Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zzFYkrdQ9vNPtLwdrRU2rJVniuU.roa
File: zzFYkrdQ9vNPtLwdrRU2rJVniuU.roa (raw, json)
Hash identifier: 1D9/jddUS0RwD4Y6+BsWfvrXs674GeY7tyXagsJbf3s=
Subject key identifier: CF:31:58:92:B7:50:F6:F3:4F:B4:BC:1D:AD:15:36:AC:95:67:8A:E5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20A2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zzFYkrdQ9vNPtLwdrRU2rJVniuU.roa
Signing time: Fri 25 Nov 2022 04:38:56 +0000
ROA not before: Fri 25 Nov 2022 04:38:56 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 106.1.92.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8354 (0x20a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:56 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=CF315892B750F6F34FB4BC1DAD1536AC95678AE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:73:d4:fa:e6:7c:68:1a:e8:93:9f:aa:31:32:
86:44:ef:ac:1d:df:f2:b5:f8:fa:6d:0e:52:bc:8a:
bf:59:0c:fc:59:4d:1d:7f:89:cc:08:a0:0f:b6:70:
78:03:5d:41:13:54:e1:09:5f:d9:20:77:e7:32:5b:
78:fa:76:8b:50:da:5a:05:f1:7d:17:99:70:80:0a:
90:98:6d:9e:a3:cb:2a:ff:54:b2:a5:a0:78:a4:22:
81:84:c9:77:6b:7c:31:5c:bb:34:58:05:3d:b1:eb:
86:a3:5a:eb:0d:bc:b8:cc:2c:db:e5:d0:26:f1:99:
20:9e:65:e2:c2:8a:5d:ea:50:68:7e:5d:12:7a:6b:
dc:94:a7:20:67:ec:8b:06:c3:72:0b:14:a5:e1:10:
02:69:4a:61:62:75:6b:d8:cc:d3:6b:6d:4e:cc:85:
45:ee:31:00:21:1b:1e:48:97:bb:de:cd:01:cb:15:
2e:14:fc:40:80:1a:18:11:34:96:70:ef:f9:47:47:
05:61:c3:9a:33:0e:3f:35:e9:44:bb:a4:f3:d6:d4:
90:f6:ca:e7:85:b0:06:62:cf:86:28:c0:e2:5c:bc:
5b:db:1e:0c:fe:c6:b7:a1:19:78:3b:ea:c3:fa:54:
41:9e:e9:8e:6b:97:d3:bf:8a:7e:91:82:f6:da:66:
45:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:31:58:92:B7:50:F6:F3:4F:B4:BC:1D:AD:15:36:AC:95:67:8A:E5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zzFYkrdQ9vNPtLwdrRU2rJVniuU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.92.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:a9:75:93:e7:dd:45:ab:ee:79:ee:e3:7a:dd:6c:5b:e7:c2:
77:f7:e1:5c:aa:fe:5f:04:ee:88:9a:35:59:45:0e:9b:cd:a0:
bf:3d:36:bd:fe:50:21:6b:3b:f1:52:79:35:7c:31:59:e9:a9:
4e:ee:7f:b2:b1:a7:a7:92:4b:33:15:08:8d:f6:7f:d5:3c:5a:
d6:55:b2:63:de:bb:99:b2:5b:e6:3a:a7:17:7f:3c:d7:06:4b:
1a:f7:46:c6:22:d3:5a:e8:17:9b:18:b7:f7:d2:13:6f:22:96:
3c:2b:fe:30:d7:ea:62:9d:8d:8c:7e:b4:f4:14:02:3e:00:f3:
83:1e:ea:6a:0c:63:64:83:8e:71:17:9f:e9:0c:f6:60:13:bf:
45:43:05:ed:3d:2f:72:40:68:cb:8a:29:dd:79:ce:de:52:e8:
21:de:cb:55:9e:fb:b8:63:c8:cf:67:54:f6:ca:7a:c6:cf:c9:
c7:55:ca:c1:23:11:cd:0d:f6:27:d8:d4:0b:0b:e6:0a:fe:3b:
37:81:43:92:4f:28:23:30:59:3f:ff:22:9e:71:5b:0e:43:43:
26:1c:33:58:50:1e:8c:bc:3a:93:7d:c2:f9:f7:80:ba:02:74:
e9:59:3b:25:85:fa:06:46:c0:69:c2:97:91:7c:d7:2f:8a:9b:
93:c1:1d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:13 2023 by rpki-client on console-fra.rpki-client.org