Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TRTwx2GsYSx15AdDse3sY0ZuIRQ.roa
File: TRTwx2GsYSx15AdDse3sY0ZuIRQ.roa (raw, json)
Hash identifier: LLKk9A42jjc6RGVxFexGdce3/DWGYTDsY6CP9d/9zbQ=
Subject key identifier: 4D:14:F0:C7:61:AC:61:2C:75:E4:07:43:B1:ED:EC:63:46:6E:21:14
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TRTwx2GsYSx15AdDse3sY0ZuIRQ.roa
Signing time: Thu 15 Sep 2022 02:46:02 +0000
ROA not before: Thu 15 Sep 2022 02:46:02 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.196.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:02 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4D14F0C761AC612C75E40743B1EDEC63466E2114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:e9:6f:5e:c2:12:f4:51:6a:59:9e:89:59:
95:86:66:23:ae:c8:b9:76:8e:dc:04:31:31:d3:85:
7c:00:67:50:66:2b:98:6c:01:c4:bb:78:9e:93:25:
dd:db:2e:1e:3e:83:26:ab:b1:e2:88:7a:e7:65:f4:
73:81:73:3d:40:05:16:31:77:1a:d6:90:eb:d9:3f:
9c:f6:99:36:21:8e:b0:7d:f7:e6:96:a7:7b:b4:ca:
ce:1a:8c:df:4b:0e:6d:b1:34:16:27:72:15:4b:f7:
3c:bf:5a:25:89:54:fb:89:b2:1b:16:93:a3:c1:7a:
52:55:0c:b8:49:1c:c9:99:97:bd:0d:b8:c3:6f:ca:
0a:1d:68:5b:da:1f:a0:bd:d1:5a:48:76:af:d8:ac:
0d:81:9f:c7:16:71:ef:fc:a7:78:df:fd:27:9f:88:
55:95:10:40:cc:d4:a7:da:fc:a7:51:a7:0a:f5:7c:
12:c5:7f:26:8f:90:56:55:a0:a1:8f:36:93:39:4b:
83:26:0e:9b:38:c5:fc:2f:22:52:20:9d:86:da:39:
7e:96:d6:bf:4a:cd:ee:24:6e:7d:cb:7e:f1:da:cd:
f4:44:75:03:3b:a5:c8:50:66:91:b1:1b:79:31:c1:
f3:91:a2:25:74:be:20:90:94:29:e1:97:91:74:a7:
00:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:14:F0:C7:61:AC:61:2C:75:E4:07:43:B1:ED:EC:63:46:6E:21:14
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TRTwx2GsYSx15AdDse3sY0ZuIRQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.196.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:56:4b:99:be:c3:1d:5e:ee:0c:89:cd:b3:7e:3c:e9:69:3a:
8d:b8:4a:1c:05:05:e6:eb:71:6e:e5:5f:20:e1:db:4e:b3:fa:
20:66:dc:1e:41:27:f1:0b:9f:b9:fe:6f:1b:b7:0b:50:a9:18:
03:6c:2d:47:7d:23:cb:ec:54:0b:ca:25:99:59:17:fa:75:81:
59:ef:e9:f5:e1:eb:8d:e2:38:2d:d0:70:c9:17:6e:e2:b0:05:
33:4b:29:2f:3b:ed:6f:d8:cb:cc:2f:3c:e9:74:52:b4:cb:cd:
87:f2:af:aa:1b:b4:b5:f6:40:1d:01:30:e5:3b:3d:51:56:6b:
98:0e:b1:7b:eb:aa:9f:94:23:24:a8:78:d5:56:09:06:c3:d7:
6e:e0:20:60:ce:e4:4c:1a:ea:a3:84:e1:c0:42:29:1c:69:4c:
1a:54:a3:85:28:8f:57:07:da:36:13:6e:15:50:16:3c:04:d9:
d1:c0:45:3c:b0:b9:84:e3:e6:d8:25:ee:70:d4:4c:7f:b6:b6:
2e:b1:db:71:38:47:46:83:9d:22:32:e9:15:f6:bc:28:d9:97:
c4:3d:68:86:45:99:4d:5d:ba:b9:c0:9e:3a:79:67:03:68:56:
d6:dd:14:85:82:ad:a3:50:37:25:44:50:50:13:98:7c:34:a5:
61:5e:5f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:20 2023 by rpki-client on console-ams.rpki-client.org