Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/09RjGq2M79wNHbBjKgB-wcaYYP4.roa
File: 09RjGq2M79wNHbBjKgB-wcaYYP4.roa (raw, json)
Hash identifier: 2krcW2RkYdOjn7yGq6YJpV7kjw4ZDTHDsLMn1WCgSWU=
Subject key identifier: D3:D4:63:1A:AD:8C:EF:DC:0D:1D:B0:63:2A:00:7E:C1:C6:98:60:FE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/09RjGq2M79wNHbBjKgB-wcaYYP4.roa
Signing time: Thu 15 Sep 2022 02:53:33 +0000
ROA not before: Thu 15 Sep 2022 02:53:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.200.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D3D4631AAD8CEFDC0D1DB0632A007EC1C69860FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:68:10:d6:74:80:d2:f7:7d:f5:23:13:f0:2a:
df:99:b6:0f:34:a0:ba:0e:33:c1:44:0d:b0:fc:49:
ec:e3:95:ec:3f:64:9a:c7:ba:3f:67:1d:10:db:38:
49:49:7b:92:8a:fd:1d:ce:68:66:c3:07:e0:68:f4:
5c:67:21:33:2c:6f:f9:d4:40:21:0e:4d:57:d5:7d:
11:1f:5a:15:4d:ba:73:9d:f5:64:bc:b9:df:f0:3b:
50:16:77:38:da:dc:63:a1:3c:e6:e4:7d:8e:f1:46:
f8:02:e0:6b:a0:8e:c8:c2:8b:a1:9e:14:8c:49:6d:
13:56:da:fd:46:10:af:b8:e4:7b:cf:6a:96:b2:72:
98:61:87:6a:cf:ab:90:8e:3e:31:21:0d:d6:6a:17:
28:eb:6d:03:34:17:43:10:8c:4b:04:9a:c9:10:d7:
7e:72:a1:2a:ab:68:cb:18:db:5b:55:95:e9:82:1b:
27:78:7f:41:1b:bd:35:ab:98:5f:22:bc:b5:10:03:
f3:8d:ba:01:27:46:85:a1:e9:d2:d5:71:5c:36:2f:
52:87:a0:04:4f:a4:ec:f1:18:03:ab:32:14:01:5c:
63:c7:74:ea:6d:a1:f0:98:7c:ac:a3:67:07:f0:c9:
a6:24:0d:c4:86:29:73:fe:39:97:51:4b:2c:e7:a2:
fd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D4:63:1A:AD:8C:EF:DC:0D:1D:B0:63:2A:00:7E:C1:C6:98:60:FE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/09RjGq2M79wNHbBjKgB-wcaYYP4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.200.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:df:b4:31:b8:2b:86:a9:60:ff:ee:56:3a:80:50:7f:c4:eb:
d5:ee:9d:e4:ad:66:1a:b3:16:ff:a0:f3:be:08:66:46:b1:0f:
99:79:af:9f:50:10:f8:cb:47:64:e5:5c:15:fa:eb:fd:56:97:
bc:64:cf:ca:03:86:15:89:17:5b:92:ab:13:86:5e:9a:a9:21:
0a:66:d5:74:13:ed:63:d7:38:e0:d0:6a:ff:76:35:cf:d8:5b:
57:70:ff:7d:17:b3:19:9e:dc:8d:4e:8f:34:3a:c6:2b:8a:cf:
ed:f3:f8:c7:86:9e:e8:af:07:c7:b7:23:8c:88:39:f4:a6:32:
a9:04:c0:8c:29:6c:50:41:f7:e6:38:ac:8b:44:e5:17:c3:f2:
bb:f6:13:c2:bf:17:a0:c4:8e:5c:28:36:b5:ba:55:fa:1f:58:
9b:1a:e8:cb:b1:0f:ca:46:1f:fd:b5:e1:65:a0:57:8b:6b:f1:
d8:d8:07:f7:d1:9c:6e:43:ba:00:26:03:bf:5e:e1:2e:d8:70:
5f:71:d5:03:08:5b:00:f8:3d:40:77:8c:0b:e6:65:45:86:fd:
61:0b:38:54:c8:2f:3a:c4:0e:1a:47:f4:b0:cd:1e:62:a6:cc:
6a:43:de:1d:0c:e5:8c:a5:95:1d:d5:30:0f:10:eb:af:c6:4c:
2f:f0:dd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:19 2023 by rpki-client on console-fra.rpki-client.org