Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cQ8S6CpwJkomE9aALld_5sK-etw.roa
File: cQ8S6CpwJkomE9aALld_5sK-etw.roa (raw, json)
Hash identifier: rr8j++aw6iqsE6NBtoRx4RhlbzfhyjQfGeEs3gmmXJs=
Subject key identifier: 71:0F:12:E8:2A:70:26:4A:26:13:D6:80:2E:57:7F:E6:C2:BE:7A:DC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2250
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cQ8S6CpwJkomE9aALld_5sK-etw.roa
Signing time: Fri 25 Nov 2022 04:41:01 +0000
ROA not before: Fri 25 Nov 2022 04:41:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8784 (0x2250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:01 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=710F12E82A70264A2613D6802E577FE6C2BE7ADC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cf:b6:25:73:f6:4c:da:bf:b6:70:22:55:0b:
8e:a2:15:c8:88:5b:08:cb:a4:d5:79:8b:64:88:48:
13:b3:fe:21:af:c5:f0:09:ae:58:7e:22:d3:5c:b3:
59:39:15:b1:0f:58:44:9d:1c:12:2c:3b:79:2d:5f:
8e:74:74:e7:61:f6:8d:04:93:ac:07:3e:8d:89:a5:
a0:9a:08:04:0e:a3:9c:87:88:40:c6:e0:09:2c:45:
ed:44:4d:1e:da:23:41:60:f5:af:8b:dd:f6:3e:14:
38:7d:c6:8f:bd:41:c4:39:3c:cc:88:49:bb:1c:be:
6d:15:c5:8c:c7:0c:50:99:3d:e5:1e:c9:7f:e1:0f:
2b:ab:b4:62:0e:60:41:ff:63:18:c8:a0:bf:8b:88:
41:17:e9:6c:9a:27:01:c8:06:03:09:2a:aa:23:12:
45:d0:a4:eb:66:df:e1:99:3a:2f:b7:7d:28:16:65:
4c:4a:5c:18:40:04:68:f2:50:f9:46:4b:5c:d9:32:
f7:ce:a7:da:28:ef:a9:dd:ed:a7:e4:1e:26:93:87:
d9:c1:af:00:d7:b3:9b:65:ba:f0:cb:a0:74:42:62:
bb:9e:df:b0:98:d4:64:44:ec:ce:79:fd:ed:00:47:
25:9d:7f:ce:eb:d7:45:b1:70:d1:21:d1:65:89:26:
7d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0F:12:E8:2A:70:26:4A:26:13:D6:80:2E:57:7F:E6:C2:BE:7A:DC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cQ8S6CpwJkomE9aALld_5sK-etw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.164.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:30:f0:84:23:b3:6c:b5:ba:be:ad:4f:42:cc:ae:50:f0:d3:
db:c5:0d:e5:b9:e0:6e:ea:e4:de:bd:0e:19:45:e3:54:20:69:
1e:c2:36:73:07:d0:bd:3f:f7:6a:56:37:74:c6:b9:79:16:f3:
ff:6f:6c:42:a4:0d:8d:78:e6:a8:3e:71:3a:cf:0b:8b:7a:35:
68:c9:da:79:e2:0c:39:2d:51:b8:fd:21:6b:fe:28:29:0b:47:
75:a3:f3:c0:88:a1:92:a3:23:d4:c9:0d:2c:32:7d:f8:40:04:
ad:e3:0f:5d:46:ac:87:a0:a8:9d:cb:2b:73:01:2f:d3:c4:14:
c9:ca:25:b9:fc:45:ec:09:83:af:e6:51:87:40:fd:a0:00:32:
22:e1:fd:6c:aa:6b:84:08:b3:18:6f:4b:fd:bf:16:d6:84:13:
94:29:90:7e:e4:5f:ba:e8:c1:ee:e2:1e:cc:85:b4:a4:97:77:
b9:a7:98:2d:34:64:cc:b7:11:46:ad:a1:40:01:f5:f3:71:9d:
44:59:fe:d9:a0:b8:7e:1c:94:b0:ad:c6:d6:f6:05:6f:ae:de:
54:92:a0:ea:1f:c8:e2:4a:4a:65:87:40:b6:0c:87:cc:0f:80:
ca:f3:99:be:3d:c3:81:30:7a:e8:ec:3a:cf:ee:24:56:b0:94:
86:d3:54:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:07 2023 by rpki-client on console-fra.rpki-client.org