Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iS3VgdBJgYVruao3rjy76zFY2PM.roa
File: iS3VgdBJgYVruao3rjy76zFY2PM.roa (raw, json)
Hash identifier: TMUdjNdYFu/se2/UOxmR9m8NlqAHWsFDntWPOm1rmiI=
Subject key identifier: 89:2D:D5:81:D0:49:81:85:6B:B9:AA:37:AE:3C:BB:EB:31:58:D8:F3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iS3VgdBJgYVruao3rjy76zFY2PM.roa
Signing time: Thu 15 Sep 2022 02:54:11 +0000
ROA not before: Thu 15 Sep 2022 02:54:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.60.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:54:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=892DD581D04981856BB9AA37AE3CBBEB3158D8F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:67:50:cd:91:18:a4:47:4a:55:d6:90:57:
8e:7f:b7:72:06:a4:08:47:6d:55:44:6b:14:8b:98:
95:32:90:5f:eb:52:9b:d7:57:42:3f:87:d6:72:70:
bb:d6:06:65:d8:ad:91:82:62:96:5d:0c:a1:be:4f:
6f:89:30:8b:40:bd:18:c8:92:74:bd:fd:f8:03:fc:
f1:22:c2:c5:b6:0c:97:42:77:c2:95:29:88:66:f5:
e3:61:bb:82:eb:9c:90:41:52:4b:67:22:31:7b:7f:
14:a2:77:3c:da:69:e2:5b:32:41:5b:07:bc:e5:df:
13:65:da:a3:1a:64:cf:48:56:21:f3:0e:97:b4:fd:
3b:f0:75:7d:4d:87:67:66:35:2c:b8:f1:72:53:f8:
d7:fe:ff:82:19:f1:aa:e9:93:bb:95:a9:73:70:2e:
a9:ce:8d:f9:be:71:43:38:b5:86:06:44:09:e5:5e:
a8:1b:97:fe:0a:c9:06:6c:ca:75:73:fb:98:2f:9b:
92:d9:ee:2d:b8:38:dd:52:2c:96:b7:a2:cd:a0:aa:
e7:90:69:5e:41:03:ee:e4:4e:f7:b4:24:33:34:e8:
66:9f:f1:c2:fd:d1:83:6d:95:d4:7d:ac:c9:39:ad:
4f:50:14:e1:ac:c7:2a:40:fb:50:ff:ce:8d:d5:d3:
db:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2D:D5:81:D0:49:81:85:6B:B9:AA:37:AE:3C:BB:EB:31:58:D8:F3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iS3VgdBJgYVruao3rjy76zFY2PM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.60.0/22
Signature Algorithm: sha256WithRSAEncryption
36:00:4a:63:0d:85:31:54:8b:69:54:8d:4c:04:ef:9e:93:e2:
ea:16:7c:0b:88:a3:fb:c3:fa:1d:a2:69:d1:76:3d:c0:e1:57:
65:01:ba:e7:25:e5:fd:f8:c5:8a:d8:fe:b5:3c:15:02:fa:87:
a3:cf:41:c8:0b:57:98:d3:f1:db:dc:3a:82:f9:b7:a2:cc:91:
e6:4f:fb:06:37:fa:f9:18:0d:d7:5a:df:6e:ec:4a:d7:bc:70:
8c:a2:69:8a:fa:a1:8e:70:28:62:e2:74:e3:dc:22:0c:50:13:
90:ea:8a:01:17:9a:3e:c3:61:97:e8:85:c3:53:79:5a:60:3b:
a9:40:8c:ed:cf:8e:ec:24:1c:32:4d:12:63:3c:ad:68:66:d4:
19:5c:f2:68:62:2b:30:a2:14:91:d6:80:d1:dc:fd:6d:d9:5e:
a2:a7:4c:25:6c:21:65:f7:df:d8:1e:29:f6:5c:cc:22:09:b9:
c8:12:99:df:08:59:a1:f0:b1:cd:87:ad:51:f7:60:96:6f:d1:
03:dd:82:a7:cd:ff:3c:2a:f2:8b:ea:ec:ae:18:7d:2f:6a:0b:
91:d9:b7:86:fd:4d:90:47:6f:55:94:57:02:f5:38:44:ca:d2:
ac:13:34:f8:8d:ed:ab:38:4a:c2:4b:e2:9c:8e:56:5b:72:18:
89:2f:83:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:26 2023 by rpki-client on console-ams.rpki-client.org