Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-p4KQVCsiLrKOyOjbUQGJM6L3_k.roa
File: -p4KQVCsiLrKOyOjbUQGJM6L3_k.roa (raw, json)
Hash identifier: 3aDgTZm5budRaikD0Sl/YLDr1/AJlk178kW3SQEuRMU=
Subject key identifier: FA:9E:0A:41:50:AC:88:BA:CA:3B:23:A3:6D:44:06:24:CE:8B:DF:F9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2033
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-p4KQVCsiLrKOyOjbUQGJM6L3_k.roa
Signing time: Fri 25 Nov 2022 04:38:26 +0000
ROA not before: Fri 25 Nov 2022 04:38:26 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.212.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8243 (0x2033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:26 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FA9E0A4150AC88BACA3B23A36D440624CE8BDFF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f6:a1:5d:6c:24:c2:2c:6e:8d:c1:6f:08:b2:
27:95:a8:39:fd:3a:0f:ec:85:67:69:c0:b0:e2:fe:
73:96:3a:f1:35:a7:18:2f:e7:96:6c:cd:30:77:09:
a4:69:bc:b7:72:58:5d:0f:ac:c9:cd:a1:bf:c4:45:
96:f4:26:7f:ef:a7:4f:2a:ca:f8:da:ec:29:54:05:
09:90:fd:8f:8f:86:fc:f8:a1:3c:48:ef:92:e3:40:
c0:c1:c4:c6:ed:38:a6:00:9a:8a:93:1e:ef:3c:8d:
d1:ef:20:ea:ca:60:02:c4:c4:16:5b:18:ae:f5:ef:
99:d5:17:0f:28:bd:df:9c:83:72:d2:e7:03:e0:09:
4f:a0:9e:76:dc:02:07:ea:ee:ac:b3:10:38:45:43:
d0:99:98:9b:46:93:dd:4c:7d:c7:3e:ef:21:9e:6b:
e4:b6:1b:2a:10:9c:22:69:dd:0f:fd:2b:30:40:94:
42:40:9d:8c:34:7b:16:c7:dd:30:bb:ef:aa:60:8f:
4a:f2:6b:53:56:f4:81:b6:e5:2c:d3:0a:2d:dd:c3:
f1:c6:2d:44:e4:a1:64:04:37:e3:b6:c1:81:b0:bc:
8d:00:f6:3e:fe:da:41:3c:38:db:80:38:37:6c:fd:
a7:4e:92:3f:c0:24:3e:b0:de:36:58:bf:2f:63:e3:
fa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9E:0A:41:50:AC:88:BA:CA:3B:23:A3:6D:44:06:24:CE:8B:DF:F9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-p4KQVCsiLrKOyOjbUQGJM6L3_k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.212.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:dc:4a:89:b3:31:df:d4:48:61:01:b2:e1:a4:a0:f5:93:0d:
aa:0d:25:e3:14:b0:59:3b:7b:d9:b9:66:e0:30:12:d6:e6:4a:
51:bd:ab:c0:ed:00:53:21:9d:66:50:78:3e:35:b7:11:e6:1e:
bd:9b:8f:eb:52:ca:28:2c:a2:3e:50:0c:1d:59:1a:17:cf:fb:
9e:97:e7:aa:a5:00:01:c6:2e:47:2b:30:70:a8:48:5f:44:9d:
61:da:f9:73:08:10:cc:70:11:ec:99:f1:16:6c:ad:ee:79:ad:
6e:fa:7b:fa:3b:d2:27:8a:fd:45:fd:0d:bd:cb:ab:8f:ff:b1:
fa:14:f7:71:a4:35:4c:c8:ac:30:3c:56:7c:f6:5f:40:6d:af:
25:8a:5c:c0:60:44:f4:77:91:b8:a2:23:9d:15:71:87:a1:f4:
52:2d:38:16:ef:46:6c:53:ae:a2:5a:78:5c:a9:ab:c6:d7:87:
7d:e7:a4:f9:37:5f:0e:e7:a2:67:93:27:da:b4:ae:3d:4a:8c:
27:49:22:0d:e4:4d:3d:30:f9:53:33:83:9c:05:24:67:48:b1:
ec:eb:bc:d9:34:ba:cb:80:7c:cf:85:f3:77:30:a8:9c:81:fc:
7d:cc:48:d8:95:aa:b4:8b:1f:88:24:f3:ea:f1:ce:c1:fc:6a:
34:0a:9b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:46:59 2023 by rpki-client on console-fra.rpki-client.org