Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RQkiaWuDG3YtXvj_vCXRHQbJaqg.roa
File: RQkiaWuDG3YtXvj_vCXRHQbJaqg.roa (raw, json)
Hash identifier: jyUjwwSYGCzHM0dTRlfRnfN9z9fji/GVWVQ+pGgy7Yg=
Subject key identifier: 45:09:22:69:6B:83:1B:76:2D:5E:F8:FF:BC:25:D1:1D:06:C9:6A:A8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2231
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RQkiaWuDG3YtXvj_vCXRHQbJaqg.roa
Signing time: Fri 25 Nov 2022 04:40:53 +0000
ROA not before: Fri 25 Nov 2022 04:40:53 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.36.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8753 (0x2231)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:53 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=450922696B831B762D5EF8FFBC25D11D06C96AA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:f1:31:33:c0:77:fd:eb:c0:97:c7:cc:3c:
f8:31:41:fd:32:7d:83:7f:cf:d1:13:8b:c5:fe:3e:
cc:58:1d:79:cc:13:53:5b:d2:e7:e2:f6:78:ec:39:
b5:eb:8b:cd:f0:06:23:71:75:d4:be:0e:a4:4b:ab:
dd:dc:26:62:e1:a9:82:4b:6f:06:ad:1c:9d:05:6a:
1f:52:9c:3f:73:bc:ba:77:7a:5f:cf:4f:b8:4c:34:
47:9a:cc:b9:f6:f7:81:82:dd:ed:21:22:36:84:b4:
d4:7a:ab:35:c4:66:c9:1a:42:00:71:99:d7:dd:36:
0f:e9:a9:56:8f:09:d8:62:5a:fd:51:0d:1c:a1:e2:
32:88:2a:94:b8:3a:c3:b3:64:51:7a:e8:91:fd:f5:
71:99:99:2e:ba:d1:1e:05:5b:f7:c3:56:94:ba:ae:
45:82:03:11:58:88:1d:23:35:f6:95:c5:5e:b4:87:
89:63:02:6c:bf:94:ae:71:5b:c1:e2:69:f1:8c:37:
1a:77:90:36:f6:a6:55:1b:7b:97:53:9d:27:4e:72:
2f:e8:46:d2:af:93:2c:db:59:23:2d:80:76:ee:c4:
58:f2:6c:fc:bc:6f:e1:fc:f6:1f:bd:54:3d:2a:a5:
66:6f:c2:fd:82:4b:f1:15:3f:71:17:d6:38:55:c0:
96:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:09:22:69:6B:83:1B:76:2D:5E:F8:FF:BC:25:D1:1D:06:C9:6A:A8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RQkiaWuDG3YtXvj_vCXRHQbJaqg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.36.0/22
Signature Algorithm: sha256WithRSAEncryption
96:db:fd:5a:19:9a:9c:a9:3b:6c:80:de:09:25:90:2d:40:f5:
38:a6:1a:95:69:c0:c1:37:06:20:2d:27:5d:90:a3:21:a2:0b:
fc:32:c8:38:50:84:c8:be:c8:32:fb:af:f5:bc:08:23:3d:d8:
db:84:12:6c:3f:38:a3:de:01:52:51:94:a8:e6:36:51:b9:52:
dc:c7:e5:05:73:6e:19:63:d4:3f:bc:fe:69:b8:b7:c1:54:6b:
cc:5d:01:94:f9:82:8a:8c:44:31:27:d7:6a:00:47:cd:ce:d8:
f2:f9:27:00:5a:e8:66:bf:ec:d9:00:b3:30:f8:17:1f:60:7f:
cd:d8:a2:29:2f:ab:52:ec:a2:56:5a:f2:1a:19:6b:6b:72:3a:
60:de:4e:55:54:4c:ad:7b:5e:fa:29:f6:d1:4a:5a:63:7c:a3:
f5:6e:df:d6:2f:04:e2:e0:4c:58:10:eb:2d:12:6d:d7:c4:51:
0c:37:02:22:4b:1d:62:57:26:03:e4:de:33:7f:16:eb:db:b0:
a0:89:2a:b7:29:c0:c5:b4:2c:f6:38:b7:61:17:0d:d4:d6:15:
50:60:7f:c8:63:a1:63:be:24:d2:b9:cb:e0:6a:d1:f4:a3:c8:
56:cd:ac:9a:ea:41:9b:c3:b2:8d:e8:47:7b:58:e1:41:f7:0c:
7d:56:fa:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:27 2023 by rpki-client on console-ams.rpki-client.org