Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/praEdzI35yVrQSqI4jzYct0BAl8.roa
File: praEdzI35yVrQSqI4jzYct0BAl8.roa (raw, json)
Hash identifier: /aPR0QlkcMGfb3UlbKoUUEWUvdw34glVcwgMpaBidlM=
Subject key identifier: A6:B6:84:77:32:37:E7:25:6B:41:2A:88:E2:3C:D8:72:DD:01:02:5F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2130
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/praEdzI35yVrQSqI4jzYct0BAl8.roa
Signing time: Fri 25 Nov 2022 04:39:37 +0000
ROA not before: Fri 25 Nov 2022 04:39:37 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.184.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8496 (0x2130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:37 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A6B684773237E7256B412A88E23CD872DD01025F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:6a:d5:c3:5a:59:c2:a8:45:b0:03:24:ab:
30:86:6a:fe:a7:8d:74:32:40:f6:c4:12:43:c0:76:
0c:5a:df:71:e7:e1:1e:ec:eb:9e:7c:02:ef:70:af:
36:97:29:20:48:76:5e:da:b6:9a:ba:8a:eb:95:5f:
65:31:5f:d6:56:8f:c2:b4:93:b4:a5:79:b7:2a:4d:
a9:16:30:2d:ed:6c:4f:f6:57:4f:30:b2:d2:56:32:
e0:1e:9a:1f:ac:49:3a:73:7b:b7:df:3c:be:6e:29:
cc:c2:bb:dc:c3:a7:0c:41:8f:cb:f9:c6:25:3d:d1:
7c:01:7d:dc:f7:8a:69:85:a8:7d:ef:5a:62:f6:52:
61:9b:59:06:0e:0f:8b:23:c9:d2:f6:2b:f6:31:a1:
f5:9c:e9:20:36:47:65:c1:b6:96:29:31:54:60:df:
c0:61:2f:e6:c2:bf:b6:68:17:ad:40:74:ca:db:e0:
78:10:ab:40:9f:01:d6:17:bd:06:30:4d:5f:6c:4b:
02:5a:5f:12:cb:3d:ee:90:40:42:1b:66:66:71:c8:
34:27:e0:5f:56:4c:b4:c6:64:8d:02:fa:72:32:87:
06:35:f9:29:8d:72:81:a7:e4:8a:3a:03:a3:eb:ab:
21:7d:ff:e3:a2:6d:c6:21:5f:cb:5f:5a:9e:23:7f:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B6:84:77:32:37:E7:25:6B:41:2A:88:E2:3C:D8:72:DD:01:02:5F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/praEdzI35yVrQSqI4jzYct0BAl8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.184.0/22
Signature Algorithm: sha256WithRSAEncryption
53:f6:d1:3a:7c:d6:bb:78:21:27:cb:d1:cd:8b:6b:08:8d:16:
1c:3f:ce:4a:5b:07:af:14:08:3c:b7:4c:74:f8:b9:33:dd:a6:
38:51:fc:16:5e:04:fc:bc:37:d6:2c:29:40:68:4d:6f:fa:23:
5c:a7:45:1f:96:a3:d4:e2:89:b4:6e:8d:ad:06:92:99:af:0d:
1e:38:6d:ca:81:2c:1d:e1:74:22:26:64:8d:2e:dd:22:9f:91:
4a:fd:da:b3:84:9e:7c:d8:55:07:8b:39:a5:6b:8a:35:e1:c0:
8d:79:f9:81:7a:b7:7a:ba:ab:b1:69:bf:6c:09:5a:0d:0e:33:
31:5a:e3:6b:3b:ac:68:b9:ef:aa:8b:10:bd:8d:9f:a4:29:f0:
fb:50:94:61:ed:4e:c5:98:91:6b:0b:f0:f1:2a:4d:9b:fb:42:
03:6e:8a:51:95:33:21:03:24:fb:fc:ce:29:30:5f:b6:47:4a:
6b:39:ab:5c:f7:34:db:6b:84:cc:86:88:f5:8c:c5:c3:2a:eb:
fd:17:5b:6e:42:e1:0e:0d:ed:c6:73:17:12:39:36:e9:bc:d4:
1f:2f:33:2e:1c:8d:25:bf:a4:4a:de:fc:2e:ab:b6:ec:c7:66:
84:c5:38:db:78:e8:5b:fe:3d:a5:61:58:9f:c2:1d:f9:19:13:
35:6f:21:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:34 2023 by rpki-client on console-ams.rpki-client.org