Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5sdrHLRlON_OkR2yto9WWJED07Q.roa
File: 5sdrHLRlON_OkR2yto9WWJED07Q.roa (raw, json)
Hash identifier: G0F9RJjoB/BazXfBAEhMalZ7Iyos2fSLipayeO350Co=
Subject key identifier: E6:C7:6B:1C:B4:65:38:DF:CE:91:1D:B2:B6:8F:56:58:91:03:D3:B4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22A6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5sdrHLRlON_OkR2yto9WWJED07Q.roa
Signing time: Fri 25 Nov 2022 04:41:28 +0000
ROA not before: Fri 25 Nov 2022 04:41:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8870 (0x22a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E6C76B1CB46538DFCE911DB2B68F56589103D3B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cc:ae:60:d5:c6:b0:c3:cf:d5:c7:a2:fc:6f:
11:3e:bf:20:4a:53:67:f4:3a:66:91:93:2f:4c:1f:
6c:13:49:3c:36:80:c1:72:6e:48:7d:1f:ab:0b:4a:
5c:4d:90:85:b3:a0:e0:13:54:1a:af:b4:fd:ee:9e:
1f:c5:21:78:26:65:56:cd:a3:0a:f6:da:aa:4c:42:
5f:23:e0:5d:6c:b2:76:f6:fa:07:e4:2f:f0:1d:d8:
1e:04:f6:7e:64:ff:bc:6e:7c:06:a4:a7:ef:4f:fa:
c4:97:34:37:88:ae:81:ad:49:32:70:dd:a0:f6:99:
c5:9a:bc:e5:33:d8:5e:9e:ba:07:3b:3d:57:d6:58:
83:35:0b:aa:b2:f6:c6:ca:e0:88:91:89:09:8d:04:
b2:11:b4:bd:59:b0:08:ea:c2:ea:71:4f:17:a9:8a:
7f:81:e1:a0:25:f5:21:1e:95:8a:04:ac:ca:c0:5e:
b3:52:98:ac:14:6d:1f:b0:03:8a:7b:0d:1c:04:53:
af:59:1f:6d:2c:51:37:95:c5:ca:b0:e3:b5:79:e6:
8c:d6:fa:09:76:95:b2:28:f1:60:25:7d:70:02:75:
02:37:8e:f0:9e:1f:1e:a8:e8:b6:7d:aa:7f:ea:38:
a0:06:8b:15:8d:d6:7a:bf:35:9c:40:d8:76:90:8d:
a2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C7:6B:1C:B4:65:38:DF:CE:91:1D:B2:B6:8F:56:58:91:03:D3:B4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5sdrHLRlON_OkR2yto9WWJED07Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.131.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:18:fd:3d:f3:0f:a6:ae:40:47:19:a5:e7:b8:f7:74:3c:76:
cc:87:f2:93:fb:79:34:27:c9:d6:75:32:64:12:5f:5d:bf:de:
01:c8:a2:5f:da:db:97:ad:90:89:d9:70:c5:87:2c:fc:aa:f1:
8a:1c:fa:d9:a7:dd:c0:dd:7c:18:d9:e9:1a:3b:4c:52:24:73:
d5:98:9c:23:0e:81:18:d0:4a:46:43:90:ce:f0:6c:b4:31:7d:
c1:9f:1e:0e:c7:ca:62:ca:39:29:5e:b5:e0:b7:a3:c6:f9:10:
63:d1:67:81:5d:1f:27:05:f4:72:88:f6:62:ec:4a:00:1e:ca:
1f:ad:4d:39:ef:37:48:ab:3c:73:d2:43:01:00:c5:b5:8a:5d:
06:73:38:d3:f4:8d:41:d9:e2:d3:8d:7b:94:9d:88:4c:99:70:
31:67:88:4b:0c:7b:cf:d3:d3:8f:20:56:6b:e4:9d:30:9f:43:
7c:98:54:78:d0:4a:35:a0:83:01:9a:9e:bd:33:49:9d:9b:d0:
b4:07:ae:e6:e8:e3:72:97:fd:03:5f:77:21:d2:8e:25:ac:b3:
59:b8:bf:94:7b:16:15:29:47:f8:b4:5d:3f:dc:d9:63:49:b4:
69:f5:23:72:c2:d5:62:01:d9:a1:48:98:1e:c8:89:3d:fe:9d:
3b:d2:56:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:20 2023 by rpki-client on console-ams.rpki-client.org