Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r1VFI7A--gL9SH4kU5uuNVqLr7o.roa
File: r1VFI7A--gL9SH4kU5uuNVqLr7o.roa (raw, json)
Hash identifier: ytFN0ilRhf+qGIb7p1V1eFjV2jKzSYvj0iLyp80L398=
Subject key identifier: AF:55:45:23:B0:3E:FA:02:FD:48:7E:24:53:9B:AE:35:5A:8B:AF:BA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r1VFI7A--gL9SH4kU5uuNVqLr7o.roa
Signing time: Thu 15 Sep 2022 02:53:55 +0000
ROA not before: Thu 15 Sep 2022 02:53:55 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.144.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:55 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=AF554523B03EFA02FD487E24539BAE355A8BAFBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:75:b2:86:88:91:ad:b1:69:fc:a5:52:bc:7b:
14:58:f5:29:8f:86:c0:b0:f6:21:fc:5d:46:e2:dd:
04:f1:bb:7b:6c:d4:59:e3:4a:b4:55:9a:10:fc:85:
39:23:ac:e8:1c:31:48:12:4e:b6:92:5f:4e:60:4a:
e4:bf:d7:dd:e5:a8:3f:e6:61:c6:c6:3f:16:01:3a:
23:47:ea:b8:45:a4:dc:19:47:18:ce:03:23:9f:ec:
c8:fe:ee:31:8b:14:a3:9c:69:f0:e4:00:c4:0c:bd:
79:c7:d4:27:14:ae:ea:39:03:a4:f3:ba:4e:ef:e4:
6a:c7:af:c7:ee:32:ad:bc:e5:fd:a1:9e:56:04:3c:
4a:95:8f:78:e6:d3:5c:15:d0:80:c4:21:c3:2d:5a:
e0:5c:82:f6:ac:b9:2d:ad:db:6b:8f:49:dd:dd:c7:
e1:18:8e:70:fd:62:1b:c5:c1:35:61:47:c0:ec:3c:
95:af:84:57:db:be:0e:6d:aa:a0:24:1a:90:83:13:
55:b2:9e:de:df:8d:28:de:40:30:6c:4e:07:8d:dc:
13:e9:8e:30:cc:66:a9:3c:ee:73:1d:e0:08:e5:fd:
c7:a9:ef:3a:7f:6b:13:06:b4:79:11:77:e8:8f:cf:
a5:87:16:55:31:9e:ae:5d:16:72:de:e4:74:f2:68:
5a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:55:45:23:B0:3E:FA:02:FD:48:7E:24:53:9B:AE:35:5A:8B:AF:BA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r1VFI7A--gL9SH4kU5uuNVqLr7o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.144.0/23
Signature Algorithm: sha256WithRSAEncryption
30:8d:3f:c3:7e:6b:0b:de:d1:34:7e:20:10:b6:54:c7:df:0c:
3c:4a:b5:ae:72:ff:be:60:09:ab:c4:a5:aa:1e:ad:d1:79:93:
3e:a9:97:94:27:f6:cb:94:72:8c:ad:a5:e2:f1:d1:8f:eb:c1:
52:fe:44:bf:fe:d2:e4:e2:1a:d5:65:82:fb:05:46:f5:5c:39:
4d:a1:95:cc:75:75:65:d8:08:4c:3b:dd:96:56:80:68:d9:32:
61:ff:88:f6:b9:99:2f:f8:91:be:52:c8:19:9a:6a:bb:b3:b5:
a4:78:c0:91:87:07:a9:6c:8b:bb:69:f5:0a:1e:c1:1e:39:3d:
e5:14:64:5d:2f:e2:dd:42:bc:e5:66:6b:75:0b:59:75:81:26:
12:f2:8a:29:cc:f4:fb:91:a3:4c:9c:ad:35:8f:4a:80:5d:46:
6e:d5:89:1e:00:3d:1e:fe:3c:9e:1c:77:e0:92:97:e0:f1:ba:
94:15:09:b3:af:0e:69:b1:6e:6b:d0:31:de:de:85:60:77:a5:
a4:f5:c2:69:1d:0a:d7:b7:9b:70:9c:d9:95:bb:45:ad:b5:67:
50:ce:39:b3:f1:bc:cc:44:29:8f:d9:4d:d4:5b:e6:db:ed:7e:
51:02:7d:c4:6b:39:54:f2:23:cd:23:cb:cb:7b:93:7e:c0:fa:
20:1d:17:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:40 2023 by rpki-client on console-fra.rpki-client.org