Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9R7dKy5g1uz_BnLd4VkG8gssoHE.roa
File: 9R7dKy5g1uz_BnLd4VkG8gssoHE.roa (raw, json)
Hash identifier: hYykwsOys24NH+bBDj6uq5tChuYFLa1XgrqsHWyc/LU=
Subject key identifier: F5:1E:DD:2B:2E:60:D6:EC:FF:06:72:DD:E1:59:06:F2:0B:2C:A0:71
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 225E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9R7dKy5g1uz_BnLd4VkG8gssoHE.roa
Signing time: Fri 25 Nov 2022 04:41:05 +0000
ROA not before: Fri 25 Nov 2022 04:41:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.128.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8798 (0x225e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F51EDD2B2E60D6ECFF0672DDE15906F20B2CA071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:05:05:84:b6:fa:d9:5f:1e:a5:c8:2f:19:35:
aa:82:a1:9c:17:a4:bf:36:6c:50:bd:2e:3b:5e:34:
1f:1c:90:f4:e8:7c:b1:31:c7:7f:7d:b4:76:84:d0:
7e:29:fd:a4:08:5c:54:3c:8e:c7:bc:93:7f:05:db:
96:0b:a7:11:cc:8c:d7:33:89:f4:2d:a1:46:67:e2:
5e:15:69:e1:d4:ad:4f:f9:79:03:c0:20:8f:7c:fc:
ef:7d:a3:d3:aa:79:c8:ba:fb:4f:a8:20:21:a3:06:
f6:01:e8:a7:a2:ff:ab:56:71:c8:0a:28:38:63:50:
7b:e9:53:50:ff:12:73:15:8d:9f:b0:a1:b2:16:6d:
37:14:9d:80:e1:2e:2c:b1:c3:b9:48:f8:b4:d5:23:
e6:e4:f1:82:e7:db:0a:40:6b:5c:e6:b4:2e:3f:2b:
5a:b2:3f:02:cb:1d:c5:5f:67:d9:c0:29:d3:77:ce:
4c:2d:7d:9c:1b:65:e7:44:28:fe:2f:2f:eb:e3:9d:
54:fb:70:e0:1a:cc:9a:f7:71:72:92:2c:79:88:58:
4c:c1:5c:8c:22:16:1d:fe:db:54:07:5a:8d:26:47:
77:ae:98:b5:97:f2:50:22:be:93:e2:a9:00:4c:d5:
e9:4a:8a:c8:63:06:cc:4d:c7:59:60:50:eb:51:89:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1E:DD:2B:2E:60:D6:EC:FF:06:72:DD:E1:59:06:F2:0B:2C:A0:71
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9R7dKy5g1uz_BnLd4VkG8gssoHE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.128.0/21
Signature Algorithm: sha256WithRSAEncryption
b5:45:80:01:aa:ee:8a:16:6d:bf:ca:47:b9:5e:a2:ba:80:55:
a5:55:24:22:e6:bd:0b:5f:8c:49:b8:ee:dd:49:70:07:e0:d6:
e9:fd:ba:1b:8e:66:2b:50:9f:bf:1d:a9:f6:72:63:82:97:88:
98:df:ae:b2:1a:e5:0b:3f:16:4b:0a:53:8a:02:82:76:f6:6f:
c7:ed:25:3f:1d:b8:97:d1:b3:05:46:bc:b6:90:f6:5b:6c:e7:
c1:61:dc:dc:fd:28:7e:3d:bd:b3:c4:14:c1:1f:26:a1:f3:ba:
cb:f3:de:46:e1:75:1a:51:a8:21:84:7a:27:68:5b:09:4a:2f:
3d:82:65:e4:19:fe:bd:da:35:bc:ed:da:ba:32:bf:81:03:35:
88:78:cb:8c:a0:97:4f:ea:4e:f6:df:ca:fb:82:45:1c:c7:ad:
fc:6b:1e:ee:52:cc:96:45:fa:2b:91:48:3f:88:9c:24:dd:47:
09:9d:23:4b:ac:c3:94:7d:e6:18:c6:18:53:b8:31:e1:d2:18:
82:c9:05:58:b4:3f:eb:81:86:d5:9c:e6:50:ad:c9:84:6b:6b:
25:35:68:63:eb:f1:2b:87:d6:c7:3a:46:18:74:56:2f:38:1b:
d2:32:46:40:d9:d1:d7:47:80:d3:f7:fa:b0:20:3f:ff:79:8c:
62:a4:2d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:21 2023 by rpki-client on console-ams.rpki-client.org