Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RpojdTqY6zYHilQ_7gD5Bj_Yssg.roa
File: RpojdTqY6zYHilQ_7gD5Bj_Yssg.roa (raw, json)
Hash identifier: xhMpoW2k4wYMbm06kmVbaBcPH1y/FvEY9T4cC4JdDOE=
Subject key identifier: 46:9A:23:75:3A:98:EB:36:07:8A:54:3F:EE:00:F9:06:3F:D8:B2:C8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 21D6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RpojdTqY6zYHilQ_7gD5Bj_Yssg.roa
Signing time: Fri 25 Nov 2022 04:40:27 +0000
ROA not before: Fri 25 Nov 2022 04:40:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.238.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8662 (0x21d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=469A23753A98EB36078A543FEE00F9063FD8B2C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e9:9f:1b:e7:97:a7:12:d4:0c:a4:c0:a0:68:
2d:94:c3:cf:cf:96:39:1b:20:18:ab:a7:46:48:a2:
64:d5:e4:cf:6c:38:ac:da:41:ea:39:00:33:fc:32:
d1:f2:fc:ee:68:19:bb:a4:3d:74:d0:af:c9:59:2d:
b4:23:13:3d:86:a3:0d:60:d7:78:89:cf:14:cf:19:
a3:1c:cc:7b:27:08:ca:f5:bd:20:14:a8:a1:ed:29:
ac:18:b8:7d:68:ff:ce:c9:8e:05:39:2b:96:50:9e:
55:0f:ad:4e:28:30:3a:3a:3c:57:ba:77:ae:5c:81:
ce:e9:d1:68:25:51:45:4d:64:2b:91:24:36:7f:74:
56:7f:c7:72:fc:9c:e8:30:ef:f1:b4:57:8c:c5:4b:
a6:4a:10:35:21:a8:f4:9b:bd:f8:4b:15:8f:73:a2:
ce:11:db:ad:a4:70:f0:24:6a:d5:38:f6:77:6e:a5:
9a:f2:80:ed:9c:cb:2b:1b:15:e6:64:eb:b8:b5:9e:
52:67:0d:ee:ba:70:8b:04:1c:74:2f:61:71:47:51:
36:36:e5:e2:d9:7b:5c:df:49:4e:ea:58:f0:cd:2e:
12:14:d7:1a:9e:c2:b3:f3:26:ee:ce:6e:e1:1b:86:
e5:72:92:d4:c9:d5:9d:90:c1:4f:30:d1:c5:3e:a7:
0e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9A:23:75:3A:98:EB:36:07:8A:54:3F:EE:00:F9:06:3F:D8:B2:C8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RpojdTqY6zYHilQ_7gD5Bj_Yssg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.238.0/23
Signature Algorithm: sha256WithRSAEncryption
14:af:9c:68:9b:64:e8:33:a0:d4:01:9d:55:a8:4f:fb:52:34:
fd:51:bc:ce:c9:21:b4:f1:a9:a7:d1:99:a0:80:b4:77:41:d1:
32:74:1a:39:bd:10:f0:74:ed:98:91:e5:a0:fa:29:ab:d2:0b:
91:78:54:6d:85:d1:e9:2f:4e:56:c2:0f:67:25:44:67:11:20:
aa:95:3e:c5:46:38:88:c0:48:46:3c:87:c0:f1:f9:a0:13:4e:
1c:fe:12:e7:e2:da:d6:83:42:5f:a8:5a:eb:1d:57:a2:67:68:
9c:bc:a0:03:15:57:07:19:77:26:22:07:10:42:1f:9f:b8:be:
4d:51:59:58:61:a3:19:ad:da:1e:87:b8:28:51:39:df:5d:38:
ec:00:2d:21:fe:f6:94:26:04:9c:34:c3:7d:b4:e0:46:82:6f:
de:fc:95:1b:04:ab:4b:3a:ba:62:60:c9:c3:9d:b2:47:b8:91:
84:f4:56:60:1d:fb:94:45:29:ba:b5:f5:f2:c7:dc:da:73:bb:
cd:5d:37:61:04:70:eb:8c:1e:cc:22:81:92:5e:ac:66:e8:e7:
b6:22:b9:8e:2d:11:2f:ca:f1:7a:10:05:f1:53:28:88:f8:b8:
7e:8b:66:21:d0:7d:72:f3:61:2c:8d:a5:0a:0b:71:13:74:61:
17:cf:18:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:05 2023 by rpki-client on console-fra.rpki-client.org