1f:2b:a2:13:df:f9:32:33:e2:7f:
b2:05:50:c8:a6:b4:4c:f5:84:5f:78:d8:31:15:4c:c9:21:23:
61:f3:3a:61:04:3d:e0:57:d4:23:e9:e5:53:68:0c:05:41:ed:
1f:76:c3:bc:13:8a:42:e9:11:fd:53:81:d4:41:58:3d:87:7a:
1f:36:f2:cc:93:52:76:e2:67:b7:4a:5c:6c:ac:55:13:e9:fc:
8f:fc:9a:dc:0d:86:0e:2a:c2:ec:ca:3c:67:d5:68:53:31:c4:
b2:62:36:0c:4b:ea:5d:96:4f:a2:80:c1:2a:78:20:96:f8:4b:
da:98:0a:f8:2a:fb:5b:5c:b6:f6:cd:ca:96:c5:32:45:96:41:
da:76:f3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:19 2023 by rpki-client on console-ams.rpki-client.org