Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eiAXCh0SCMHzZfxnQ42uiHBakq0.roa
File: eiAXCh0SCMHzZfxnQ42uiHBakq0.roa (raw, json)
Hash identifier: e0be4HQR1/NaxcmH5FbCHriNKNA7iv7qPuteGaXF9p0=
Subject key identifier: 7A:20:17:0A:1D:12:08:C1:F3:65:FC:67:43:8D:AE:88:70:5A:92:AD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2050
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eiAXCh0SCMHzZfxnQ42uiHBakq0.roa
Signing time: Fri 25 Nov 2022 04:38:34 +0000
ROA not before: Fri 25 Nov 2022 04:38:34 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.133.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8272 (0x2050)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:34 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7A20170A1D1208C1F365FC67438DAE88705A92AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:e1:ce:16:4a:c5:01:df:77:b4:b3:50:7f:
e8:bb:60:88:a9:21:53:28:99:1d:55:f9:94:de:60:
1c:dd:81:38:a0:9c:91:6e:2f:73:8a:67:36:14:24:
86:da:dc:6e:2f:16:a8:f6:6a:45:48:8c:4f:0c:bc:
00:2a:c0:07:da:20:97:9b:f8:71:96:5d:6a:a6:5e:
7f:ac:f4:2b:43:58:38:84:a3:97:2b:58:5d:77:cb:
e8:7f:70:3c:56:06:7e:dc:f7:8f:92:30:6b:91:42:
25:59:ac:70:b1:e1:4d:7c:c3:65:de:2d:16:9d:b7:
56:ab:55:60:72:1d:84:a1:7e:60:f8:5e:c9:ac:1a:
1f:9e:b9:0b:16:b5:b7:45:17:08:3e:d4:e5:8b:f3:
02:85:8c:b0:ff:54:61:b8:b0:dd:ec:c1:db:1e:95:
78:3e:da:d7:1c:3b:d4:6b:e3:36:89:90:4c:00:b4:
ea:0a:dc:f4:dc:75:5c:93:c1:ff:c8:41:38:9c:e9:
bd:23:56:6f:15:c4:34:e0:a2:07:0a:20:8a:f3:95:
3f:1d:09:1e:c0:d3:64:55:45:0c:fc:20:bf:f9:81:
f6:15:93:dc:21:99:6a:84:06:ca:70:cf:5b:bb:7f:
4c:fd:0d:3c:b7:62:be:87:08:39:52:00:97:c2:58:
c1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:20:17:0A:1D:12:08:C1:F3:65:FC:67:43:8D:AE:88:70:5A:92:AD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eiAXCh0SCMHzZfxnQ42uiHBakq0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.133.0/24
Signature Algorithm: sha256WithRSAEncryption
76:03:83:5a:e6:5e:6b:96:77:78:87:ce:51:75:77:a8:1a:ce:
3a:a5:09:f8:66:ff:dc:63:1c:0a:27:93:03:68:5a:bb:57:da:
91:5b:e1:4d:83:31:8f:06:fa:6d:f8:ef:43:0a:51:b0:62:2b:
02:97:02:d9:be:f2:f5:43:32:8a:4b:29:55:9c:42:5b:4c:9b:
86:ea:4f:cc:16:72:c4:aa:0e:67:79:a6:6b:81:5f:ef:69:8c:
02:77:2a:6e:37:9b:57:c7:14:93:7c:38:ae:b0:0d:d4:0f:e3:
00:4a:b7:f6:47:11:58:69:02:48:bd:2b:de:d7:e4:f2:92:6a:
d4:7e:37:ce:b4:2f:5e:54:94:a1:9f:71:3b:1d:05:fe:b1:93:
57:70:6c:af:34:93:f8:4b:ad:ab:3f:0a:ee:94:01:bb:5e:5b:
2f:24:7c:d0:1a:ab:1a:a4:7c:c4:9f:73:cd:1f:5b:c5:a9:89:
11:b1:3a:1b:9d:46:64:79:37:18:e6:19:08:e6:ae:82:1e:b6:
8b:eb:80:da:82:30:13:c1:13:16:2f:8c:8e:b0:58:62:dd:30:
9e:25:df:0c:45:91:16:91:31:fb:e5:40:05:41:33:c2:ad:72:
d0:db:66:69:80:89:59:05:ae:cc:bd:7d:d3:8d:b9:1f:92:a6:
04:1c:80:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:08 2023 by rpki-client on console-fra.rpki-client.org