Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y0hty5e1JUyA-35bV3IYZxjNqzw.roa
File: y0hty5e1JUyA-35bV3IYZxjNqzw.roa (raw, json)
Hash identifier: w20fRGxLAQHd+iLNtDvuQld+zgAH9pBgDxDrsqRPrZU=
Subject key identifier: CB:48:6D:CB:97:B5:25:4C:80:FB:7E:5B:57:72:18:67:18:CD:AB:3C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 204A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y0hty5e1JUyA-35bV3IYZxjNqzw.roa
Signing time: Fri 25 Nov 2022 04:38:33 +0000
ROA not before: Fri 25 Nov 2022 04:38:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8266 (0x204a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CB486DCB97B5254C80FB7E5B5772186718CDAB3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:2c:aa:60:41:48:99:01:9a:95:24:2c:e9:
1b:f6:8f:23:37:66:f8:3c:b1:ec:3a:7d:37:25:46:
50:77:b8:91:e6:10:20:bf:3f:47:71:a5:df:56:ae:
a0:fe:7f:7e:bc:71:73:56:8a:78:83:8e:44:70:9c:
78:85:5a:8a:bc:9d:1e:a3:29:26:b4:ae:da:95:04:
0a:a5:45:c7:b8:8f:34:61:8b:1e:fd:34:50:a9:3d:
09:72:62:d5:fe:55:80:a8:0e:fb:15:0b:c2:70:aa:
7d:0f:4c:8d:6c:97:0f:70:77:8d:46:8f:49:e4:05:
eb:9a:4e:2e:dd:bc:e7:31:e6:a6:c6:aa:f3:64:40:
34:46:7d:2f:a8:62:b6:00:b6:41:bd:7d:43:cf:bc:
0a:b1:78:22:93:14:83:3b:9c:cb:37:90:c5:e8:97:
c2:31:6b:95:1e:70:4d:5e:24:de:2f:76:58:a1:d3:
d6:f5:8f:e2:09:de:f1:dd:37:52:e2:84:42:46:ac:
3c:73:67:3b:b8:68:38:45:1c:fa:c2:57:ec:b6:8c:
2d:3b:92:63:a7:99:0c:aa:ac:85:7f:f3:21:c7:d4:
eb:68:75:61:17:43:7b:ba:cc:b4:bb:9a:49:a9:84:
e8:19:4e:fa:4f:f4:86:de:e2:32:42:fd:ec:3c:77:
a4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:48:6D:CB:97:B5:25:4C:80:FB:7E:5B:57:72:18:67:18:CD:AB:3C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/y0hty5e1JUyA-35bV3IYZxjNqzw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.130.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ad:43:12:d4:ff:3e:b7:b8:ef:9a:d2:c4:e8:fb:0e:e4:8b:
ae:7e:ed:cd:06:4e:bc:89:0b:45:a6:90:f7:8e:91:56:52:4d:
ce:62:f2:e9:3a:11:a3:08:a1:bd:41:3c:ad:91:a5:a1:76:7b:
8a:bb:ad:31:8f:9b:0d:07:ef:3a:f7:08:88:49:31:10:61:67:
a4:2f:0f:10:3a:26:82:33:b4:f9:84:71:81:a0:74:f3:3b:87:
9a:74:13:60:65:85:98:7a:69:27:03:e1:bc:16:df:6f:ea:b6:
4c:fa:a2:89:e5:33:28:30:8e:60:6c:e3:32:a8:75:14:cc:56:
a9:45:7c:ea:57:41:34:59:05:67:79:e3:0e:18:f6:29:0b:e6:
f2:ff:25:82:85:74:09:6e:7f:01:e7:0d:e7:ab:78:b7:b6:36:
d8:9e:e7:51:57:9a:3e:06:fa:9f:55:90:b6:1f:c3:b6:38:58:
5e:c6:d2:32:ee:4d:3d:e8:4f:d3:02:22:9d:a6:1b:2c:31:c2:
23:47:f5:e6:d0:8f:1b:49:6e:29:10:73:a5:0b:ad:ae:bb:05:
98:01:5d:7f:de:b6:dc:eb:7b:29:08:31:d9:1c:4f:24:9b:1a:
14:ab:85:55:c7:e4:46:93:58:0a:71:e7:7a:fe:0e:f1:fc:48:
a9:ac:b5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:12 2023 by rpki-client on console-fra.rpki-client.org