Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sIQW0F0y4eZFUFB3m4l6yz03gKo.roa
File: sIQW0F0y4eZFUFB3m4l6yz03gKo.roa (raw, json)
Hash identifier: 6XFUeFufkxKVJVOn6GJ30/5i9nyvX7qBmVd5wfuE5G4=
Subject key identifier: B0:84:16:D0:5D:32:E1:E6:45:50:50:77:9B:89:7A:CB:3D:37:80:AA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sIQW0F0y4eZFUFB3m4l6yz03gKo.roa
Signing time: Thu 15 Sep 2022 02:44:57 +0000
ROA not before: Thu 15 Sep 2022 02:44:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.106.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B08416D05D32E1E6455050779B897ACB3D3780AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c6:30:8f:fe:ab:5d:7d:c1:c1:85:48:50:8c:
e3:f8:b7:21:5b:ba:ac:f7:12:38:3f:ef:e6:6a:3d:
b2:81:eb:68:33:2d:61:f4:1d:21:ed:dc:d5:08:66:
bd:b6:41:13:54:45:0b:77:30:1f:fa:83:29:0b:3f:
03:13:48:1a:86:1f:d5:fb:b2:da:2e:a8:35:89:50:
d6:4f:27:52:fc:13:31:a2:f2:49:8c:f8:73:9a:32:
60:4e:5e:82:fb:1f:d1:6d:67:90:e0:73:87:d5:a9:
89:94:16:7f:83:fa:9e:19:a7:23:cc:c6:f6:d2:c3:
a2:c1:73:62:1f:99:a8:78:50:ad:c5:53:b2:f6:48:
a1:59:5e:bc:02:f8:b8:82:b6:f5:6d:28:97:a2:ca:
f2:97:bc:71:a5:a5:16:5f:a2:30:02:0d:12:1c:0f:
bf:80:73:fd:bb:c6:e4:aa:84:5a:1e:18:6b:5f:aa:
1b:1e:0e:71:46:00:75:c7:17:94:5c:4f:37:66:a5:
06:ef:bd:8c:28:e6:22:d4:20:37:ff:c1:d3:7b:91:
a0:67:f3:32:69:38:51:76:c4:7f:1e:e4:90:5d:08:
29:9b:09:23:06:aa:03:c2:0c:a6:79:3e:f0:bd:8e:
12:57:b8:b3:fa:f7:05:c2:45:90:a2:8b:64:b1:b6:
c6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:84:16:D0:5D:32:E1:E6:45:50:50:77:9B:89:7A:CB:3D:37:80:AA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sIQW0F0y4eZFUFB3m4l6yz03gKo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.106.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:46:97:35:17:2b:72:e2:b5:7b:55:2d:38:1d:14:98:2f:0f:
a5:d2:d3:78:4f:95:8b:c4:26:f8:79:c9:a4:d2:59:ca:fa:9a:
5b:a2:07:38:2e:14:a5:0f:82:a3:a7:dc:c4:34:f5:69:7b:67:
13:3d:93:6e:04:46:78:59:39:fe:2c:30:cf:e5:7e:b0:fb:07:
fe:a0:67:0b:d2:a8:b5:2e:03:23:49:22:5a:af:b7:4e:37:39:
25:e2:f7:5b:cc:7c:25:dc:f8:c2:c2:96:1a:7b:79:6b:f7:02:
de:ce:02:56:fa:ea:bb:a5:dc:78:02:2e:ae:d7:00:3b:06:a6:
b4:5c:a4:d0:28:bd:42:ce:99:b6:67:3c:cb:e9:29:05:89:2d:
96:54:a5:07:b9:7f:71:4f:e9:66:a0:df:9c:01:8b:0c:b2:86:
92:48:27:f9:f9:3b:83:ad:d9:e2:fe:0f:50:7d:c1:2a:dc:dc:
f1:b8:a0:70:8c:76:ed:4c:1c:89:f7:ba:be:42:c3:92:2b:83:
4d:64:aa:7d:f4:95:08:e4:81:a9:d8:ca:8d:e8:97:2d:9e:0e:
ae:58:be:b6:ce:83:7a:1d:b8:82:14:51:24:20:c5:3a:ba:88:
ae:80:c9:32:51:93:4d:5b:bf:bb:fa:74:98:ab:11:86:8f:fb:
1a:ed:9a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:29 2023 by rpki-client on console-ams.rpki-client.org