Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cLL7xHkYFYxQwF727yu2KY2cPN0.roa
File: cLL7xHkYFYxQwF727yu2KY2cPN0.roa (raw, json)
Hash identifier: jmPVKhOgAkaLn4gBXXCs91ISo5vYYOkPubh9IGQZiA0=
Subject key identifier: 70:B2:FB:C4:79:18:15:8C:50:C0:5E:F6:EF:2B:B6:29:8D:9C:3C:DD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cLL7xHkYFYxQwF727yu2KY2cPN0.roa
Signing time: Thu 15 Sep 2022 02:46:00 +0000
ROA not before: Thu 15 Sep 2022 02:46:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.184.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=70B2FBC47918158C50C05EF6EF2BB6298D9C3CDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:6f:30:d5:14:0a:04:3f:83:33:aa:fd:a7:
79:d5:52:dc:16:ba:16:49:ee:1b:4e:db:b2:e7:65:
23:84:54:0d:3b:fe:e1:29:3d:ce:35:a1:84:9e:f4:
bb:cd:af:46:f7:b4:f5:93:b6:0c:41:a7:89:da:e0:
03:70:73:52:03:eb:2c:ca:47:e3:7b:a0:76:1e:48:
db:45:a3:71:40:c7:f2:2e:92:49:72:40:05:60:8f:
25:16:cc:b3:db:77:83:63:a2:a8:80:29:9c:d8:22:
aa:99:ab:e0:90:75:8a:27:24:c4:9e:62:4d:04:f9:
cc:63:76:4d:54:3d:0a:d2:4e:02:64:94:59:0e:c6:
28:90:36:21:33:82:13:5e:94:e7:a9:f3:3f:97:22:
e9:34:91:20:59:74:66:65:26:1e:18:98:61:03:65:
94:d1:ec:97:04:44:38:69:29:8a:24:34:bc:fe:1d:
55:bb:66:47:68:15:18:4f:a1:42:9b:93:7d:77:ed:
71:9f:bb:b0:a8:9b:1d:75:c1:fc:41:db:4f:5e:c2:
e4:8f:cc:84:1a:66:a7:d2:f6:d7:ef:f2:5f:d2:16:
c8:fd:f3:fb:6a:6b:bc:0f:9c:75:c1:cb:07:ec:ce:
99:c3:d7:37:37:90:98:89:27:91:10:b1:5b:ff:54:
4a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B2:FB:C4:79:18:15:8C:50:C0:5E:F6:EF:2B:B6:29:8D:9C:3C:DD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cLL7xHkYFYxQwF727yu2KY2cPN0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.184.0/22
Signature Algorithm: sha256WithRSAEncryption
14:56:2e:e7:04:c0:75:a2:40:73:2d:6b:c8:68:70:dd:d5:5f:
2f:93:c6:d1:0c:a4:fc:cb:96:45:42:d9:52:24:cb:11:b5:22:
e6:0f:5c:b9:6b:2f:a8:a4:d6:5e:19:a8:77:bc:96:4e:50:bd:
aa:e8:6d:bb:83:af:42:8e:7b:0b:3b:9b:a1:a5:ab:34:43:6a:
63:07:99:ae:4d:2c:f0:97:ae:bc:04:67:f3:8a:e9:f2:e7:8d:
cc:2d:f9:a5:ad:c0:ab:a5:71:bb:c6:61:34:7c:a0:eb:b7:6a:
8b:62:99:38:2e:ac:29:49:4b:28:b7:b8:74:39:97:be:d7:b2:
cc:90:df:9f:5f:96:dd:06:15:95:48:47:80:e1:94:8e:d3:fb:
43:42:bb:d2:e9:fe:e1:c7:68:24:a1:26:a0:50:70:27:c0:24:
9b:38:45:4c:18:05:47:6f:a6:a6:a2:ce:05:c9:72:22:d8:fd:
76:04:7e:d7:de:5d:1a:96:71:5a:f7:bc:81:bd:40:43:df:83:
83:75:31:e3:d1:0e:1a:bb:5b:11:61:f4:c2:be:be:89:fc:bd:
a8:de:f5:bf:a0:ae:45:5f:0a:17:2f:de:c8:e9:aa:9e:50:fa:
95:7a:7d:2c:35:13:9d:a3:9f:54:68:76:a2:b3:fe:8b:05:b1:
5b:be:f9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:36 2023 by rpki-client on console-fra.rpki-client.org