Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xQKAUG91IE1hlD2RmVxq5_-XkKs.roa
File: xQKAUG91IE1hlD2RmVxq5_-XkKs.roa (raw, json)
Hash identifier: DKEYtvT04298f4GP863TDHL9YtOrlSBiEhhP47TEzwM=
Subject key identifier: C5:02:80:50:6F:75:20:4D:61:94:3D:91:99:5C:6A:E7:FF:97:90:AB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 210E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xQKAUG91IE1hlD2RmVxq5_-XkKs.roa
Signing time: Fri 25 Nov 2022 04:39:27 +0000
ROA not before: Fri 25 Nov 2022 04:39:27 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.40.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8462 (0x210e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:27 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C50280506F75204D61943D91995C6AE7FF9790AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:51:4c:2d:15:4f:e2:45:4e:12:12:d4:34:
2c:c8:e6:da:bf:60:a6:22:f8:87:c5:6e:d2:05:9d:
1d:10:ec:67:e9:07:34:25:ed:45:b7:38:53:ab:8b:
4d:ae:23:89:bf:5d:b9:19:e1:52:0b:58:d1:fe:74:
39:51:e8:a7:d7:65:2e:ac:28:dc:ac:19:80:f9:5c:
1d:04:f7:b6:be:06:92:3f:c5:f1:c3:1f:71:74:46:
82:b9:e2:2e:ad:bd:eb:1f:cc:a4:1f:0e:7d:78:58:
15:14:10:0e:6f:a8:be:b7:14:a0:34:b1:c0:ee:65:
f2:d4:d8:a6:4d:31:ef:5a:6d:17:c2:9b:82:66:52:
da:e9:21:e2:47:cd:62:b1:9d:4e:90:91:52:f5:83:
dc:18:8e:ff:3c:e5:78:a0:d7:ea:4b:46:78:a2:8c:
83:46:11:7c:fd:84:a6:b4:0a:e0:6c:54:e6:1a:85:
b1:4f:3f:ec:df:8f:2f:46:23:60:a7:0c:d9:ad:2e:
c3:36:0d:a0:7d:7a:c2:b1:ff:3e:9f:c9:16:9f:99:
7d:45:17:aa:6d:ba:ef:eb:e2:88:47:54:31:48:a0:
b4:4a:f3:76:20:43:81:d9:38:c9:cf:7d:f6:50:81:
17:fe:32:24:f2:d6:2e:24:6a:b8:a9:d9:be:f8:6d:
5a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:02:80:50:6F:75:20:4D:61:94:3D:91:99:5C:6A:E7:FF:97:90:AB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xQKAUG91IE1hlD2RmVxq5_-XkKs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.40.0/22
Signature Algorithm: sha256WithRSAEncryption
59:d5:5a:9b:ce:f0:d2:db:b6:bf:71:cb:a8:8a:a6:dd:a7:59:
3a:57:d5:c0:07:05:5f:a8:26:f4:9a:a1:68:80:e6:1b:12:f7:
5f:6d:d3:25:84:84:c2:7b:a2:aa:b7:40:fc:ab:5a:4c:e2:9e:
fa:f5:c2:f8:94:af:04:9e:fd:8a:ea:6a:3a:c0:5c:1e:75:67:
bc:a4:c4:ac:5f:84:19:6a:4f:96:7f:a5:b4:78:7c:01:08:ff:
db:33:6a:a8:61:c6:a6:c5:d7:59:ab:2b:09:51:5a:40:d1:c7:
06:f1:4d:a9:a7:e5:6c:15:7b:3b:88:06:f9:85:0a:92:bf:23:
a1:07:78:2b:1e:ee:1d:3c:08:9a:57:a2:b6:28:c6:59:c6:36:
89:d1:bc:27:fc:ca:3a:77:3f:7d:ad:d7:43:48:be:1f:7e:fc:
4d:af:71:d3:17:45:54:3e:a6:4e:2a:1b:ba:2c:ad:2d:e1:96:
6e:a2:a8:6f:be:61:79:81:cd:8e:f6:79:e4:f9:20:a4:2a:ce:
3d:36:34:c5:80:57:35:26:e7:90:ee:fd:34:16:ea:92:80:96:
99:be:af:c8:cd:84:2f:b0:a0:b4:67:0f:b6:5f:13:97:e1:f2:
62:21:e5:4f:d8:1d:7e:66:d7:ca:1b:c6:75:f6:a0:fb:4e:0c:
fc:d7:4d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:36 2023 by rpki-client on console-ams.rpki-client.org