Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TCXpH0w0StgPGKRNr2iyBzvZSRY.roa
File: TCXpH0w0StgPGKRNr2iyBzvZSRY.roa (raw, json)
Hash identifier: 3Np48Nc0uwt5SY0xO77nculWufLlffrjT2NnZElQEmk=
Subject key identifier: 4C:25:E9:1F:4C:34:4A:D8:0F:18:A4:4D:AF:68:B2:07:3B:D9:49:16
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TCXpH0w0StgPGKRNr2iyBzvZSRY.roa
Signing time: Thu 15 Sep 2022 02:46:07 +0000
ROA not before: Thu 15 Sep 2022 02:46:07 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.48.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:07 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4C25E91F4C344AD80F18A44DAF68B2073BD94916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:c2:af:84:f2:4e:6a:b3:a6:d4:b9:00:93:
e5:4b:c8:c8:b8:1e:17:c1:fb:27:6c:cc:75:49:34:
b1:70:01:40:a4:76:75:9c:18:e0:a6:dc:d8:59:62:
d0:ac:09:cd:1c:af:cf:34:01:8a:29:ef:29:87:14:
80:a6:f3:f9:3a:09:3e:bd:f3:23:8c:d3:58:12:e7:
3a:87:33:1e:8b:04:f2:a7:66:fe:07:d7:f6:cc:e8:
68:7e:a7:a7:ca:02:75:52:fa:dc:96:d7:d7:8b:26:
d1:8b:6a:ee:2b:78:64:04:52:bc:59:8b:ef:97:62:
15:37:6e:8c:d5:20:45:9a:07:47:a4:f2:bb:66:d9:
cb:a1:48:95:a8:42:2f:a1:c6:26:94:68:39:f2:03:
ec:48:48:f5:31:71:ef:c8:01:69:d4:ec:85:6e:b4:
cd:9d:37:5f:c0:dd:c7:7c:d9:72:1a:5d:29:01:62:
15:e4:e8:ff:b9:a7:9a:1a:bd:66:3f:2a:5c:a8:d0:
c8:82:0a:80:a9:bc:38:a4:2f:63:a1:2a:d7:80:6b:
2b:46:2f:7b:63:c1:a2:1e:eb:38:b4:35:74:f9:a4:
87:6d:6e:9f:31:99:00:df:28:b6:54:cb:5c:08:64:
c7:cc:57:32:ca:b9:20:a5:95:5d:07:3c:10:2d:7e:
f9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:25:E9:1F:4C:34:4A:D8:0F:18:A4:4D:AF:68:B2:07:3B:D9:49:16
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TCXpH0w0StgPGKRNr2iyBzvZSRY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.48.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:16:28:07:1c:e8:31:97:a0:df:4d:4f:63:5e:f2:90:3f:58:
5c:53:bb:b8:30:61:b1:af:a4:38:1b:f7:df:48:50:d7:6a:5a:
bc:df:1d:4c:4e:87:69:44:b6:1a:8d:41:00:f4:3f:2a:d0:5d:
9d:e7:8f:f2:06:fb:e5:d6:9f:c6:57:5b:f9:47:d6:3a:cc:0e:
e8:f4:15:06:62:03:61:6a:5e:1f:25:e4:85:d4:a5:4b:e7:27:
23:21:9e:53:e7:fe:5f:4a:be:d5:66:ef:a6:76:3a:d2:2e:f7:
48:94:84:3d:5e:96:1a:71:d6:47:e2:c5:e1:58:69:82:72:e7:
74:4b:71:70:b6:d9:d9:d3:7a:41:05:3e:63:fb:57:df:f8:75:
58:50:df:92:cd:69:fd:29:64:ad:70:25:fe:9d:76:c8:da:90:
97:e9:97:2d:61:e8:f4:de:58:9d:87:0e:43:7a:06:d8:d8:c5:
97:a5:6d:08:58:8c:eb:d5:35:ff:b2:0f:ca:8f:d8:75:d7:2f:
fa:0a:df:dc:03:24:36:9c:c0:bb:8e:68:7e:8e:96:cc:ab:79:
62:9e:aa:ba:2b:04:c1:dc:05:b6:78:39:c5:72:fa:d4:a6:d6:
d9:44:28:34:f4:05:83:c6:37:c2:5a:dd:22:e1:49:2c:e8:95:
9e:6c:ce:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:29 2023 by rpki-client on console-fra.rpki-client.org