Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5I_acNEQ-90oQ4i1w7iW9XVToWk.roa
File: 5I_acNEQ-90oQ4i1w7iW9XVToWk.roa (raw, json)
Hash identifier: PwmVh1oZxxxokn2pngT9ZTwEsccsiidi8MC0aYBXje4=
Subject key identifier: E4:8F:DA:70:D1:10:FB:DD:28:43:88:B5:C3:B8:96:F5:75:53:A1:69
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 238A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5I_acNEQ-90oQ4i1w7iW9XVToWk.roa
Signing time: Fri 16 Dec 2022 03:53:54 +0000
ROA not before: Fri 16 Dec 2022 03:53:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.0.0/15 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9098 (0x238a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Dec 16 03:53:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E48FDA70D110FBDD284388B5C3B896F57553A169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:8f:28:dc:39:b9:6f:1e:13:95:2e:5d:9b:
23:73:04:1b:9e:5b:e1:2a:55:47:a9:e0:18:9f:64:
3a:c9:f6:49:fe:88:2e:6e:89:6b:4e:27:8d:0a:a2:
b3:86:df:d2:65:bf:d2:e7:cf:4b:e2:e2:c6:42:ff:
34:02:ec:1c:f1:68:16:1b:58:5e:56:53:93:31:90:
56:ef:23:8b:bf:57:54:9b:01:6a:01:56:e9:8d:4d:
c3:d9:cd:8b:79:1c:3d:a1:6d:63:a4:ef:de:f3:0c:
ad:73:04:03:34:8b:bc:45:be:53:29:14:01:54:c4:
02:ec:16:be:71:b3:ee:9f:2d:72:94:38:a2:1f:fe:
58:27:94:75:96:33:8a:c5:97:aa:ce:7b:0e:d8:b4:
9c:4d:ec:45:9e:3c:d5:84:4b:14:4c:f9:20:27:c0:
c1:75:15:80:84:81:f4:66:49:60:c1:99:f8:65:99:
cf:41:e7:71:97:ad:55:9c:bc:4e:e5:81:e2:1e:91:
2b:e2:c3:c7:f6:c5:d4:fb:3b:43:15:cd:af:df:63:
8c:28:66:a8:f4:6f:16:00:d9:95:5c:35:02:6e:90:
bd:b8:4d:20:c6:13:27:34:74:70:ca:d4:5d:91:7f:
96:2e:d5:ed:76:4c:e7:2f:41:1f:6f:03:5b:71:0f:
1d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8F:DA:70:D1:10:FB:DD:28:43:88:B5:C3:B8:96:F5:75:53:A1:69
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5I_acNEQ-90oQ4i1w7iW9XVToWk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.0.0/15
Signature Algorithm: sha256WithRSAEncryption
59:e4:ba:ee:28:17:90:d5:d1:4d:a5:bb:c6:42:86:da:98:12:
4e:81:07:80:5e:27:b0:94:ed:f3:94:4c:e7:ec:90:bb:02:b7:
1b:29:ea:8f:ee:07:df:92:a1:59:cc:70:d7:dc:0c:3f:a1:c1:
1f:17:0c:59:ff:a4:91:65:07:46:3e:29:e9:3f:31:5e:91:ec:
96:ba:c5:e4:21:4c:91:ff:6e:13:4e:51:58:92:38:c4:27:ec:
00:f9:66:fb:ff:a5:1d:42:40:fc:06:b5:6a:4b:ba:df:8c:24:
77:b3:be:8f:d4:af:20:53:5f:30:85:10:e2:05:a5:85:7e:4b:
30:51:00:24:d0:36:a5:50:12:c3:ef:28:50:fe:50:31:51:44:
87:63:8d:44:a2:55:27:83:df:5c:f8:41:63:ce:5a:65:23:94:
91:57:20:94:31:47:98:f8:96:e5:84:7e:0c:eb:d9:c8:6a:3f:
10:33:ba:3c:3d:c2:29:df:85:77:bd:7f:d4:79:5f:05:3f:33:
49:aa:4c:bd:d2:ba:51:c8:29:2b:c6:0f:58:08:f8:c3:6e:a1:
c4:16:c5:d6:99:83:7c:1d:32:91:e0:7f:c4:52:3e:6b:ac:e6:
e2:6f:49:09:50:62:20:fe:8a:06:30:98:78:d5:0f:40:68:af:
43:57:a1:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:00 2023 by rpki-client on console-fra.rpki-client.org