Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WEejEMXu-FxafE-tM8IOLJ1alzM.roa
File: WEejEMXu-FxafE-tM8IOLJ1alzM.roa (raw, json)
Hash identifier: 9lz1W9VAevwdCgmhMStJcN6dTPZQUzueeOXzN+xD1b4=
Subject key identifier: 58:47:A3:10:C5:EE:F8:5C:5A:7C:4F:AD:33:C2:0E:2C:9D:5A:97:33
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2112
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WEejEMXu-FxafE-tM8IOLJ1alzM.roa
Signing time: Fri 25 Nov 2022 04:39:28 +0000
ROA not before: Fri 25 Nov 2022 04:39:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.112.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8466 (0x2112)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5847A310C5EEF85C5A7C4FAD33C20E2C9D5A9733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b9:65:af:08:0a:e4:72:5c:c5:33:f7:a5:b3:
54:63:8e:7e:9a:1c:f2:bf:d2:f1:de:13:47:87:61:
8d:d6:1f:a1:57:17:85:27:82:c3:1c:c3:89:be:81:
fa:b9:b4:99:4e:8d:1b:1d:49:c5:0d:c0:7f:52:60:
dc:cf:e2:87:54:5e:82:3c:31:cd:fa:b8:34:e9:4a:
f6:7b:22:23:48:37:e7:fe:62:8a:5d:47:7a:d2:22:
4b:f5:06:73:0f:e3:63:2e:7d:dd:b9:41:2d:7b:0f:
31:56:e9:16:9d:0d:86:7c:a6:bb:5e:40:5b:8a:63:
c8:31:bb:7e:e0:39:a5:0e:ed:4f:6a:80:9b:25:77:
48:f6:c6:db:6d:c5:9d:af:99:ed:87:a4:4a:fb:c4:
b5:a4:a3:93:7c:3d:8a:96:ba:d7:2d:bf:35:30:a9:
b9:52:78:40:01:6f:fe:4c:1a:aa:69:e8:e6:37:9b:
0f:f3:91:51:77:18:f1:f9:3a:2e:80:35:2b:ca:b2:
12:1c:47:70:69:c5:d0:2b:a4:b0:0d:db:55:a9:64:
27:18:3e:b2:e6:32:ab:0d:a5:3a:37:5a:3f:c6:f3:
50:60:35:44:2a:f8:67:e4:86:28:91:6e:ee:b7:ac:
f9:e3:47:94:dd:03:ad:8e:78:2a:70:0e:a1:f3:51:
30:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:47:A3:10:C5:EE:F8:5C:5A:7C:4F:AD:33:C2:0E:2C:9D:5A:97:33
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WEejEMXu-FxafE-tM8IOLJ1alzM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.112.0/22
Signature Algorithm: sha256WithRSAEncryption
22:58:fe:42:a5:04:d6:f1:dd:18:4a:ea:dc:a3:3a:a5:38:c5:
29:af:25:87:fb:59:4f:40:f7:94:98:a5:d1:17:0b:83:d9:41:
6f:50:eb:a0:2a:b8:c6:31:ea:56:0f:51:35:2a:7b:f1:30:8a:
86:d4:8d:c5:0e:01:63:1c:29:a2:ea:3e:eb:b0:b1:00:d7:8c:
da:99:8f:c6:9a:83:10:a2:00:bf:6e:9f:0a:70:91:d7:09:5c:
3f:63:92:42:83:c2:b8:4f:62:b1:d9:14:f7:d5:a7:1b:d8:c1:
d4:a7:90:8a:13:e4:14:22:29:3d:70:4c:3a:d6:1a:f8:a5:93:
ef:22:a7:f6:80:54:59:b6:5d:22:54:63:42:23:e9:3c:bb:42:
e9:16:c6:04:2c:92:1f:be:3a:4b:06:d4:e7:72:40:f9:ae:76:
07:eb:b9:75:50:d1:09:c3:a4:ba:cf:05:59:af:18:93:f2:60:
ac:8b:61:bd:62:bf:67:28:8b:0a:cf:08:2e:fc:d9:ab:2c:ea:
b9:c3:f2:8f:cb:87:43:e0:9c:dc:52:e2:10:0c:8d:d8:a0:60:
67:67:8a:0c:a9:a6:ca:98:97:d2:93:65:bb:f8:fc:c9:69:7c:
95:43:a6:80:60:a8:1d:96:3d:91:fe:6c:0e:2f:97:da:fe:a4:
5e:49:f8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:06 2023 by rpki-client on console-fra.rpki-client.org