Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2wO624EJxSHbyvbOj6_56Ehk7P0.roa
File: 2wO624EJxSHbyvbOj6_56Ehk7P0.roa (raw, json)
Hash identifier: AnVCptbuOojnS77gxlb1XTCTpKSyz12VEwzHSTSlNNY=
Subject key identifier: DB:03:BA:DB:81:09:C5:21:DB:CA:F6:CE:8F:AF:F9:E8:48:64:EC:FD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FF8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2wO624EJxSHbyvbOj6_56Ehk7P0.roa
Signing time: Wed 23 Nov 2022 08:31:00 +0000
ROA not before: Wed 23 Nov 2022 08:31:00 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.192.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8184 (0x1ff8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 23 08:31:00 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DB03BADB8109C521DBCAF6CE8FAFF9E84864ECFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:20:98:77:07:92:f4:eb:21:81:bf:61:e5:
15:e6:f2:eb:93:e3:f1:a6:a5:e7:0b:93:60:9e:93:
2c:7b:3e:46:41:57:9c:f7:15:70:55:04:2a:e1:38:
0c:52:e1:27:38:5d:0b:73:3c:ba:b1:35:b4:a3:6c:
8c:0f:52:7c:55:8f:7f:da:d5:99:83:d1:f4:33:2f:
32:8a:f8:c4:04:ee:75:13:03:4c:08:3f:33:fd:a2:
8c:cd:d8:ff:47:7f:de:69:1a:fb:af:2f:84:ce:05:
26:39:4d:0f:65:ad:13:d1:60:10:e9:dc:1e:38:91:
86:54:56:41:30:7b:94:0c:6a:71:34:da:7d:74:28:
86:6f:e2:71:27:86:c6:dc:d4:df:3e:a3:e0:20:6f:
9d:4c:b0:d8:48:54:5d:a6:0b:84:2c:a7:99:e5:12:
1e:4e:e9:4f:9b:23:e6:bb:9a:88:a6:8d:83:6e:1b:
da:da:65:a1:0e:50:cc:a3:f1:15:34:08:05:01:68:
08:1a:5e:7a:60:5f:b4:1c:82:57:3d:f9:d7:14:c6:
b0:44:c3:23:47:26:88:ef:3e:d6:b4:1d:2b:d7:a6:
fe:6b:88:b0:e1:fa:b6:be:6a:97:73:20:8c:0c:a3:
18:9d:22:e6:19:61:f8:fc:2a:32:a6:34:bc:a8:23:
e7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:03:BA:DB:81:09:C5:21:DB:CA:F6:CE:8F:AF:F9:E8:48:64:EC:FD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2wO624EJxSHbyvbOj6_56Ehk7P0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.192.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:c9:e1:5c:c4:60:b8:0b:1c:54:4c:ea:69:d3:e1:b9:3c:4e:
0f:40:7f:52:46:75:ec:41:98:01:c8:a5:81:20:e0:5f:25:31:
24:d0:05:9e:79:5e:26:72:56:db:e7:03:38:13:a2:c4:8d:f7:
26:ca:cc:e7:84:f3:9f:52:3c:ea:93:1c:0f:c4:29:1f:98:35:
6b:ea:be:b1:9d:73:eb:5b:2a:59:58:4d:d9:d9:32:eb:30:b6:
1f:07:a6:e9:f4:c7:8b:81:52:6a:e0:e6:45:62:ea:fa:77:ed:
be:86:3e:1b:ad:8a:f6:fe:c5:67:29:0a:7f:11:7b:8c:f5:29:
3b:9b:34:67:6e:03:47:10:8a:dd:27:cd:28:f7:42:f5:1e:da:
85:72:2d:4c:69:02:b6:ef:5e:1c:5d:69:3c:9c:45:f7:eb:e5:
cc:8d:d9:b0:8f:21:d5:e8:86:15:23:ef:99:e8:31:e5:49:8e:
5d:41:6b:f3:bc:e9:d9:e0:9b:0b:e0:ab:28:ee:85:c1:2c:f9:
91:66:da:aa:ce:1b:08:f9:00:54:f2:4d:04:b8:26:e7:ce:63:
23:60:43:ec:29:f1:2a:a0:7f:49:6b:e8:fc:95:1e:38:e8:86:
6a:36:4e:95:8a:ce:62:88:58:a8:c6:7a:d9:69:f5:0a:0a:cc:
a9:87:fc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:08 2023 by rpki-client on console-ams.rpki-client.org