Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pxWiWJITLFoDou9YttPCbb3J7Ek.roa
File: pxWiWJITLFoDou9YttPCbb3J7Ek.roa (raw, json)
Hash identifier: oCCW4V98LohD1Fq1LfnH81BQThUAHjHtuy+/QWajOwE=
Subject key identifier: A7:15:A2:58:92:13:2C:5A:03:A2:EF:58:B6:D3:C2:6D:BD:C9:EC:49
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2333
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pxWiWJITLFoDou9YttPCbb3J7Ek.roa
Signing time: Fri 25 Nov 2022 04:42:12 +0000
ROA not before: Fri 25 Nov 2022 04:42:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.176.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9011 (0x2333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A715A25892132C5A03A2EF58B6D3C26DBDC9EC49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c6:56:44:37:1a:e0:4c:5b:65:51:6d:48:e0:
a4:1a:e6:da:e0:67:b1:ac:9f:e5:23:d5:7d:ee:a8:
95:de:a5:1f:0a:66:e5:16:0e:65:47:17:33:8e:3c:
26:76:ca:00:70:44:3d:31:7f:2c:e4:40:ea:b6:40:
4e:c6:ee:e0:5a:a1:9d:3d:b1:20:78:6b:a0:df:f1:
fe:e3:45:98:4b:47:77:bb:17:88:a8:65:5b:44:13:
28:a6:34:b3:b5:9b:f5:b2:12:fb:3a:26:1d:bf:44:
3e:cc:66:22:b0:4e:59:b1:30:75:da:3c:d5:18:0a:
29:0c:cd:04:28:40:bd:e7:e0:0a:16:7d:e7:60:d6:
9e:c6:57:51:3e:b3:1c:2d:cc:74:8d:27:6b:87:2a:
e8:f3:21:50:19:c8:da:5f:c8:32:93:32:dd:a2:10:
fe:49:73:9b:d9:3a:59:7a:c2:50:d3:1c:e8:58:2b:
14:cf:27:20:14:37:92:12:5a:99:69:2a:e9:2d:2d:
30:45:a9:5b:94:10:2f:d5:29:d7:ea:3b:fe:24:6a:
31:b0:65:e6:a8:52:61:69:c8:c4:49:92:ad:41:7f:
61:a1:5c:1f:4d:2f:9a:08:6a:b9:bd:46:aa:f1:5c:
74:82:1c:cc:18:c8:03:57:c8:25:f2:b5:8a:f0:f7:
ec:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:15:A2:58:92:13:2C:5A:03:A2:EF:58:B6:D3:C2:6D:BD:C9:EC:49
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pxWiWJITLFoDou9YttPCbb3J7Ek.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.176.0/23
Signature Algorithm: sha256WithRSAEncryption
38:9e:f5:ca:33:d6:5a:a9:28:c4:b9:fc:10:e7:f4:cf:dd:be:
f2:0e:4e:d3:dc:f4:d9:5f:b2:ee:3c:cd:b0:bf:78:c1:eb:46:
06:08:3f:1e:59:ee:98:82:c3:17:8c:7c:db:69:36:58:23:7a:
e3:43:ea:b8:e4:e6:e5:b6:47:fc:9a:66:cf:56:5e:e9:f2:2e:
b6:58:14:88:e0:0f:8f:14:ed:09:19:9c:fc:74:f1:52:b7:34:
e5:e3:7a:cb:7a:ad:aa:7d:27:70:72:e6:15:17:8a:ce:5d:84:
c6:88:84:25:ea:ed:43:28:6a:ca:6e:08:ab:62:8a:a7:b1:94:
17:57:2a:85:22:c0:6c:d1:3c:e3:1e:96:36:80:22:55:db:21:
5c:0e:1f:84:2a:92:6f:64:d3:aa:56:e1:fb:c2:31:7a:83:64:
fc:66:d2:52:fd:fc:53:0e:3e:0f:3c:81:09:c6:8b:55:6b:3d:
8e:40:b8:86:1a:cd:00:1a:3f:6b:60:7d:e3:6c:a3:09:68:af:
3d:8b:e5:52:17:0f:fc:9b:ce:0d:db:d8:aa:40:1e:d4:b8:30:
63:52:7c:4c:59:d2:64:79:61:20:a2:03:68:74:1e:bd:99:2d:
2d:0b:0e:33:ed:07:76:3f:61:2e:59:c8:b5:d0:5b:29:1d:79:
6e:e3:21:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:10 2023 by rpki-client on console-fra.rpki-client.org