Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FYMx1TbpbJeiVNUh_n6-v_R0c4Q.roa
File: FYMx1TbpbJeiVNUh_n6-v_R0c4Q.roa (raw, json)
Hash identifier: 2xqIGhPlOc2Aq2myKM8sT6dYlMEMSbN4aIdRHgOM1LQ=
Subject key identifier: 15:83:31:D5:36:E9:6C:97:A2:54:D5:21:FE:7E:BE:BF:F4:74:73:84
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2114
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FYMx1TbpbJeiVNUh_n6-v_R0c4Q.roa
Signing time: Fri 25 Nov 2022 04:39:28 +0000
ROA not before: Fri 25 Nov 2022 04:39:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.224.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8468 (0x2114)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=158331D536E96C97A254D521FE7EBEBFF4747384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:1e:5e:3d:7f:b5:32:a2:cb:21:28:07:cf:
05:82:3a:77:38:22:33:bc:fd:7b:bd:32:8a:c6:97:
79:14:64:7b:45:9d:fb:1f:2d:ed:26:ce:49:5b:1d:
63:7a:86:74:b2:f8:c8:a7:60:63:b1:7c:66:01:f9:
73:4d:2f:b0:a0:b1:97:75:a1:9c:db:53:09:53:fd:
46:8d:f8:0d:f0:83:6d:d4:da:64:06:ce:d1:1d:86:
43:c9:d4:7b:32:40:86:e6:80:bc:25:cc:38:18:9b:
8b:97:1f:89:25:d7:d9:0d:3d:8c:d3:d2:d1:8b:54:
fc:ed:fa:61:14:17:34:fa:e6:3a:db:f8:7a:4b:3e:
ec:7d:5d:31:92:4d:4f:f8:30:bd:9d:d6:62:77:c8:
b6:70:54:0a:e9:ca:88:56:59:45:e5:82:59:12:97:
03:26:9a:82:5c:7c:84:22:30:5b:be:e8:3d:19:4d:
d2:d8:a3:c9:54:18:c0:bc:ee:f5:ba:be:a3:05:24:
4e:67:a0:7b:7c:2b:8d:64:5b:47:61:43:33:c3:c9:
c5:ef:c1:f7:27:d8:aa:b5:6f:eb:26:d5:78:1c:38:
15:f0:8c:47:a1:72:cb:5f:8c:9a:a2:ce:e7:4b:93:
f1:8b:46:c4:11:f9:d8:2a:33:57:90:03:b2:9b:47:
63:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:83:31:D5:36:E9:6C:97:A2:54:D5:21:FE:7E:BE:BF:F4:74:73:84
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FYMx1TbpbJeiVNUh_n6-v_R0c4Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.224.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:9f:df:e4:c1:ab:ee:79:35:5d:4d:67:e1:3b:1e:43:fb:12:
3a:6c:cf:e2:1b:12:d8:2f:84:12:60:4d:76:5b:ea:c0:ec:35:
c7:61:d7:80:fa:f3:ab:2e:1e:c7:b4:8f:7d:d3:3c:35:fe:e1:
2d:90:49:eb:2e:75:96:27:57:d3:09:5f:39:d6:e3:b5:ed:ef:
78:db:71:ae:b3:1d:08:d0:01:09:ec:14:59:68:80:2f:61:b4:
d2:e7:8b:fe:a8:7f:b4:25:45:c8:11:28:b3:b9:aa:75:f8:86:
e2:4f:fd:74:72:c8:7b:38:0a:1f:7b:3e:6b:08:1f:26:c6:9a:
a3:4e:f8:57:c6:92:16:8f:e7:dc:7c:60:e8:02:38:0c:21:e4:
b6:74:cc:e6:a0:01:60:f0:9d:72:5d:b3:c7:3a:cf:e9:cf:59:
6e:e9:64:e7:ec:e1:e3:cf:56:72:63:36:8e:66:7e:d4:71:59:
ae:35:14:10:c8:be:c1:cb:4e:c0:6f:7b:f0:45:cd:3f:fd:6b:
2f:5b:61:0e:52:5d:7b:c0:a2:87:01:50:c6:d9:0c:78:3c:09:
a4:9f:89:0b:b0:17:c4:2c:9c:bf:56:b8:0f:8c:e6:8d:50:e6:
ab:78:82:c6:b4:a9:17:40:ab:b6:0a:5e:5c:a6:42:ea:b4:53:
08:b3:e9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:02 2023 by rpki-client on console-fra.rpki-client.org