Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TpSn91QcdpdL7E5HVadhHe090iA.roa
File: TpSn91QcdpdL7E5HVadhHe090iA.roa (raw, json)
Hash identifier: tEKbGq4BaSSwaSltv/TC4m5gN7Mp1zPjF3Wr+Lr0glw=
Subject key identifier: 4E:94:A7:F7:54:1C:76:97:4B:EC:4E:47:55:A7:61:1D:ED:3D:D2:20
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TpSn91QcdpdL7E5HVadhHe090iA.roa
Signing time: Thu 15 Sep 2022 02:52:25 +0000
ROA not before: Thu 15 Sep 2022 02:52:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.238.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4E94A7F7541C76974BEC4E4755A7611DED3DD220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:30:6e:0a:d4:b5:34:93:c9:79:d7:74:8a:23:
0d:90:c5:e9:04:7b:58:94:0c:5d:9f:42:9c:6d:4c:
09:19:b1:7a:87:98:66:98:86:b9:6f:2c:f3:e5:70:
22:5d:7b:50:98:c0:99:6a:65:c3:99:d4:d6:5b:6f:
f2:86:52:8e:7c:d3:30:93:3f:b2:4c:75:00:04:56:
86:e0:6e:54:36:85:20:91:65:c9:f2:61:09:19:70:
6c:9d:7e:51:e0:f9:09:93:50:dc:34:ea:7d:e3:e5:
ee:7a:95:74:2d:26:7a:c6:4e:fe:e7:8e:c4:87:6d:
9a:f9:c5:02:85:ee:f7:07:48:92:fb:76:dc:96:90:
75:0b:77:95:28:a2:e1:3c:cf:81:95:d4:0e:12:2d:
d9:2e:8d:e8:d7:6c:47:65:ae:49:ff:36:a9:fa:85:
34:2e:cf:de:47:cb:7c:99:1d:0d:84:6c:34:2e:40:
00:51:e3:6a:e6:0f:3d:25:05:cc:d0:01:cf:c2:af:
2f:f3:7f:c4:e8:56:f9:4d:d2:9b:00:36:b5:69:54:
f9:ef:f3:f3:cb:e1:c0:fb:78:0b:eb:7b:06:a7:dc:
1d:61:6f:f6:e2:c7:48:13:dc:43:2e:a8:8f:d0:ac:
bd:fb:bf:9e:34:bd:26:85:77:54:0e:d9:93:45:fc:
3b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:94:A7:F7:54:1C:76:97:4B:EC:4E:47:55:A7:61:1D:ED:3D:D2:20
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TpSn91QcdpdL7E5HVadhHe090iA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.238.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:ac:fa:75:2d:24:93:d1:76:2f:33:e6:39:50:94:d8:2f:7a:
a6:45:e9:e9:05:d3:01:c1:5b:34:60:60:39:e5:9a:41:dc:9a:
1e:ce:f2:4b:f5:46:7b:5e:24:19:7f:51:3d:e8:7d:5e:1b:ad:
73:da:d6:cb:86:da:b9:1b:0a:f2:9b:e5:02:02:5c:63:30:25:
f1:ae:01:7c:c7:9e:5a:00:35:21:a6:6e:b4:07:23:5c:53:10:
33:5b:17:95:bb:b0:75:a9:82:dd:43:5d:14:08:27:74:41:50:
1f:2e:f7:02:9f:f7:6a:d2:b4:aa:fb:a1:3c:e2:9e:3b:2f:a6:
f9:cc:2e:48:e8:25:db:ab:fd:67:51:ec:2a:f3:fb:87:a7:b5:
9e:60:dc:80:1e:5a:c1:ad:22:c9:74:f2:cd:e7:7f:5e:97:4d:
71:c2:e2:0b:92:70:47:bc:48:26:4b:6f:55:d7:58:d1:55:9a:
a8:d6:df:bc:4a:f4:43:2b:71:fe:5b:35:19:a3:c5:7e:46:c9:
1f:c2:13:bc:b2:17:94:8d:c8:21:f1:ba:9a:d4:89:5f:2e:a8:
b7:8d:71:0e:c5:db:72:1e:93:3b:8c:70:31:69:9e:a0:a2:4a:
2f:42:6a:50:08:6f:d2:79:6d:87:e1:56:4e:ae:30:be:bc:dd:
49:16:5f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:29 2023 by rpki-client on console-fra.rpki-client.org