Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/agLIo3G0pLXQxVCK6WZrt5cOu5Q.roa
File: agLIo3G0pLXQxVCK6WZrt5cOu5Q.roa (raw, json)
Hash identifier: pN/4e8A3XtI7N2SGdYg9owK6G4I4f7+vqJ9t9pUBYgA=
Subject key identifier: 6A:02:C8:A3:71:B4:A4:B5:D0:C5:50:8A:E9:66:6B:B7:97:0E:BB:94
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/agLIo3G0pLXQxVCK6WZrt5cOu5Q.roa
Signing time: Thu 15 Sep 2022 02:52:51 +0000
ROA not before: Thu 15 Sep 2022 02:52:51 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.36.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:51 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6A02C8A371B4A4B5D0C5508AE9666BB7970EBB94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:87:6a:fe:44:8b:c0:07:b0:c6:5d:f0:f4:1c:
12:da:f3:56:f0:de:71:70:c2:08:93:0a:e4:c3:3e:
11:0c:f2:c9:a3:5a:66:cb:7d:e5:13:ca:33:66:4e:
7c:96:71:98:eb:97:5b:50:13:eb:45:26:8f:57:1a:
8f:44:37:1a:b4:ef:75:e6:e8:8f:80:6f:b4:8b:76:
cc:df:fe:56:36:40:49:5e:12:4b:9f:cc:c3:26:f4:
b7:01:cd:5d:b5:0e:d5:80:78:13:7a:52:c8:4f:55:
92:9f:78:0e:88:fe:40:fb:c2:4f:22:a4:48:54:0a:
dd:15:13:5a:08:8b:86:a1:eb:c1:e5:d5:5b:e9:23:
aa:5b:c1:d4:70:f2:93:f1:95:de:08:23:3b:79:a9:
2c:90:de:c8:fb:6f:b4:28:26:72:84:21:32:50:de:
6f:72:aa:82:91:63:c9:c2:4e:f9:5b:21:1b:5b:7d:
b6:1b:37:25:32:38:39:c0:c3:4f:5f:b1:e1:d8:16:
72:db:86:83:c7:bd:7f:76:37:bd:83:db:70:ad:8c:
85:13:96:fc:41:a1:c5:e8:45:b9:09:fe:d1:4a:0b:
3f:e2:f2:8d:24:33:70:67:52:df:85:a9:75:fe:86:
21:8c:e2:cd:cd:b9:3e:b2:d6:2c:a7:4f:e7:08:b2:
aa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:02:C8:A3:71:B4:A4:B5:D0:C5:50:8A:E9:66:6B:B7:97:0E:BB:94
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/agLIo3G0pLXQxVCK6WZrt5cOu5Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.36.0/22
Signature Algorithm: sha256WithRSAEncryption
16:fa:08:b6:06:d2:77:75:84:02:ff:39:f2:89:a8:20:22:47:
49:6e:ec:dd:93:6e:37:c8:4d:af:68:84:d6:28:b1:12:9c:b7:
33:a1:c2:8f:a2:4c:51:35:bb:5b:c1:7f:8b:a0:49:b8:d5:3d:
66:dd:a4:0f:b4:43:1d:0d:da:ed:b2:e2:71:06:d0:53:f5:1a:
a4:6e:4f:7d:fc:a4:16:15:2d:44:2c:ae:b1:e7:0f:ee:fa:bf:
24:f0:da:97:fd:f3:5b:b5:29:e3:93:70:3d:1a:1d:0e:94:e3:
21:bc:2a:64:28:c6:80:9d:fc:33:e3:36:09:8b:24:92:58:ad:
0f:23:fd:8e:44:2b:06:1a:ad:4f:26:7b:2d:c2:ac:01:da:c8:
22:3a:15:bc:76:33:9a:e2:d8:24:28:34:3c:23:28:60:04:b7:
2e:8a:68:2b:41:bd:16:20:1d:19:cd:73:71:5a:49:03:a5:ac:
74:93:5a:a0:08:2b:be:f8:30:9d:5e:80:f4:56:23:cd:cc:90:
20:c3:79:78:e2:45:74:4b:a1:1b:24:04:9d:ce:94:a8:ff:53:
56:5b:af:b2:83:5a:0f:0e:c8:fc:d1:cc:a8:a5:d1:5e:4f:30:
2d:ed:69:77:fe:0c:85:50:be:f8:16:5d:9a:39:dd:f0:17:3a:
a9:b3:a0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:23 2023 by rpki-client on console-ams.rpki-client.org