Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VunNiTdyPZLOiI9fgaoOXEb5bgE.roa
File: VunNiTdyPZLOiI9fgaoOXEb5bgE.roa (raw, json)
Hash identifier: 9mZOMrZjFOaSbPiQ+7SD9fp/g4efuzkOVZzaNQEo/AU=
Subject key identifier: 56:E9:CD:89:37:72:3D:92:CE:88:8F:5F:81:AA:0E:5C:46:F9:6E:01
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22F8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VunNiTdyPZLOiI9fgaoOXEb5bgE.roa
Signing time: Fri 25 Nov 2022 04:41:52 +0000
ROA not before: Fri 25 Nov 2022 04:41:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.232.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8952 (0x22f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=56E9CD8937723D92CE888F5F81AA0E5C46F96E01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:9c:64:15:44:d5:78:a0:5b:90:b2:85:fe:
6b:56:99:d9:02:fd:01:25:21:3b:05:fc:32:d2:be:
07:97:d0:15:85:bc:56:1d:88:b6:83:b1:32:2f:90:
b7:8c:4c:d4:b5:ca:c7:e5:9a:fe:22:cf:e5:e7:13:
7e:73:6c:cd:37:d5:91:7c:aa:3a:be:01:5b:c7:5f:
ba:eb:88:db:81:a6:23:a9:63:6c:f2:73:04:e3:93:
1b:50:cb:73:bd:87:28:1e:8c:7f:d3:ed:71:c7:ec:
ae:48:2c:36:29:04:63:c9:e0:e1:2e:e4:d2:28:cf:
9d:11:5a:d0:bf:80:e3:5e:98:f0:f8:50:80:99:46:
3b:95:4c:cd:58:61:13:d1:f8:b4:83:3a:35:2d:81:
85:b6:a9:3d:c9:8c:ee:03:32:4c:56:58:66:d3:d5:
99:60:5c:3f:99:3a:21:3b:77:cb:51:85:ce:4b:e3:
56:ce:86:23:90:df:33:6c:c3:76:a4:3b:6f:32:05:
fe:5a:a2:66:c9:65:ad:45:2c:c6:ba:6b:6c:8c:e1:
0e:bc:4b:96:e1:92:3d:a3:8e:a6:f0:15:d5:bc:3f:
02:c9:94:05:c8:ea:c4:91:00:ee:c9:52:1d:6f:56:
64:4e:36:c8:df:3e:2a:11:e0:9b:70:e8:aa:d9:06:
20:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E9:CD:89:37:72:3D:92:CE:88:8F:5F:81:AA:0E:5C:46:F9:6E:01
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VunNiTdyPZLOiI9fgaoOXEb5bgE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.232.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:01:88:3c:7c:67:0e:cd:33:e8:2e:50:60:39:52:dc:6b:29:
3a:fa:2a:82:6b:64:6c:48:fd:aa:1d:b3:e7:f5:6b:ee:b7:d7:
dd:ff:fb:2d:3b:9e:a1:aa:45:98:52:41:49:be:cb:23:ae:53:
7c:0c:ac:a2:90:e2:43:db:89:4c:5e:5b:84:76:12:54:20:96:
91:10:6c:69:43:08:56:84:41:32:17:f0:2a:dc:32:ad:f4:31:
45:6d:75:4b:75:cd:bb:9e:19:5b:a5:57:1a:ee:97:a6:f5:36:
6c:2c:4e:d8:24:c6:a4:82:6a:0a:34:a5:ca:f6:81:5c:27:38:
94:58:2c:3c:0f:fe:f2:19:9b:60:5a:b7:62:38:9b:de:55:6a:
2b:49:4d:89:b1:56:a5:42:af:d6:0d:c8:d5:b6:36:04:f2:af:
87:a1:54:e2:c7:44:dd:38:4c:5d:f4:fd:46:b6:c8:05:d4:ac:
7c:4e:9b:34:e7:70:02:56:f8:fa:f6:29:17:a8:48:f6:2f:79:
29:cc:f1:1e:b6:74:04:0e:2e:aa:64:a0:4a:07:76:7d:ef:ea:
39:e6:e0:e8:51:10:de:3e:62:5c:13:ae:b8:b5:03:33:e0:e1:
7f:ec:e0:85:2d:e3:e1:92:35:fa:36:51:54:b4:89:b8:24:85:
4f:92:6e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:28 2023 by rpki-client on console-ams.rpki-client.org