Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gl4r4btXtepMiVVy8DhWMn4yVNQ.roa
File: Gl4r4btXtepMiVVy8DhWMn4yVNQ.roa (raw, json)
Hash identifier: s7mSxw8g2mYMkIjrKtFcPYJ2leCcHrgKZJJv9Wj95fE=
Subject key identifier: 1A:5E:2B:E1:BB:57:B5:EA:4C:89:55:72:F0:38:56:32:7E:32:54:D4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gl4r4btXtepMiVVy8DhWMn4yVNQ.roa
Signing time: Thu 15 Sep 2022 02:44:57 +0000
ROA not before: Thu 15 Sep 2022 02:44:57 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.200.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:44:57 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=1A5E2BE1BB57B5EA4C895572F03856327E3254D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:db:7d:ce:43:dc:bc:d8:6e:63:c2:c3:73:59:
10:75:94:ce:c7:7f:03:e0:37:69:4b:3c:48:f8:98:
cd:00:68:ab:10:02:bd:ca:84:5c:f4:c6:0a:a7:ff:
3d:a0:84:e7:d8:b3:26:6a:4a:9f:d9:c6:72:16:e4:
c0:f4:a8:46:6d:45:73:a9:44:4a:ad:eb:6e:78:d0:
58:1a:c8:5b:6d:c6:74:b6:c9:7e:b3:08:b3:9d:70:
9c:d3:d7:81:95:2f:a6:05:71:e7:f8:2d:9d:28:bc:
d8:02:d4:8e:bd:ac:c7:6c:a6:73:03:8d:ce:1c:01:
bd:23:c7:fb:14:39:87:90:46:5b:cb:82:c7:22:6c:
5f:fe:7d:58:9f:5a:f7:9d:5f:38:4d:3a:b3:c5:fb:
be:83:35:69:a9:a9:bb:66:bb:d6:d5:08:4e:52:6d:
5c:e3:ff:6b:90:50:fe:72:f3:82:5c:07:75:aa:f9:
c9:2e:98:33:d4:2e:fc:34:b3:e5:09:0e:ba:68:0d:
86:1a:c6:95:1e:71:fc:9e:07:cb:c4:2e:53:cf:46:
0f:35:75:a2:37:5e:9d:3f:c1:21:01:40:6b:40:91:
9f:ad:2f:56:6d:0a:8c:d8:8c:ba:49:e3:b7:ae:96:
75:d8:fd:35:d0:93:d2:ab:14:26:7c:08:76:77:10:
1a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5E:2B:E1:BB:57:B5:EA:4C:89:55:72:F0:38:56:32:7E:32:54:D4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Gl4r4btXtepMiVVy8DhWMn4yVNQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.200.0/21
Signature Algorithm: sha256WithRSAEncryption
af:b3:c8:1a:9c:91:28:be:0c:cd:d1:14:44:6b:3f:ec:de:b6:
15:f6:88:60:42:c8:cb:f6:17:47:9d:07:4d:71:8c:2d:7f:83:
43:d9:db:36:a2:f5:85:c1:4e:43:ee:c3:f7:e1:f4:fc:48:72:
57:c8:65:31:57:b3:fa:c1:e2:d2:92:46:cd:dc:7b:90:6a:df:
ee:11:22:45:48:5c:7a:01:3f:a8:77:72:6d:20:ba:8d:e9:19:
95:a6:7e:54:71:ea:a5:8e:d8:78:9c:bc:d4:5a:fc:5b:28:92:
75:1b:31:c0:37:42:98:cd:4f:ad:9c:9a:cb:bc:e8:fb:3e:6a:
0c:74:aa:3a:1b:d0:df:d7:a7:dd:4b:e4:d6:bf:bf:26:a7:83:
a0:4d:d6:a9:75:fa:41:dd:a1:dc:d3:3a:d3:14:84:99:b4:0c:
90:a3:4f:74:47:87:16:a5:22:36:c7:36:98:4b:4d:21:04:92:
f5:56:fb:c4:32:8f:7e:a0:40:c9:e6:3f:f7:29:d1:15:fd:20:
9b:9e:a2:87:33:ad:c3:d5:f3:1d:e1:2f:61:30:45:a2:1a:d2:
b2:af:dd:53:99:94:f6:bd:24:c9:20:b4:79:e3:72:3d:9b:67:
94:33:3f:4b:cc:ea:d7:05:9b:c8:dc:fb:b6:52:ca:02:ba:a2:
c2:64:20:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:25 2023 by rpki-client on console-fra.rpki-client.org