Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BCQOtpr_0vkDO51YprRYDatvgWo.roa
File: BCQOtpr_0vkDO51YprRYDatvgWo.roa (raw, json)
Hash identifier: 05hohNZScFdgSseaIiO6yRjg1+0tKrTk+q3sSiFSYK8=
Subject key identifier: 04:24:0E:B6:9A:FF:D2:F9:03:3B:9D:58:A6:B4:58:0D:AB:6F:81:6A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22CF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BCQOtpr_0vkDO51YprRYDatvgWo.roa
Signing time: Fri 25 Nov 2022 04:41:40 +0000
ROA not before: Fri 25 Nov 2022 04:41:40 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.20.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8911 (0x22cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:40 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=04240EB69AFFD2F9033B9D58A6B4580DAB6F816A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b2:78:07:7a:66:54:3a:a9:a2:d8:21:b1:1b:
9f:55:23:3a:24:3c:94:b6:76:88:ea:d0:08:01:73:
4b:10:8d:5f:e0:86:8e:ba:a3:52:50:92:47:e9:a7:
90:9f:1c:03:0c:12:0b:04:d4:24:4c:49:db:b6:47:
6e:e2:b0:8a:cd:d4:ff:0e:7a:65:44:5c:e4:c8:94:
32:f8:dd:e8:af:34:8d:7f:d5:14:e0:59:7c:ab:13:
6c:e7:25:5c:6b:9d:a8:d6:17:ac:cc:81:74:a5:e9:
ba:f6:8f:0a:28:89:4f:fc:80:dc:41:a6:ad:b2:7f:
43:43:e5:d8:5e:26:f1:32:bc:ae:bb:ab:a3:f5:50:
d6:6b:03:cb:e0:92:1d:26:e3:36:31:70:3b:03:ef:
59:eb:4a:91:a6:17:80:0c:16:e1:11:25:46:a7:7a:
6a:9c:4f:03:e0:b1:26:49:33:c6:56:14:26:e8:8c:
87:09:01:82:53:b4:77:50:a5:03:87:44:22:81:a3:
5c:5b:c7:b9:39:03:13:d3:00:06:ee:28:0b:bd:0a:
90:fa:6b:a8:c4:2c:67:98:dc:18:9d:69:1f:d0:0c:
58:b0:12:48:70:d8:00:f0:a5:e1:8e:68:72:2b:8b:
e3:89:b4:78:60:68:26:07:90:3c:96:d3:55:5e:cc:
6f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:24:0E:B6:9A:FF:D2:F9:03:3B:9D:58:A6:B4:58:0D:AB:6F:81:6A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BCQOtpr_0vkDO51YprRYDatvgWo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.20.0/22
Signature Algorithm: sha256WithRSAEncryption
95:7e:c9:46:47:34:2a:62:28:d2:ec:88:f1:74:66:99:1f:bd:
16:ea:cc:ad:60:28:bb:93:37:2c:3e:25:46:0b:02:7d:e2:25:
6f:e0:fc:26:17:9d:47:c0:bb:d1:ae:c7:0a:28:e5:fd:3b:f7:
b2:39:bc:d2:68:be:f7:05:eb:28:24:45:99:3e:0a:ae:8d:7a:
53:da:1a:9e:f4:0e:d0:94:50:60:4c:b6:3d:f2:8f:ee:71:cb:
ac:87:82:f3:d4:df:19:eb:71:45:ed:7e:c9:57:81:5c:a5:f5:
ab:89:f7:f9:7a:63:f1:57:bf:eb:ce:02:49:73:d3:92:ed:0d:
e4:3d:c3:13:15:e2:7c:9e:1e:26:46:ff:67:77:4a:ef:3f:27:
dd:bc:61:42:be:9a:90:23:ca:34:b5:1d:f0:af:85:64:b3:70:
2a:07:29:2c:ed:29:7e:b6:51:37:5f:f1:a2:00:21:61:3d:b3:
66:22:c1:d2:46:9f:f3:00:57:dc:b7:60:68:1e:8b:e9:6f:d0:
9e:fd:e7:65:98:77:fa:50:58:00:60:90:2a:c2:cc:af:fa:24:
b9:62:df:b6:70:33:53:b5:a5:6d:74:42:70:b0:71:96:fe:af:
e0:92:33:d0:33:13:03:f5:31:ed:e3:29:f6:b7:d6:e7:2b:ca:
fe:d2:19:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:01 2023 by rpki-client on console-fra.rpki-client.org