Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y5uOMsTdProQ58pbFe9WIftzd0o.roa
File: Y5uOMsTdProQ58pbFe9WIftzd0o.roa (raw, json)
Hash identifier: 6MwygxL+uPV2Hvwnr34EaHy64EKMPNTxzrn1jLMaAEU=
Subject key identifier: 63:9B:8E:32:C4:DD:3E:BA:10:E7:CA:5B:15:EF:56:21:FB:73:77:4A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2258
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y5uOMsTdProQ58pbFe9WIftzd0o.roa
Signing time: Fri 25 Nov 2022 04:41:03 +0000
ROA not before: Fri 25 Nov 2022 04:41:03 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.4.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8792 (0x2258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:03 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=639B8E32C4DD3EBA10E7CA5B15EF5621FB73774A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:ba:fb:97:d2:d8:bc:8c:7b:eb:93:51:6a:
43:d3:5d:36:ee:3b:db:c9:66:fd:8c:c3:9f:cb:e0:
2e:7b:24:48:bb:26:8a:7e:22:a2:57:34:3e:51:1a:
bb:73:30:64:e4:a9:64:fe:84:56:62:6a:57:72:fe:
36:cb:db:50:ee:c4:03:dc:04:e4:11:40:b8:c8:e4:
1d:0f:cb:7b:bd:ee:39:e2:09:0f:8a:2f:4a:e4:2d:
5b:fc:bd:30:d8:69:bf:02:13:f7:6c:fa:d2:51:19:
59:54:92:d7:ba:fa:27:a6:0f:4d:68:0e:6a:4d:b6:
88:ff:e7:75:77:7d:ce:31:55:82:ff:c7:9b:de:6f:
86:f6:b1:0f:55:6c:84:87:c3:1c:0f:f4:d4:86:1a:
0e:b4:25:6e:8b:91:89:cc:21:35:b5:19:45:8b:38:
25:d9:c3:60:8a:13:a7:3c:1b:47:6c:47:8f:46:19:
f4:ed:5a:ec:e4:6a:56:c1:33:59:86:b1:f5:8a:4d:
53:15:44:b1:7c:58:32:03:95:a5:65:a9:7b:4c:0f:
8c:6f:f8:63:d9:cd:d7:90:3f:41:0b:dc:ae:9e:4e:
73:a2:46:fd:8c:0f:1b:40:28:9c:77:46:05:55:60:
92:9f:bb:98:91:74:40:c6:62:d6:c8:b8:b2:43:71:
24:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9B:8E:32:C4:DD:3E:BA:10:E7:CA:5B:15:EF:56:21:FB:73:77:4A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y5uOMsTdProQ58pbFe9WIftzd0o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.4.0/22
Signature Algorithm: sha256WithRSAEncryption
17:fe:0a:db:9b:c9:88:7f:c2:43:ab:a3:c6:e6:c4:ea:8a:2b:
a0:57:df:0d:d0:66:09:06:1f:ea:b8:1d:92:8d:b5:f8:27:25:
3a:ae:cb:a8:b0:b3:22:25:af:54:8e:63:2c:6e:0a:ec:f8:3e:
40:9f:56:92:60:91:35:e0:6e:7f:10:e1:17:ec:76:21:29:a9:
56:34:9d:ab:3c:76:b6:e8:cb:ca:a3:5b:82:c4:4f:f9:4d:4b:
8e:7d:f5:87:9f:8e:8d:f5:72:58:39:51:50:45:e0:5a:82:80:
33:fb:1c:c4:9e:d7:f6:5a:f6:b0:03:e6:17:c9:5f:b8:2d:76:
d9:e5:61:65:24:5d:f0:7c:8a:12:e8:ec:d1:92:1f:4c:68:87:
c3:dd:f6:32:af:b9:e8:95:bf:b7:4a:be:d3:2c:69:91:79:3c:
14:4f:de:d2:0c:e8:0f:53:3c:10:b0:48:16:d7:71:73:f1:a8:
d4:64:88:1d:a0:46:90:ad:4b:92:61:3a:54:91:a0:eb:66:d7:
90:17:d5:c0:1b:a9:26:1e:ba:e0:4c:12:79:a1:f3:5d:7d:57:
3c:db:c4:ab:c9:b5:ca:b3:fe:c6:7a:3d:00:29:1a:ef:b3:c9:
74:c6:4a:17:36:c8:f7:7d:0b:d8:57:4c:1e:c8:7b:29:3e:04:
60:ab:af:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:06 2023 by rpki-client on console-fra.rpki-client.org