Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DaNm6gYQiHQbIXAyWbJox8TKfqk.roa
File: DaNm6gYQiHQbIXAyWbJox8TKfqk.roa (raw, json)
Hash identifier: pm21ivgCs2ftd7phv8UNt9tuzjictaxrrv8HUxckEPk=
Subject key identifier: 0D:A3:66:EA:06:10:88:74:1B:21:70:32:59:B2:68:C7:C4:CA:7E:A9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2163
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DaNm6gYQiHQbIXAyWbJox8TKfqk.roa
Signing time: Fri 25 Nov 2022 04:39:52 +0000
ROA not before: Fri 25 Nov 2022 04:39:52 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.140.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8547 (0x2163)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:52 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=0DA366EA061088741B21703259B268C7C4CA7EA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e3:e1:dd:dc:dd:2e:0d:2a:4d:75:c1:d1:5d:
f3:23:ab:c5:71:8b:5a:34:5c:4c:57:1a:22:8c:5b:
b7:cb:53:c9:8f:e5:3b:bf:36:ff:6a:c7:f7:08:be:
e2:e7:c2:7e:a5:c6:5a:f7:03:78:e4:4a:ce:94:e1:
bd:33:9f:a0:22:47:1f:0a:7d:15:36:3c:d4:ba:44:
23:ed:a6:41:62:b9:e5:b0:db:ed:c2:76:c5:bf:e0:
7e:f6:52:ff:e5:89:f6:9c:68:ba:f1:21:73:de:5c:
5e:3e:a6:57:71:06:18:22:04:c2:09:de:5f:1d:6d:
e1:2b:8e:39:5b:02:a6:e6:2e:4d:71:0b:cd:23:df:
3a:00:04:fd:3d:c9:9c:1d:29:7b:48:5c:d3:5d:af:
cd:0e:fd:5d:fd:cd:02:2b:e2:2c:c6:cd:37:4d:a3:
e3:c9:7f:66:05:94:fd:e0:12:09:9b:96:e3:0f:1c:
d5:bd:7b:25:03:e7:5c:0e:50:b8:21:bd:3e:19:35:
78:0b:a4:9e:52:48:7b:d4:c9:f0:67:8a:b5:ee:b9:
8f:a5:11:60:4c:d4:a8:c4:b7:3a:06:89:60:df:7d:
82:d0:83:63:9f:20:0b:0e:e5:2b:cb:e8:85:a7:59:
83:0c:83:9a:87:0a:8c:5a:4f:da:ea:fa:6e:c9:ed:
b8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A3:66:EA:06:10:88:74:1B:21:70:32:59:B2:68:C7:C4:CA:7E:A9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DaNm6gYQiHQbIXAyWbJox8TKfqk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.140.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:e7:1a:0b:90:75:8b:4a:6e:8d:51:78:b5:b3:79:7f:f0:30:
89:a2:25:99:87:76:9f:66:3b:f8:70:62:ac:ae:71:f5:a6:9f:
70:2d:95:62:4e:99:61:67:30:cf:59:cc:cc:fd:b0:6a:56:1e:
d8:ad:8d:03:ed:36:23:59:c3:d0:ed:9a:75:e4:75:b4:83:6f:
3f:89:6a:ee:18:42:69:41:bf:0a:ef:a0:e9:cb:d9:67:ff:e6:
d4:80:72:cf:90:48:52:f5:71:68:09:28:e4:2a:cc:ef:cd:a4:
9d:db:63:b4:b6:f6:3b:00:5c:f4:a9:b9:49:1a:13:17:24:84:
e2:bc:e1:33:71:0b:88:b0:45:75:84:6c:0e:13:2e:23:ae:a7:
f0:07:7a:b6:ec:b4:88:9d:19:16:74:e9:2f:5a:a4:2f:cb:8d:
3b:00:4d:a5:51:52:37:4e:ce:df:17:fc:45:94:d8:0c:2c:04:
1e:e6:01:0d:4a:91:fc:a4:d5:d7:7b:5e:b1:3b:9d:f6:b6:7e:
72:bf:09:14:3c:26:b4:61:5a:bf:02:6d:c3:2e:ab:dd:48:28:
d1:d4:2e:13:78:e2:f9:75:cf:e3:6e:29:49:50:b5:b1:08:3a:
a4:53:41:8e:a8:cc:1b:d4:d7:5e:b2:d3:79:fb:c8:24:88:bc:
2b:dd:aa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:22 2023 by rpki-client on console-ams.rpki-client.org