Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R63yhfFxj9S-6LTsYYmMzdAEpYg.roa
File: R63yhfFxj9S-6LTsYYmMzdAEpYg.roa (raw, json)
Hash identifier: 7fsPFkaO2aDiHntH0UfIKi7kwzBi4dZhmZQy7SySOWQ=
Subject key identifier: 47:AD:F2:85:F1:71:8F:D4:BE:E8:B4:EC:61:89:8C:CD:D0:04:A5:88
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R63yhfFxj9S-6LTsYYmMzdAEpYg.roa
Signing time: Thu 15 Sep 2022 02:52:51 +0000
ROA not before: Thu 15 Sep 2022 02:52:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=47ADF285F1718FD4BEE8B4EC61898CCDD004A588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:aa:66:d4:e6:ef:c2:18:cb:de:c6:09:4a:
a9:7b:64:ed:3b:1b:fe:ce:dc:ca:b9:03:ac:91:5f:
c5:c9:be:7c:52:86:15:bf:89:16:f0:9c:68:5a:70:
4d:bb:c6:cb:82:a2:b6:43:10:6a:22:b4:16:32:1c:
14:18:2a:02:4c:a3:0e:64:5f:d4:e1:db:99:30:2f:
8c:cf:71:1c:07:02:64:a3:a6:ad:9b:64:ba:69:9e:
55:c5:02:ed:f4:0a:4b:d7:c4:58:ec:fc:eb:21:13:
01:c0:70:09:ba:e9:c9:8c:0e:d8:47:08:a3:72:31:
54:86:5d:9b:3b:c7:53:e1:b0:47:d4:f9:3d:1f:a4:
48:f8:4c:e8:74:24:03:b8:bc:3d:6e:91:ec:32:ca:
24:14:e6:c3:7f:37:3c:3c:16:60:29:b4:fc:f7:20:
82:70:fe:89:b9:4c:6f:da:ac:40:d8:c6:17:a2:4c:
84:65:ed:ce:bd:83:83:45:39:23:37:62:ce:be:9a:
4d:6f:6c:f0:13:82:04:5e:01:37:27:15:57:4d:9c:
e6:93:83:f8:f1:f8:8a:5d:dd:85:09:59:15:d7:fd:
6e:a7:e7:8c:da:be:86:1a:a7:d2:74:4d:65:5c:aa:
48:24:82:78:2b:60:4d:90:32:bb:2c:80:53:13:03:
1a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AD:F2:85:F1:71:8F:D4:BE:E8:B4:EC:61:89:8C:CD:D0:04:A5:88
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R63yhfFxj9S-6LTsYYmMzdAEpYg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.150.0/24
Signature Algorithm: sha256WithRSAEncryption
20:50:18:ca:e0:d2:27:0d:97:d2:a1:8a:88:92:49:1e:08:50:
46:e8:bd:9f:60:29:c9:6c:4d:75:3c:19:0c:d9:8f:02:29:05:
41:7c:8c:cf:01:b8:71:40:e5:39:ab:95:a8:a5:c7:ae:b6:3f:
25:6e:f8:f9:3d:af:6b:88:45:1f:4d:e7:f9:3a:95:92:58:a7:
45:ad:97:9e:88:96:38:ab:fa:aa:51:1e:ec:4d:10:02:31:0d:
bd:dd:7d:72:e2:65:c5:2d:33:9f:a2:52:46:76:58:ae:4f:f6:
a5:82:8b:78:f2:3e:66:78:e1:70:76:74:0a:44:9f:b1:9d:9b:
a9:22:c7:f0:dd:63:79:50:49:8d:c8:dd:ac:9b:d7:90:ea:22:
c4:7b:c6:f8:55:a5:de:75:ed:51:c1:40:2d:c9:61:3d:87:57:
28:0b:ff:b2:96:53:22:d8:6d:48:eb:d8:33:ac:5d:54:a5:78:
26:af:50:63:54:da:75:4d:4c:b8:09:3c:4c:bd:a7:1c:3d:09:
31:48:98:cf:0a:e9:46:06:0a:58:09:24:23:37:bc:5c:b6:40:
a9:ba:7c:f5:bb:88:5e:e9:de:09:92:76:41:8f:6a:d9:d4:36:
86:34:ed:37:91:5b:44:2a:3c:f5:44:db:c1:78:25:ed:b8:b7:
5e:86:50:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:19 2023 by rpki-client on console-ams.rpki-client.org