Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/26lOmbOla-HtI-Ze5BvR1R2_30s.roa
File: 26lOmbOla-HtI-Ze5BvR1R2_30s.roa (raw, json)
Hash identifier: Ep02rwCpGBS+TNoWuqvlU9DC3ouMXLz8vKMUX87PDFE=
Subject key identifier: DB:A9:4E:99:B3:A5:6B:E1:ED:23:E6:5E:E4:1B:D1:D5:1D:BF:DF:4B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2128
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/26lOmbOla-HtI-Ze5BvR1R2_30s.roa
Signing time: Fri 25 Nov 2022 04:39:33 +0000
ROA not before: Fri 25 Nov 2022 04:39:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.24.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8488 (0x2128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DBA94E99B3A56BE1ED23E65EE41BD1D51DBFDF4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:86:15:03:51:22:2d:69:5b:5c:33:73:82:c6:
32:47:23:50:22:99:9c:4e:43:63:39:0e:56:bb:97:
4a:a9:b9:44:ed:d4:e1:aa:fb:6d:34:b7:43:4d:b2:
64:e8:7f:ec:48:88:6b:e3:f7:00:3f:68:e6:33:38:
c0:b0:e1:10:c1:68:f5:0d:a5:8e:23:1e:84:dd:f6:
43:7e:83:bb:ad:44:f6:b3:45:b6:b3:7d:15:77:b0:
db:da:2e:05:2e:f8:03:c9:c0:53:34:a4:25:24:cc:
d0:20:a8:1c:2c:77:2c:1a:6f:3e:96:c9:df:fa:c6:
cd:8d:ef:75:6d:d2:5d:c4:6d:22:fb:d7:b0:c0:cc:
ad:e8:60:cf:37:d2:2f:7b:22:38:22:af:8e:1a:7b:
0e:c5:0f:33:87:40:c2:07:c4:18:00:af:8b:91:fb:
67:b9:db:d8:fe:24:c4:a9:97:a9:35:55:d2:c4:9b:
cc:29:40:d8:5d:0b:23:8e:37:85:e9:fd:c9:11:58:
72:24:bd:f6:d5:00:b0:3d:f7:bd:da:1b:65:ca:2d:
a3:d3:64:6e:18:c8:85:04:24:1c:f3:8c:59:80:a0:
79:63:60:1f:42:f2:dc:a0:d1:20:a9:22:7d:91:ab:
f3:04:9e:76:74:e9:4d:70:7f:26:0b:b0:50:e8:f3:
80:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A9:4E:99:B3:A5:6B:E1:ED:23:E6:5E:E4:1B:D1:D5:1D:BF:DF:4B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/26lOmbOla-HtI-Ze5BvR1R2_30s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.24.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:eb:aa:77:c6:5a:ae:a3:42:a9:ec:3b:73:ea:4a:c2:4f:e7:
cf:b5:ce:40:5c:4e:67:76:8e:9b:2d:1c:31:6b:ef:69:90:e0:
15:31:ef:31:3f:db:b7:f0:ec:97:38:07:22:c8:14:97:04:e6:
f5:8f:86:e0:81:15:36:27:c0:6f:fd:e4:7e:15:a4:2a:84:35:
6a:10:d9:d3:25:d4:ee:27:4d:93:00:8c:24:4a:af:ee:6a:79:
6d:52:b4:a8:7d:1b:37:24:d0:52:09:27:68:22:43:ed:0c:c6:
79:41:1a:93:1c:84:5d:91:d4:b8:7f:69:0b:f8:36:33:26:92:
50:02:7e:1c:8a:59:b0:5e:11:13:91:8c:51:fb:19:1f:9d:10:
84:cf:c4:f5:cc:b4:fd:86:0c:67:a7:93:3c:b4:ab:cd:72:b8:
64:18:c9:3e:23:eb:52:21:76:3e:e1:90:5b:65:e4:86:be:c4:
38:2c:f4:6e:4d:5d:95:9f:ce:7d:c1:3d:07:31:28:06:f3:99:
c8:38:81:68:82:9c:03:e1:0f:ed:30:61:e4:5f:27:99:ba:f1:
72:e5:78:b3:ba:59:35:49:f6:97:31:f1:3f:8a:08:d7:91:86:
5b:ee:23:83:4e:f4:f6:41:9e:7d:3b:f8:37:50:7c:44:c2:e1:
2c:65:a8:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:20 2023 by rpki-client on console-ams.rpki-client.org