Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zqfr9gZf4hpHOD4X-HtA_wGRJ-0.roa
File: zqfr9gZf4hpHOD4X-HtA_wGRJ-0.roa (raw, json)
Hash identifier: s+MWX3JzpHqu05VE/NNvl3bgRjh8daBFZgVA5hXdGTQ=
Subject key identifier: CE:A7:EB:F6:06:5F:E2:1A:47:38:3E:17:F8:7B:40:FF:01:91:27:ED
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20F8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zqfr9gZf4hpHOD4X-HtA_wGRJ-0.roa
Signing time: Fri 25 Nov 2022 04:39:21 +0000
ROA not before: Fri 25 Nov 2022 04:39:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8440 (0x20f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CEA7EBF6065FE21A47383E17F87B40FF019127ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ad:8c:8e:dd:28:74:d9:93:48:04:40:32:c5:
e2:7e:58:2d:f6:fd:b3:20:df:df:5d:e8:1f:f0:75:
2f:b6:27:09:1e:9b:18:3b:15:6a:99:1c:66:48:a6:
7a:2c:e9:94:11:1b:6d:78:85:15:67:b5:6a:27:7d:
bf:a8:5a:d6:4f:3a:cc:54:03:4c:2f:04:f3:84:c0:
6b:2e:67:98:4a:2a:02:75:c8:6b:b5:89:f7:4f:5b:
f6:19:92:2f:32:70:4a:e6:e9:b1:07:b4:0b:b8:9d:
5d:02:04:4d:5c:8a:46:43:25:75:82:c0:e1:93:04:
40:31:79:75:e0:59:66:68:ef:8c:82:a5:7b:4c:94:
d2:a1:13:24:0e:4d:ca:4f:e3:78:48:0d:78:cb:e9:
0c:78:ee:8d:72:10:40:ea:dc:3d:19:8c:81:e9:23:
2a:b5:82:a3:4c:b9:32:58:a0:3d:e6:1d:e8:55:b4:
8d:d6:7a:57:a4:3c:c7:8d:8b:28:59:17:30:6d:34:
fe:51:2c:a2:31:f8:65:0b:06:96:4f:ae:8a:f0:d3:
15:77:96:79:78:2d:37:6c:72:63:f2:d1:2d:55:37:
6e:c0:ec:b8:b3:11:90:b4:b9:29:f7:a5:8e:bb:0b:
70:db:de:23:66:85:66:35:f3:80:ca:d7:06:72:38:
10:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A7:EB:F6:06:5F:E2:1A:47:38:3E:17:F8:7B:40:FF:01:91:27:ED
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zqfr9gZf4hpHOD4X-HtA_wGRJ-0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.103.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:21:d7:6b:02:7a:15:45:51:bd:8d:06:f3:8e:d9:6d:a9:3b:
98:fc:a5:55:73:e4:6f:ff:8b:19:0f:51:c7:5f:7d:c9:8c:b8:
5b:54:7c:7b:cf:05:bb:a8:14:c6:b6:51:3b:59:44:69:84:5c:
e7:3b:96:e1:e9:91:4e:16:76:9b:90:94:b3:20:40:4e:7e:41:
43:06:32:d1:79:d0:7d:69:c5:b9:c5:b8:59:8f:c4:24:a7:e0:
50:1c:18:55:46:16:b2:49:6a:14:c9:c0:6d:32:dc:f0:6a:de:
65:fe:9f:14:4b:aa:65:4c:6b:d9:ad:0d:32:57:69:58:fb:95:
5c:10:21:df:78:c0:af:e9:99:a9:14:13:4b:19:f6:df:e6:d3:
6c:2a:fb:46:9e:28:3c:4b:d5:a2:3c:94:5a:80:67:20:f6:2d:
57:ff:6a:3a:70:81:54:41:94:1b:24:c5:b2:f1:eb:02:e6:48:
e2:e6:4a:50:d8:5b:03:ba:e7:52:0c:dc:87:da:98:9d:41:c6:
1b:c5:38:e8:84:34:ec:d7:1a:89:5f:56:b6:db:1f:0f:7a:e1:
8d:5e:a1:4f:51:13:60:ad:e6:da:76:2b:a5:00:c6:d2:90:62:
9e:a3:6e:c8:49:00:16:82:11:7e:8c:e5:95:1d:10:8d:07:57:
b7:49:df:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:13 2023 by rpki-client on console-fra.rpki-client.org