Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ed8CfaI5cqzhwaXGYsU4jFKCh38.roa
File: Ed8CfaI5cqzhwaXGYsU4jFKCh38.roa (raw, json)
Hash identifier: l2sNqYCLU4agFasLvoF4Xi6hpjUkaYQpS8wpbFxOZF4=
Subject key identifier: 11:DF:02:7D:A2:39:72:AC:E1:C1:A5:C6:62:C5:38:8C:52:82:87:7F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2153
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ed8CfaI5cqzhwaXGYsU4jFKCh38.roa
Signing time: Fri 25 Nov 2022 04:39:47 +0000
ROA not before: Fri 25 Nov 2022 04:39:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.208.0/21 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8531 (0x2153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=11DF027DA23972ACE1C1A5C662C5388C5282877F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:ff:3d:28:94:90:32:ee:a7:f0:44:f3:e6:
8e:70:95:dd:d3:9f:35:34:76:3a:c3:53:1c:ae:1d:
48:d0:6e:89:a0:fd:43:23:9f:81:33:c3:8d:f8:67:
8a:8d:f8:f7:0b:ef:24:05:78:3f:0b:f4:d7:2e:25:
e4:ad:2d:a9:8a:a7:b4:82:c2:5f:8e:bc:05:17:01:
f1:ff:7d:82:30:4e:b3:43:42:bd:76:be:36:ad:b0:
5e:15:b7:e7:10:9f:0f:c9:4a:54:54:26:1f:49:58:
80:6c:43:13:e5:b1:7c:40:f3:e5:3f:de:ac:87:7f:
24:b7:35:52:6d:24:6a:9d:63:5c:33:53:9f:00:df:
74:d4:81:8b:1c:df:fb:0e:f8:55:6d:39:de:9d:09:
76:2d:0f:84:34:47:1a:11:30:23:07:2c:e7:62:e1:
5f:60:25:97:9f:72:2a:a5:57:aa:8a:db:de:61:e1:
44:ed:36:e5:29:c5:3e:f6:7d:fe:11:cb:64:d3:7e:
e4:97:61:e4:f0:d5:28:e5:1e:00:a6:63:1b:dc:69:
24:9f:b6:4b:b6:88:46:67:1a:a4:ef:f9:60:22:19:
2e:0f:bc:3b:65:d1:d3:cd:d9:e8:3d:6e:b3:9e:f3:
55:d2:06:1b:d5:51:c2:ac:e9:ae:80:32:94:59:ce:
1e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DF:02:7D:A2:39:72:AC:E1:C1:A5:C6:62:C5:38:8C:52:82:87:7F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ed8CfaI5cqzhwaXGYsU4jFKCh38.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.208.0/21
Signature Algorithm: sha256WithRSAEncryption
99:41:75:f7:a2:8e:df:23:3f:cf:22:36:b0:0d:a4:36:24:07:
66:b7:4b:02:56:b5:2b:45:59:ca:8a:46:6f:03:27:a9:ed:12:
33:23:d8:e5:b2:12:90:74:dc:02:87:6e:50:55:d5:c1:74:49:
13:13:72:bc:3d:59:2b:e3:fb:02:e6:09:ac:e7:6c:b0:5b:d0:
11:d7:e0:b2:71:c0:b2:ac:c0:19:9b:a0:a0:99:52:59:10:8f:
64:76:84:96:ec:3c:9b:db:10:e3:f7:66:a8:a7:8d:2a:1a:f5:
f5:9e:43:65:2a:4a:10:57:e9:46:45:20:13:dd:75:d1:53:05:
97:0c:34:2e:c1:8e:f0:ab:49:92:36:26:e2:91:7c:a7:4a:3c:
b3:a5:f1:ce:23:b9:06:2c:b0:eb:9d:68:4d:c7:51:50:a3:72:
a2:bd:21:90:af:5d:c9:a8:72:a6:3d:47:5c:52:77:9e:e8:36:
8b:83:d2:06:f0:e8:a4:2e:7b:b5:88:5b:cb:2c:58:9a:01:5c:
b7:7b:62:b8:58:4c:1e:15:51:54:c2:d9:70:6e:0b:ec:3a:57:
6f:9d:db:8a:16:f6:10:79:35:95:da:49:aa:e6:39:1a:cb:4c:
da:1c:50:c8:6c:68:59:36:ec:b3:29:99:77:f5:84:0b:f2:8c:
5e:20:cb:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:02 2023 by rpki-client on console-fra.rpki-client.org