Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wk2HOTZBDswKjkjWtblhKTmHdqY.roa
File: Wk2HOTZBDswKjkjWtblhKTmHdqY.roa (raw, json)
Hash identifier: euyehD5VG4NU/QaxvHhg6knh20W6GJuE67fzUZDpuuM=
Subject key identifier: 5A:4D:87:39:36:41:0E:CC:0A:8E:48:D6:B5:B9:61:29:39:87:76:A6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wk2HOTZBDswKjkjWtblhKTmHdqY.roa
Signing time: Thu 15 Sep 2022 02:53:37 +0000
ROA not before: Thu 15 Sep 2022 02:53:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.20.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5A4D873936410ECC0A8E48D6B5B96129398776A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4a:46:ed:de:da:9b:06:3f:ab:77:0a:a1:7d:
7a:8a:1d:99:bc:99:d7:f0:72:d3:63:01:80:4f:f9:
8b:9d:b2:83:3c:e1:a9:ec:37:b1:e7:03:ab:d3:74:
59:50:8f:20:c5:83:b9:54:e0:81:ca:da:80:9c:90:
e5:51:45:b0:dd:96:90:ec:ba:90:ec:ca:21:a7:be:
a9:b9:8a:26:c6:63:dd:a8:5a:34:83:f0:06:52:a3:
d1:89:8a:df:e7:32:a2:6f:57:be:4c:75:b5:6e:61:
4f:6f:bc:e5:2b:4e:af:c6:c4:01:be:67:a7:b3:34:
96:83:05:3a:5f:93:e8:8c:f8:a0:f8:38:98:b9:c7:
62:b8:c6:57:cb:ab:77:1c:a3:41:2c:ae:51:0e:22:
e8:02:f7:62:96:d4:34:32:15:f2:04:38:54:2b:70:
c6:c4:d1:8a:64:7f:e3:ef:e9:78:a4:4a:02:6a:63:
99:c3:8e:46:8b:59:4a:06:f5:c4:4b:6d:25:0a:dc:
ba:a3:c7:a1:c4:a7:3d:c9:41:21:dd:b5:87:a1:db:
83:13:d8:2a:9b:a1:7c:bc:01:3a:c7:15:0f:ea:59:
4d:37:89:21:bf:e8:5b:22:11:35:c6:3b:6e:8c:ab:
95:99:78:af:f3:eb:a0:72:8b:e1:d4:47:d0:58:39:
8f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4D:87:39:36:41:0E:CC:0A:8E:48:D6:B5:B9:61:29:39:87:76:A6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wk2HOTZBDswKjkjWtblhKTmHdqY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.20.0/22
Signature Algorithm: sha256WithRSAEncryption
77:42:c4:77:6f:37:50:37:e4:07:e2:60:b5:af:bf:0d:20:b6:
a6:e0:1e:7e:4f:47:69:f4:74:b3:b4:cc:1d:9b:ae:84:f5:ff:
e0:e6:40:71:78:9f:62:a2:d2:26:fe:a1:a7:6f:c3:ba:40:1b:
27:9c:1b:3f:87:9d:aa:f6:92:35:76:47:1c:68:06:dd:d0:aa:
95:c6:dd:8b:e5:96:78:53:61:a2:cf:26:2b:73:d7:03:a6:72:
e5:63:c4:f8:5b:2f:5a:fa:13:7b:d7:b3:13:0b:6a:eb:20:72:
44:18:69:bc:60:e0:7d:a0:00:45:98:d6:2b:8f:ac:60:0d:78:
41:e9:dd:1f:6c:42:c7:c5:93:44:87:1d:22:85:59:6f:76:50:
9b:57:9f:29:78:a0:ba:e8:f2:3a:09:92:d5:f2:71:d6:ff:19:
be:fd:ad:75:6f:63:54:02:8a:59:cc:fa:74:89:ad:66:6e:97:
92:31:ea:da:f1:ba:2c:c9:25:7c:4f:e7:2d:bf:bc:eb:04:ac:
d5:88:d5:e6:c4:6f:24:e6:2e:be:ad:68:fe:e3:7b:13:44:52:
89:40:d8:ee:de:d3:a0:c2:d8:8c:a3:29:ba:aa:23:5d:0d:a1:
19:be:e6:5d:0f:c9:5a:d5:5e:91:79:b7:2d:b3:b8:53:e2:09:
25:fc:59:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:31 2023 by rpki-client on console-fra.rpki-client.org