Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vDbtpZ4rd4jyyOn0szODB4WW3Dg.roa
File: vDbtpZ4rd4jyyOn0szODB4WW3Dg.roa (raw, json)
Hash identifier: wRCtwSueldbkCn6AJq2zwUR9DqG53MOwEdjcq/mf6EU=
Subject key identifier: BC:36:ED:A5:9E:2B:77:88:F2:C8:E9:F4:B3:33:83:07:85:96:DC:38
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 200C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vDbtpZ4rd4jyyOn0szODB4WW3Dg.roa
Signing time: Fri 25 Nov 2022 04:38:16 +0000
ROA not before: Fri 25 Nov 2022 04:38:16 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.148.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8204 (0x200c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:16 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BC36EDA59E2B7788F2C8E9F4B33383078596DC38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:69:2e:32:6a:46:6a:a8:47:7b:28:7f:eb:13:
f7:c9:d3:12:8f:49:c8:5c:4b:75:90:61:e1:7e:99:
c8:14:ef:49:ff:4e:3d:e5:69:a5:79:23:c8:b2:27:
79:93:a7:d1:b8:6d:1d:25:92:f6:f6:4b:af:a9:0d:
34:0d:0d:03:bb:ca:5d:ec:d4:8a:0a:4c:b8:87:dd:
23:d9:69:32:40:ec:84:fd:2a:e2:17:4c:4b:44:6f:
7e:b0:f5:30:0b:76:90:18:0e:c8:e4:f6:fd:d4:4c:
67:bc:50:94:ac:e7:15:73:00:24:ee:4a:ed:85:df:
00:f0:4c:f8:20:12:f2:0f:d2:96:b9:97:d8:f9:d0:
8c:4a:e0:2e:78:d6:d7:a3:fb:61:75:52:af:ed:42:
a4:b1:52:69:b6:c2:77:39:c5:cc:69:69:29:20:22:
db:1a:b1:19:1e:4c:bc:83:ec:3c:18:ac:4a:58:2a:
98:a0:f9:5b:d7:b6:e4:7f:f0:44:24:6c:86:ee:be:
dc:64:21:96:94:47:ec:2b:c9:ec:78:c7:fe:87:fc:
89:09:fe:80:9e:44:39:bc:d5:22:58:fb:97:cc:f2:
ad:73:e7:3f:03:0a:0c:07:29:f6:79:d6:61:65:53:
7a:67:01:0a:76:b8:30:72:cf:35:80:ba:de:f1:19:
c0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:36:ED:A5:9E:2B:77:88:F2:C8:E9:F4:B3:33:83:07:85:96:DC:38
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vDbtpZ4rd4jyyOn0szODB4WW3Dg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.148.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:a5:b8:5c:bd:b0:8d:7c:dd:07:db:48:c8:88:85:23:44:d0:
d5:a2:83:b6:93:b8:fd:da:22:b5:55:83:0e:bc:f5:63:d9:93:
97:ca:1d:98:69:a7:aa:bc:6d:25:21:9f:e4:c8:16:33:ae:94:
b5:dd:7b:9a:6b:48:9a:be:a8:ee:10:dd:eb:13:b4:fc:ce:6e:
01:48:02:9f:48:d7:5a:6d:ae:12:c6:49:3f:24:9c:ba:7a:18:
c4:62:e7:cc:4d:24:30:e9:6d:89:54:a0:45:53:44:6e:43:4f:
04:45:d0:f4:aa:c3:77:23:10:ee:f5:c1:6d:0e:cc:53:5a:bb:
51:a2:a4:88:36:fa:98:e2:0c:27:31:b4:9c:27:49:70:e7:42:
26:2d:8e:b6:ad:7e:6b:c4:64:5f:de:95:54:06:86:e1:cb:41:
d9:38:3f:5b:36:73:9d:78:8f:03:75:58:38:a4:27:62:c3:5e:
a5:9f:40:2f:be:bd:9e:92:1a:1b:6c:7f:71:af:bc:43:44:d3:
b8:db:52:84:ef:fd:67:20:8d:7e:2b:5b:76:81:5b:ae:c8:d8:
7a:4f:f9:38:af:fd:43:d7:a8:c9:5d:0a:4c:16:77:54:19:78:
33:99:b2:1a:89:f8:c8:cb:e9:d9:31:80:37:2f:79:13:47:9a:
cb:af:90:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:12 2023 by rpki-client on console-fra.rpki-client.org