Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mb7vUu2zbTrHu-r9h6HMygDFknQ.roa
File: Mb7vUu2zbTrHu-r9h6HMygDFknQ.roa (raw, json)
Hash identifier: wR1JNHTn3N60FHtCiuEloApBW5iFpfan8MpcLXRAgvQ=
Subject key identifier: 31:BE:EF:52:ED:B3:6D:3A:C7:BB:EA:FD:87:A1:CC:CA:00:C5:92:74
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mb7vUu2zbTrHu-r9h6HMygDFknQ.roa
Signing time: Thu 15 Sep 2022 02:45:48 +0000
ROA not before: Thu 15 Sep 2022 02:45:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.128.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=31BEEF52EDB36D3AC7BBEAFD87A1CCCA00C59274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:87:0b:ca:91:02:47:47:42:a8:6e:ee:53:9d:
68:01:3c:af:59:2b:28:96:42:cc:33:81:51:29:c6:
38:5f:e3:4c:f4:b5:f5:84:48:f7:48:33:3d:a9:ff:
46:70:ed:00:69:cc:2a:d6:2b:1a:2d:89:b0:59:e7:
3c:3c:52:9a:15:2e:5f:0d:cc:11:ec:70:df:7a:ba:
e4:b6:36:78:3b:78:94:e1:e9:4a:7b:33:50:c4:04:
95:26:7a:b0:c5:00:c4:2e:52:b0:2e:99:74:d9:3f:
f9:81:1d:db:20:51:3a:35:55:c9:7c:02:66:27:4f:
5a:79:0e:93:c8:b5:d1:1d:f4:1e:09:c4:99:7c:6d:
c7:83:b5:a1:00:06:e3:85:22:cd:19:d3:65:70:52:
cb:42:e8:b5:bb:9b:1a:71:5b:01:b1:4c:a2:c9:03:
61:e0:f7:7d:9e:7e:25:9c:f9:ca:6d:19:12:c9:a1:
cf:33:30:05:38:ff:9b:7d:78:4c:1a:00:fa:05:df:
e3:ee:fe:79:c7:3d:d2:e6:97:47:60:6b:19:df:ce:
56:68:c8:67:df:f9:a9:2b:44:c1:00:fc:90:fc:f5:
3a:c2:e6:27:77:42:c3:2e:00:9d:ad:49:f4:06:32:
b1:ef:de:cd:13:49:07:7b:a0:27:87:0f:2e:aa:3e:
10:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BE:EF:52:ED:B3:6D:3A:C7:BB:EA:FD:87:A1:CC:CA:00:C5:92:74
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mb7vUu2zbTrHu-r9h6HMygDFknQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.128.0/21
Signature Algorithm: sha256WithRSAEncryption
b8:e9:c7:80:18:2c:67:0e:0a:bc:ee:ac:4d:99:4f:3a:68:e3:
5e:71:06:56:c9:6c:b4:66:c2:fa:1e:d7:bb:50:bc:b6:e1:27:
ad:3c:1d:4a:a4:97:11:73:f0:1f:6b:44:73:27:f3:88:f1:85:
d7:c0:ab:ea:b1:44:75:e8:88:19:3d:ad:4c:55:27:98:a9:87:
e6:e9:2b:13:5a:df:b0:bd:76:c2:ba:56:27:5a:de:f1:8f:db:
86:aa:27:bb:da:39:bf:04:de:d7:db:71:ae:ff:ba:58:74:e9:
9c:24:ec:79:78:80:4f:24:a5:f4:be:2c:5a:b7:c5:78:e5:b3:
97:0d:21:93:b5:f3:99:f8:c4:c5:37:8a:bb:61:d8:04:3b:ff:
4a:ff:d5:bc:33:ec:c5:12:7f:f7:46:5d:20:28:c0:19:fc:20:
14:6e:c6:72:f2:3d:c5:e1:1c:de:c7:8f:8e:c1:a8:4d:32:ca:
2e:b5:80:bf:f3:36:b3:5b:95:73:97:19:40:08:ce:78:b4:9f:
6a:3e:ed:b9:97:8d:84:3a:bf:28:26:24:4f:2d:30:3e:96:41:
ff:f9:0d:e5:ac:28:43:8d:71:1d:c4:95:cc:72:05:3f:50:b0:
1e:7a:2a:16:a5:85:aa:23:5a:60:2a:4d:07:af:94:30:12:ad:
7a:9d:ba:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:27 2023 by rpki-client on console-fra.rpki-client.org