Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9sogWy58EeRO0HxI9mgm6WfDwyw.roa
File: 9sogWy58EeRO0HxI9mgm6WfDwyw.roa (raw, json)
Hash identifier: IohCKXuexcfc2qLtGlnvAgeEgO+7z5HUIF0txf8ymjY=
Subject key identifier: F6:CA:20:5B:2E:7C:11:E4:4E:D0:7C:48:F6:68:26:E9:67:C3:C3:2C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2335
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9sogWy58EeRO0HxI9mgm6WfDwyw.roa
Signing time: Fri 25 Nov 2022 04:42:12 +0000
ROA not before: Fri 25 Nov 2022 04:42:12 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.236.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9013 (0x2335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:12 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F6CA205B2E7C11E44ED07C48F66826E967C3C32C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:cc:f3:32:fb:23:82:7a:33:7a:a7:44:a4:
97:b6:c0:3b:34:30:a9:1b:31:92:ea:1e:93:81:10:
6e:61:a4:bb:10:06:d8:b8:f7:a1:ee:0b:70:21:bc:
09:6d:51:46:27:9f:8f:9a:b3:55:4c:c4:c5:e4:ac:
70:a6:35:a0:df:6c:7a:80:5e:4b:80:8d:dc:ee:b6:
3b:ac:fd:5d:d0:fa:b6:27:07:9a:ad:30:84:64:68:
bd:7d:73:62:52:27:bc:90:1c:21:7c:a2:3f:c9:4c:
43:a0:29:3f:38:1d:b4:4c:71:ac:bb:2c:92:90:9e:
ec:fd:d7:9e:45:6a:9a:1d:4d:9f:0d:7e:71:c4:c9:
cb:0f:22:21:d3:15:9b:5c:ae:90:ea:11:c6:8a:5e:
79:0f:ca:15:c2:79:4b:98:bd:22:71:7e:b4:fa:c8:
b2:6c:c1:7f:cb:f0:a2:b0:a1:00:e4:38:50:ad:f8:
6f:e2:f2:e1:ba:ea:82:60:fd:c4:04:0f:1a:63:b3:
8c:a9:5e:41:49:57:45:e1:ca:29:53:8e:d9:91:d3:
2c:1c:f0:88:86:33:84:7b:7d:ca:7b:d9:46:51:63:
a7:ae:5f:c7:b7:f8:7f:f0:5c:e9:af:ac:79:84:50:
97:56:1c:e7:4b:a6:78:6d:8a:b0:58:76:d3:6c:37:
2b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CA:20:5B:2E:7C:11:E4:4E:D0:7C:48:F6:68:26:E9:67:C3:C3:2C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9sogWy58EeRO0HxI9mgm6WfDwyw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.236.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:83:a8:32:4a:00:0c:cf:b2:7b:ee:4a:db:c3:ac:97:a7:ef:
00:4b:64:e6:8d:92:c0:fa:22:6b:da:f3:9c:f0:96:1e:32:87:
74:56:b8:56:5a:a5:ba:7c:b9:26:65:79:49:df:24:92:5f:b3:
1b:46:84:d2:15:47:14:12:41:da:e8:a1:c5:d8:54:d2:ba:91:
a9:00:41:5d:31:b6:96:ac:94:3c:dd:32:aa:d5:09:1f:f4:61:
1c:7e:26:94:84:b9:d7:92:4f:67:24:23:6b:46:2d:71:a8:09:
62:b8:5e:89:49:f4:05:67:56:87:7f:84:9b:ec:0e:af:c4:df:
02:b5:9c:48:d8:3f:de:b6:fe:e2:1c:d8:aa:1f:9e:18:73:a3:
0f:6b:25:d6:95:5e:2f:fb:cc:8c:35:4e:31:7b:7f:73:01:c7:
36:42:18:4d:5a:a0:b3:40:f7:dd:3a:f8:92:92:a0:15:d3:3d:
41:c8:f5:3b:ea:cd:17:9c:cf:8e:65:e3:31:1b:7a:0c:3f:3d:
96:8c:01:a9:4d:de:34:66:13:1a:d3:4c:89:af:bf:e9:e5:34:
9d:cf:ff:55:44:a7:0f:f1:20:5c:0a:38:a1:39:db:2c:af:02:
25:57:39:37:fe:93:64:2f:40:8d:33:8e:41:2a:db:ac:be:b6:
67:e4:85:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:01 2023 by rpki-client on console-fra.rpki-client.org