Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kLTtIpe5PGXy26OKbHo-7dXauxs.roa
File: kLTtIpe5PGXy26OKbHo-7dXauxs.roa (raw, json)
Hash identifier: dc5FIA8AhK75NDVsiD5H8Hd3TV3EldczQdKX5IRw608=
Subject key identifier: 90:B4:ED:22:97:B9:3C:65:F2:DB:A3:8A:6C:7A:3E:ED:D5:DA:BB:1B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2208
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kLTtIpe5PGXy26OKbHo-7dXauxs.roa
Signing time: Fri 25 Nov 2022 04:40:41 +0000
ROA not before: Fri 25 Nov 2022 04:40:41 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8712 (0x2208)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:41 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=90B4ED2297B93C65F2DBA38A6C7A3EEDD5DABB1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:ff:4d:7e:84:f5:09:68:d1:18:3b:c1:36:
09:66:b3:f8:f7:98:d7:b8:91:e7:cc:c6:62:1f:d4:
e7:bd:06:b6:c2:56:38:db:4a:9c:72:10:1c:1e:cd:
01:7d:11:2b:d6:ed:d3:78:e1:5b:c5:56:56:a8:17:
55:aa:bb:85:4e:da:4f:79:12:5b:17:da:24:b6:81:
3b:ee:4b:26:7b:d5:1a:52:7c:43:cd:8b:8a:23:c8:
19:b9:83:29:fa:0d:ee:a1:d2:37:20:98:d7:3c:5f:
95:eb:e1:26:32:d0:77:e8:31:8f:17:0b:30:91:03:
44:c7:78:86:8e:4a:e0:66:f8:27:84:59:ea:86:3c:
0b:38:0e:83:19:b1:e8:6b:24:31:67:b5:1b:81:bf:
42:e5:24:a6:1b:93:3e:46:9d:42:a6:54:b3:28:2e:
d2:62:90:4d:47:38:16:64:4a:85:43:c4:fb:42:3e:
ef:cd:47:d1:4e:f3:86:c6:92:7f:d2:4c:54:0e:20:
ed:ff:14:a0:a6:aa:3b:5e:3b:e7:53:b6:de:19:d4:
84:6f:d6:f7:80:67:5c:5d:ff:84:3e:c0:ae:a3:da:
33:d1:6f:1b:d4:e5:f4:4d:f8:41:3f:64:13:ac:71:
4c:b5:18:02:74:0f:0a:6f:28:bb:fb:56:d3:1d:00:
0b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B4:ED:22:97:B9:3C:65:F2:DB:A3:8A:6C:7A:3E:ED:D5:DA:BB:1B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kLTtIpe5PGXy26OKbHo-7dXauxs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.183.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:31:c6:1a:b7:da:bc:73:ca:48:98:24:56:d2:a4:a1:11:c7:
ae:82:a4:6e:7c:2f:06:e2:32:81:09:94:c5:2e:9d:b2:17:ef:
6f:b4:16:66:20:bb:cb:84:ff:f3:6c:5c:8a:6d:d1:7b:e8:c9:
45:cd:15:db:fd:70:1e:a4:f5:21:6a:5b:de:70:5b:f5:e5:be:
05:ee:c4:42:4a:09:e6:90:83:92:12:f1:65:d1:c8:ce:a3:26:
e1:e0:8e:c4:22:1a:cd:09:a8:6f:9e:f9:8d:c3:b4:90:55:49:
c1:87:50:e1:4b:4f:31:05:0e:fe:8c:75:8c:e9:a7:2c:cd:09:
9f:60:4b:07:3a:31:b7:3c:a5:c4:a1:d2:18:78:58:cd:ce:9c:
36:e4:6d:9a:0a:b5:a1:14:94:25:e0:f8:ae:0f:11:ec:07:b7:
85:e7:1b:da:bc:ff:2b:f8:10:98:34:4e:8c:a7:c1:45:b6:ee:
76:95:b3:4b:97:af:d2:b5:66:f0:a1:43:98:3f:b9:39:6e:bd:
84:08:14:c8:4d:03:0b:9d:5d:e9:a8:3a:85:13:ac:e4:90:34:
52:6b:a0:96:54:e7:e1:94:20:28:b0:6e:b8:eb:5e:e8:1c:16:
c2:ec:0f:eb:62:37:1e:b4:1e:1f:28:34:f5:7e:e2:b3:83:82:
98:0d:26:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:09 2023 by rpki-client on console-fra.rpki-client.org