Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9fPDuYvlaOEfZg81jXnEJDkpHJs.roa
File: 9fPDuYvlaOEfZg81jXnEJDkpHJs.roa (raw, json)
Hash identifier: klJekYfklPR//HLvau7LZh/kc8/Gf+po4HF+HEYoXgs=
Subject key identifier: F5:F3:C3:B9:8B:E5:68:E1:1F:66:0F:35:8D:79:C4:24:39:29:1C:9B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2347
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9fPDuYvlaOEfZg81jXnEJDkpHJs.roa
Signing time: Fri 25 Nov 2022 04:42:17 +0000
ROA not before: Fri 25 Nov 2022 04:42:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.0.0/20 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9031 (0x2347)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F5F3C3B98BE568E11F660F358D79C42439291C9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:64:e4:97:67:a7:48:fe:39:a7:4d:b7:1c:5a:
37:be:81:fa:82:06:a2:ad:83:ad:1e:1f:e9:af:c0:
89:85:8f:34:b0:ad:94:89:8e:b9:8d:47:a2:fa:f8:
b0:ef:e0:61:07:37:d3:05:96:ef:75:0d:1d:a6:74:
c9:4b:62:1d:7c:8d:bc:98:9e:6b:52:ed:20:2d:7c:
38:2c:3a:c4:95:6d:51:89:d1:4f:e9:e4:af:cf:80:
13:67:56:16:b9:32:94:f3:f0:24:d0:08:d4:a2:9b:
97:a4:66:dc:6b:05:2d:83:17:e9:80:36:78:9a:9d:
58:9c:2d:fb:51:f8:69:c1:7e:1b:bf:75:fa:4c:6f:
7e:c8:cb:71:80:ff:dd:0c:e3:cf:ee:21:15:82:37:
59:10:8e:0f:08:b6:9f:28:09:e6:4b:70:26:6d:dd:
1c:50:59:e2:1b:2e:c7:79:e0:b6:95:2f:a2:da:d6:
12:47:74:75:75:0b:52:c4:91:cf:f1:df:75:8a:13:
11:77:e0:89:2e:25:e7:e0:b6:61:3f:ef:32:d3:1b:
d3:e9:b4:ea:b9:23:64:01:6d:5b:33:8c:66:43:cf:
27:50:e0:4f:9c:c1:bb:47:d9:f8:83:59:69:f4:3b:
10:36:ee:62:a4:e3:76:4d:f2:93:5f:90:24:94:fc:
7c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F3:C3:B9:8B:E5:68:E1:1F:66:0F:35:8D:79:C4:24:39:29:1C:9B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9fPDuYvlaOEfZg81jXnEJDkpHJs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.0.0/20
Signature Algorithm: sha256WithRSAEncryption
84:3b:97:77:dc:5d:65:74:d0:49:a6:2a:35:2b:45:7b:6f:b0:
08:cb:54:87:ed:91:eb:2c:32:b3:b2:76:2b:26:05:59:a3:8d:
4d:f3:6a:eb:d6:12:41:b8:e4:eb:ce:c5:84:96:51:2e:17:ad:
af:a5:44:39:dc:65:86:77:ea:88:d4:19:c7:d3:d7:bc:16:e3:
61:1d:b7:8d:7b:32:c1:51:70:6b:02:bf:d6:69:c1:33:05:bc:
1a:96:79:15:e2:0b:6f:3d:44:a5:1f:f0:07:a0:9e:19:6f:4b:
3c:2c:b3:26:f4:40:de:83:f9:e9:63:b9:fb:db:86:79:da:e3:
aa:e6:b4:b1:19:82:c0:20:60:0e:18:18:53:26:2e:3c:a5:0b:
b0:13:89:3c:5b:66:51:45:4f:97:48:12:0b:b2:13:f5:78:b5:
52:ec:66:ac:9a:41:37:42:c2:e4:69:cd:f4:d5:41:b7:f8:36:
8c:94:aa:2b:23:11:51:ad:84:ca:9d:16:15:92:12:2b:ea:26:
4c:db:fd:d6:b0:1a:77:0c:2c:54:e8:57:9d:9d:76:27:a1:d7:
7c:23:41:8b:51:3c:18:f4:39:87:78:0c:1e:6d:07:1a:81:db:
97:18:c4:1c:0b:8d:93:8b:b6:dd:02:78:93:f9:2d:35:33:ed:
12:e0:82:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:01 2023 by rpki-client on console-fra.rpki-client.org