Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EsrulikiOo6FYcwNRfWAP3Y7Qwc.roa
File: EsrulikiOo6FYcwNRfWAP3Y7Qwc.roa (raw, json)
Hash identifier: gevZ6cDCqTFFxMn5YTKm8g/xxT4DCaQxGnj3iAIepNY=
Subject key identifier: 12:CA:EE:96:29:22:3A:8E:85:61:CC:0D:45:F5:80:3F:76:3B:43:07
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 20F1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EsrulikiOo6FYcwNRfWAP3Y7Qwc.roa
Signing time: Fri 25 Nov 2022 04:39:18 +0000
ROA not before: Fri 25 Nov 2022 04:39:18 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.122.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8433 (0x20f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:18 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=12CAEE9629223A8E8561CC0D45F5803F763B4307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:51:c3:9b:85:37:7b:a9:de:c2:bd:98:85:e6:
b3:51:f7:c9:ec:22:92:2d:8b:88:f8:0b:c3:5b:e0:
09:79:45:ff:cb:4a:8e:e4:4c:4d:8b:ae:ea:81:dd:
3e:2c:57:35:2a:21:b4:73:b9:47:a3:36:ca:8d:86:
24:a4:60:0e:08:ab:0b:d9:4e:0f:c8:c8:4c:69:30:
da:3b:3d:3e:da:9d:70:dc:ea:c1:ea:ab:e3:8b:af:
ba:d6:f9:e2:b6:5b:e5:31:55:53:e9:86:88:1b:ba:
e9:3b:eb:b2:2b:f2:48:d7:93:d8:92:ee:6c:c0:fe:
da:5c:7b:c1:12:06:b1:e7:a5:a0:b3:78:ce:bd:4b:
d5:f8:44:b5:fa:ac:23:fe:70:68:64:b6:43:30:88:
02:7c:06:5e:9a:30:46:6b:1a:ed:72:f9:ea:ef:31:
53:7a:87:a3:0f:46:e6:16:24:13:53:38:25:78:f9:
03:e0:96:dd:fc:78:9f:12:c0:12:9a:9b:f3:17:f7:
63:65:1e:39:52:14:02:57:73:b3:ba:18:5f:9d:45:
2d:c4:c7:1a:90:3f:aa:47:c2:13:e7:3a:d8:b9:81:
8a:9a:d5:10:73:d9:a6:e5:73:c4:f1:39:46:5d:9c:
ef:c6:9a:60:14:81:32:ea:be:39:41:c2:db:9d:00:
28:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CA:EE:96:29:22:3A:8E:85:61:CC:0D:45:F5:80:3F:76:3B:43:07
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EsrulikiOo6FYcwNRfWAP3Y7Qwc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.122.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:29:de:ca:ba:b7:17:86:38:51:6e:10:9a:8e:9a:af:2f:7a:
0a:41:31:1f:2a:e0:08:8a:61:63:0a:e2:33:f9:9b:64:8f:50:
5c:bd:e2:69:6f:f7:51:3e:b3:12:e1:41:f2:d3:ac:cb:41:c6:
40:02:dd:f8:94:ba:83:a5:df:5a:63:8c:7b:8f:1b:b9:2b:da:
35:eb:87:fc:0b:80:0f:c2:5d:3c:58:44:13:8e:c0:a0:b6:8c:
9a:54:ff:0d:93:20:4b:bd:70:4a:d6:01:77:db:12:ca:c6:1d:
7f:67:65:75:b4:90:1e:8a:9d:53:c2:12:5d:5a:32:07:d4:3c:
6a:48:5f:bf:7c:02:8a:0e:0b:c4:08:99:79:17:e6:4a:eb:fc:
09:37:b2:8b:e1:08:d8:0c:ce:ea:25:e4:73:b1:ac:64:67:29:
9b:cf:2b:f4:d5:b2:5d:18:eb:05:5f:88:9f:b7:b1:3d:a7:c8:
c8:ed:26:9a:dd:a0:51:85:13:e8:6b:99:be:f0:64:5c:73:78:
59:5e:5c:33:38:d1:0f:88:b1:5e:84:44:cd:e0:73:26:a2:df:
58:0e:d7:bd:ee:f9:cc:ce:47:23:2f:04:43:84:e3:b1:10:2a:
6f:38:4b:89:4a:53:6d:a5:b8:97:80:d9:fa:39:4e:fa:cf:d3:
5a:59:be:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:02 2023 by rpki-client on console-fra.rpki-client.org