Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fK-hsc08dsRkhIxAp-7AGuOHpP8.roa
File: fK-hsc08dsRkhIxAp-7AGuOHpP8.roa (raw, json)
Hash identifier: PayWVBuLx1LuD2knHaaODNYbmxFuRh0VOhtX7vwdsbQ=
Subject key identifier: 7C:AF:A1:B1:CD:3C:76:C4:64:84:8C:40:A7:EE:C0:1A:E3:87:A4:FF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 228B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fK-hsc08dsRkhIxAp-7AGuOHpP8.roa
Signing time: Fri 25 Nov 2022 04:41:19 +0000
ROA not before: Fri 25 Nov 2022 04:41:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8843 (0x228b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=7CAFA1B1CD3C76C464848C40A7EEC01AE387A4FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:eb:8b:51:82:7f:22:cd:87:65:71:c6:fd:8f:
3e:72:49:eb:d6:22:ca:16:76:bc:bd:84:91:f2:96:
1d:a7:48:ed:74:5e:61:7e:cd:6a:01:2b:ea:b8:5a:
2e:5c:13:31:54:42:96:02:41:2b:ea:10:80:f3:b9:
b1:a6:47:bd:f7:a1:3c:ad:51:b2:a2:fc:51:82:d9:
e0:52:14:8d:d2:7f:43:7e:c3:85:31:04:16:02:07:
e2:bf:67:13:cd:db:70:9b:bc:b4:c3:22:d5:2d:1a:
46:ff:27:1d:57:f1:ff:f5:7a:9a:fc:f5:a7:77:d9:
ff:8d:cf:c6:8d:5a:6d:9f:86:c2:1b:63:07:a5:70:
31:ba:9a:dc:f6:61:cc:9c:a1:c5:fd:bb:1b:43:39:
ff:90:bc:f7:5b:bf:e6:f6:f1:75:b9:f8:55:92:0f:
d4:c6:10:0f:98:da:c8:c6:79:d6:2d:c4:4f:fe:a5:
bb:5b:bf:53:d5:29:7d:de:31:f0:b4:32:b4:3b:a5:
09:1f:d0:12:d8:f1:55:62:ca:11:13:55:6b:18:6b:
70:e4:4a:89:25:f9:9d:3b:59:c1:fd:3a:0d:d4:88:
d6:3e:ab:08:d9:72:19:bf:0c:12:e8:e8:a9:9a:3a:
25:40:cb:ac:9e:f4:97:a9:08:20:4a:f3:40:75:8f:
98:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AF:A1:B1:CD:3C:76:C4:64:84:8C:40:A7:EE:C0:1A:E3:87:A4:FF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fK-hsc08dsRkhIxAp-7AGuOHpP8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.170.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:83:6a:d9:0d:58:6f:a5:da:a1:e5:de:60:49:3a:0d:34:b9:
dd:06:06:2f:93:fd:7c:89:43:a8:e6:15:91:6a:6c:86:42:7d:
ed:58:a9:c7:89:1a:1b:9b:ab:36:59:65:b7:02:03:a4:7f:b3:
68:98:ca:c6:cb:df:39:ef:a7:a2:e9:23:dc:0a:3b:59:f3:5f:
c0:96:5c:ed:d1:c1:59:08:ee:e3:89:88:8b:9f:12:58:81:bc:
11:8a:d9:aa:35:68:d4:57:bc:b4:7b:0c:f5:59:95:56:a4:30:
f4:1f:39:52:a0:f2:1c:9d:e5:86:0c:0d:d3:d6:1a:5e:c9:45:
5c:f9:8c:da:43:3b:81:f6:2f:0d:b0:0c:02:ce:ca:c6:e0:26:
74:a8:d1:90:51:72:aa:3e:17:61:86:3f:26:0e:37:13:58:75:
50:37:9a:8d:34:6f:d9:ee:5f:53:17:90:2c:c0:40:a8:0b:a8:
27:96:99:77:1d:c8:92:a1:e0:02:cd:f4:2e:c3:bf:85:06:2a:
65:43:72:18:5a:a3:5e:a3:82:97:bc:f1:c3:04:ba:f1:84:8d:
b3:1d:34:d8:c8:f1:04:62:aa:3c:88:65:ad:29:4e:1f:b4:9e:
68:78:be:bc:4d:ac:c1:a1:49:61:39:e3:57:39:8c:8b:b5:9f:
2b:e9:51:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:08 2023 by rpki-client on console-fra.rpki-client.org