Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vjuxUaBE2ubAdYCsWo8C0oqNgGg.roa
File: vjuxUaBE2ubAdYCsWo8C0oqNgGg.roa (raw, json)
Hash identifier: HcPJGx5Fntakxw01YewxE++afqr81x7dogUwJ+zIDgw=
Subject key identifier: BE:3B:B1:51:A0:44:DA:E6:C0:75:80:AC:5A:8F:02:D2:8A:8D:80:68
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2034
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vjuxUaBE2ubAdYCsWo8C0oqNgGg.roa
Signing time: Fri 25 Nov 2022 04:38:27 +0000
ROA not before: Fri 25 Nov 2022 04:38:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.136.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8244 (0x2034)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=BE3BB151A044DAE6C07580AC5A8F02D28A8D8068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:36:06:ef:75:1f:a9:5c:42:ad:8a:75:91:26:
77:33:f3:4f:1f:3d:71:bd:08:27:ef:81:a4:9c:bb:
41:50:3b:4a:1e:b0:f6:6e:60:29:46:35:8a:7e:e8:
9a:76:29:ba:89:9b:7a:7b:57:11:8b:72:c9:08:98:
2c:27:a8:43:1d:46:42:f3:b3:42:d8:c4:e1:7e:9e:
a5:d2:c1:da:b2:e2:76:5a:40:f2:3a:0a:75:9d:6d:
bd:85:16:82:28:3f:22:72:d2:ed:ff:7c:e0:be:4f:
e6:d7:60:5f:7a:35:f4:e7:d7:14:d0:1b:ef:78:92:
07:f4:8b:12:ea:2e:b8:a1:e2:27:2d:f5:83:82:e1:
ca:02:18:41:39:56:06:58:3d:3c:0f:be:18:df:5e:
6a:da:b1:7f:64:60:a5:be:1d:1e:82:06:25:c1:8e:
91:b4:4a:a4:8e:f9:38:9a:f9:99:17:20:07:9b:69:
02:b6:23:12:a7:6f:ac:b8:57:36:b5:67:a5:f0:e5:
7d:56:f7:c4:57:c7:57:29:60:ba:d8:0e:98:82:94:
b0:51:62:bb:95:d5:a2:ee:71:8a:3b:fb:35:8a:41:
0a:39:33:f2:c9:98:d9:00:fb:77:fc:bc:ac:fc:55:
e7:ba:6e:c6:fd:60:85:f9:76:00:c2:4f:c1:4b:2e:
26:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:3B:B1:51:A0:44:DA:E6:C0:75:80:AC:5A:8F:02:D2:8A:8D:80:68
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vjuxUaBE2ubAdYCsWo8C0oqNgGg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.136.0/22
Signature Algorithm: sha256WithRSAEncryption
90:6f:26:71:35:9a:c5:fb:15:f6:d0:d8:f0:bb:c2:f5:1e:70:
06:74:17:e3:55:84:c3:de:e7:1c:c3:e1:77:5e:53:23:b3:0a:
c8:3d:d3:d1:75:28:ac:dc:3a:fe:9c:96:bf:30:7d:e2:c5:b2:
fb:fb:39:ee:45:85:41:08:69:db:8b:29:06:9b:7f:e7:81:88:
c1:9c:ce:8b:bc:f6:5b:59:19:70:55:7b:a0:03:d7:8d:54:0a:
79:88:5b:70:60:28:a8:e2:3b:dc:2c:89:6b:82:f9:42:3c:45:
16:00:8d:cf:66:b3:7f:d2:96:bc:7e:92:f4:52:e2:65:d6:92:
83:56:a7:9b:ed:64:84:e3:47:b6:3a:59:99:6a:16:e5:9f:c0:
f9:07:41:b0:11:93:57:75:cc:d5:1e:d6:41:a7:cc:9d:ea:a4:
39:88:ab:9b:9f:16:9b:f4:06:fa:9c:7d:c5:71:d9:1b:4b:6c:
c3:44:b4:22:7b:4f:bb:00:36:9f:25:51:23:e2:4c:d1:6b:4e:
bb:62:57:66:c4:85:8e:6b:c5:55:11:a9:d2:a7:f1:cb:fb:60:
15:fc:f7:6e:ec:62:64:3c:da:5a:4c:80:25:27:48:e4:d7:84:
af:80:4c:d1:70:6b:18:22:4b:a4:81:67:97:14:18:cb:6e:31:
de:df:76:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:12 2023 by rpki-client on console-fra.rpki-client.org