Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wx5Mb6h3XBgJhOj-xrIvQOHCG0I.roa
File: wx5Mb6h3XBgJhOj-xrIvQOHCG0I.roa (raw, json)
Hash identifier: O1nAVHXQRO0xmWkghHLZeIDb9BFVXVwbmmgQuONCjrs=
Subject key identifier: C3:1E:4C:6F:A8:77:5C:18:09:84:E8:FE:C6:B2:2F:40:E1:C2:1B:42
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wx5Mb6h3XBgJhOj-xrIvQOHCG0I.roa
Signing time: Thu 15 Sep 2022 02:56:05 +0000
ROA not before: Thu 15 Sep 2022 02:56:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.160.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8100 (0x1fa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:56:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C31E4C6FA8775C180984E8FEC6B22F40E1C21B42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d2:ef:d9:a2:dd:73:3e:9d:d1:91:fa:16:22:
80:09:58:28:5d:41:33:42:ec:df:35:d8:2c:0e:ed:
f0:94:a8:a8:c4:e7:4d:b9:32:6b:95:91:3d:a9:ce:
e8:33:67:d5:c0:2f:b9:63:e1:96:0d:f8:fb:9f:45:
b4:83:ce:93:83:b9:cd:dd:14:31:02:d2:03:04:83:
e1:82:01:9e:1d:9c:79:32:e5:e1:2b:29:3d:39:69:
97:53:24:30:15:28:71:0d:fa:ba:fd:15:d2:07:1e:
de:f3:08:9b:20:86:75:0a:f2:5e:2b:8a:01:95:13:
71:27:f1:5b:55:c6:5f:4b:aa:9e:d1:4b:48:1c:1d:
d0:39:57:ad:58:5e:c7:38:47:18:43:95:3b:27:13:
df:d6:19:b9:80:7e:01:63:84:48:6b:24:cb:20:44:
56:23:5e:6c:05:d4:5a:53:50:a4:2e:bc:f3:3d:33:
7c:32:15:06:ef:66:33:d6:15:64:43:26:0d:53:eb:
5d:a0:36:9b:d0:b4:f3:fe:9b:ab:c6:7b:32:22:91:
65:31:2b:fd:39:22:79:8c:0a:04:2f:37:d8:bc:bf:
60:91:17:05:74:f8:40:58:cf:96:86:00:9f:dc:c3:
68:c9:b6:92:a7:a4:df:30:78:de:1a:df:e4:a4:89:
02:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1E:4C:6F:A8:77:5C:18:09:84:E8:FE:C6:B2:2F:40:E1:C2:1B:42
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wx5Mb6h3XBgJhOj-xrIvQOHCG0I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.160.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:8c:4d:5e:72:10:5d:8a:55:83:33:ad:b5:5e:34:90:48:c6:
f5:57:69:93:42:1a:c6:a0:40:4f:d2:b2:38:9c:7d:d3:4c:4c:
f1:d8:c8:37:0f:63:45:9c:10:90:d4:1d:95:61:47:b1:ed:7a:
59:ff:1f:5b:03:c0:dd:e9:9d:88:4b:f3:77:e9:e5:f7:d3:2c:
64:00:08:dd:77:54:e2:83:a2:05:60:a4:1d:ce:85:b2:35:0e:
2a:9d:5f:9e:a4:31:0c:ec:2c:78:c3:0e:c8:79:66:de:d8:0c:
86:99:ac:38:81:5b:4a:75:3a:d7:ca:eb:7b:74:41:6f:fa:d6:
37:94:29:58:30:7a:c5:72:93:7e:2d:ce:6f:4b:e6:d1:a3:04:
a0:78:e0:c1:e1:38:fd:fe:68:ea:a9:c2:1c:8b:91:5a:08:dc:
d5:7a:23:8b:02:ad:4d:39:11:99:b3:8f:15:64:00:cc:46:2d:
21:17:e2:de:07:07:bf:f9:d6:c8:ce:44:ca:33:6a:3b:ab:01:
16:b7:d4:fa:4f:c7:0f:7e:cf:3d:95:cc:28:42:af:ac:c5:cb:
ae:39:64:dc:8f:19:d7:2a:6c:a4:01:7f:29:25:f7:38:eb:a7:
f1:56:12:26:04:95:58:e3:31:77:ba:41:2b:be:3f:5a:fb:51:
1a:14:80:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:42 2023 by rpki-client on console-fra.rpki-client.org