Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0kTG-gO2eoAwBTOnh8YiijYgw40.roa
File: 0kTG-gO2eoAwBTOnh8YiijYgw40.roa (raw, json)
Hash identifier: uIiVsfUOhwfTEjlpU48QLzcM8RxatxeSq3QZ/DpH9jE=
Subject key identifier: D2:44:C6:FA:03:B6:7A:80:30:05:33:A7:87:C6:22:8A:36:20:C3:8D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2351
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0kTG-gO2eoAwBTOnh8YiijYgw40.roa
Signing time: Fri 25 Nov 2022 04:43:25 +0000
ROA not before: Fri 25 Nov 2022 04:43:25 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.136.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9041 (0x2351)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:43:25 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D244C6FA03B67A80300533A787C6228A3620C38D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8f:8f:94:8e:f0:f3:8c:4e:93:e8:44:b6:aa:
2b:c0:1f:ae:4c:ef:d0:a5:ed:f7:47:3e:c7:27:95:
6b:8f:d6:5d:d7:06:04:f2:9c:b0:e5:0a:cc:ba:f1:
62:f3:a1:a3:d5:48:18:b6:1a:be:50:57:22:77:2a:
22:01:32:63:36:df:99:40:be:1f:3a:a6:56:8d:59:
c5:3d:ee:c3:bf:da:55:95:14:44:05:8b:ce:ab:dd:
7c:b8:a4:8f:bb:2b:e3:61:00:d6:cb:14:d4:ca:db:
c6:57:4f:9e:fd:2d:fb:14:c1:45:93:78:0c:46:d9:
65:77:94:f6:93:c8:e3:05:ca:30:90:72:20:0e:ed:
2d:64:01:1c:66:1a:79:61:db:e9:5d:43:27:4b:73:
88:77:97:d5:d5:c6:a7:05:42:54:59:0b:44:34:6d:
e3:0f:f0:95:4d:ad:66:09:07:8a:49:bd:ef:a2:8f:
aa:54:0d:14:9e:59:2b:99:85:4f:8a:c6:ae:dc:04:
3e:95:2b:1e:db:ef:99:ef:6d:e8:dd:fd:38:5a:40:
a0:cd:63:eb:35:b9:0d:2d:31:c8:2f:f8:92:c5:a2:
71:c9:5e:09:7d:18:f5:a7:2c:79:09:c9:b5:d4:33:
36:45:07:28:51:8d:d2:45:3b:a4:52:ad:cb:c9:65:
a2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:44:C6:FA:03:B6:7A:80:30:05:33:A7:87:C6:22:8A:36:20:C3:8D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0kTG-gO2eoAwBTOnh8YiijYgw40.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.136.0/22
Signature Algorithm: sha256WithRSAEncryption
66:9f:2e:ce:2b:a0:3a:41:85:e0:09:4e:28:18:80:f1:9a:09:
41:28:03:24:cd:10:df:fb:2f:83:43:cc:6a:cb:8c:d9:13:03:
77:c6:87:9a:3c:f6:9a:85:05:ba:f4:d4:48:9c:e5:98:0e:ff:
a6:e8:86:1b:5f:6a:35:2d:ce:5a:4c:1c:35:d2:15:31:10:1f:
94:9f:81:ef:4c:f4:63:55:a8:e2:a4:08:e7:c9:29:a2:b0:ba:
21:f5:fa:22:c0:3d:06:26:e9:af:58:32:01:f2:1b:fe:2e:2e:
63:c2:83:33:e1:9d:85:5c:95:0a:3b:58:30:8d:86:3a:5c:16:
43:a2:2a:a1:00:63:b9:d1:1f:ef:5c:4f:6e:52:11:55:03:c3:
2c:57:4f:dc:3e:fe:7b:c6:6a:e2:22:db:4c:ef:05:05:2a:08:
ba:a7:d5:b0:41:8b:ae:51:d4:17:dd:60:c9:97:37:58:fa:a2:
4a:d0:2a:1d:44:b3:61:31:fc:93:01:cd:7b:fa:30:3a:54:a8:
09:0e:6d:57:ba:48:48:62:ae:35:e1:11:f2:c4:d9:f9:0c:50:
bd:da:c3:5d:cb:8a:0c:6a:d4:c6:09:de:f6:e6:bf:4f:eb:95:
46:e0:59:9f:b5:fd:62:fb:1d:e1:34:66:75:7f:e3:92:bc:dd:
27:c4:c3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:46:59 2023 by rpki-client on console-fra.rpki-client.org