Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KgAkDGPdFBNpbTBab9t7OAhRNtw.roa
File: KgAkDGPdFBNpbTBab9t7OAhRNtw.roa (raw, json)
Hash identifier: XqyFoeaSpca1vtsy7sUPgZvQDzHD6RMSbgI0oswwr0s=
Subject key identifier: 2A:00:24:0C:63:DD:14:13:69:6D:30:5A:6F:DB:7B:38:08:51:36:DC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KgAkDGPdFBNpbTBab9t7OAhRNtw.roa
Signing time: Thu 15 Sep 2022 02:46:33 +0000
ROA not before: Thu 15 Sep 2022 02:46:33 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:46:33 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=2A00240C63DD1413696D305A6FDB7B38085136DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:1f:aa:f4:29:dd:ee:e7:c3:e1:49:9b:86:
26:33:4a:82:81:7a:12:82:81:98:23:05:0f:82:4b:
ee:b9:f4:0a:f7:d0:84:6c:90:37:f4:f3:67:67:e9:
20:1e:88:99:12:55:80:a2:b4:fb:7e:fa:0d:92:5c:
3b:9b:cf:29:e4:99:77:cd:15:45:a4:25:d7:a3:1d:
6a:e7:c2:cd:29:67:bb:ab:77:a5:7b:b5:2a:66:88:
25:b1:27:f2:30:29:74:18:06:3b:db:e4:b6:d6:af:
a0:ac:f2:89:73:4c:6e:74:b4:47:0d:83:f7:10:72:
a8:8a:0a:e6:bf:b3:94:f9:72:fc:2f:4c:24:3d:d0:
1c:d2:c3:2e:70:7f:e1:49:a1:35:2f:69:40:c4:fb:
7d:aa:f0:ae:b9:9f:5d:74:b4:75:60:28:b3:23:c4:
77:84:ad:84:74:32:1d:75:3e:fe:f6:3e:bb:a1:55:
9a:93:1e:6a:14:bb:13:90:04:2f:84:43:9f:fe:27:
a7:cc:5e:d3:f3:75:be:3a:76:91:71:3b:73:b8:cc:
4f:c0:b4:1a:eb:f8:9a:26:c6:a4:9e:97:3f:d2:67:
37:82:d8:a9:3b:cd:68:52:49:af:37:d9:82:5e:1e:
11:2c:82:e5:35:a6:b8:e6:a2:a4:db:dc:44:7a:66:
33:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:00:24:0C:63:DD:14:13:69:6D:30:5A:6F:DB:7B:38:08:51:36:DC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KgAkDGPdFBNpbTBab9t7OAhRNtw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.253.0/24
Signature Algorithm: sha256WithRSAEncryption
97:d1:8e:81:5d:9b:47:c6:f0:0e:53:73:a5:e5:ee:e3:3e:aa:
b1:01:7b:11:40:ba:0f:b6:bb:3c:0f:82:76:55:3c:9c:02:e8:
0a:6f:41:87:cf:c7:f1:f3:d1:03:7a:89:7a:ff:c9:c5:e2:77:
41:d1:28:76:28:42:7e:f4:f8:2c:fc:10:be:dd:97:6f:c4:45:
f1:c1:9d:85:5e:7f:da:20:ff:dd:13:56:17:db:04:f1:25:8c:
46:5c:7b:19:92:83:3d:72:97:15:7c:5f:36:52:da:bc:d8:dd:
b0:a3:29:f4:2e:79:a0:7d:7d:cd:87:0b:fa:e3:72:f5:58:64:
76:17:63:0e:83:09:75:40:9d:e6:f0:57:e7:44:73:ac:67:67:
dc:35:9e:70:e3:33:78:c6:8e:c4:b7:8a:0c:2a:a8:5b:54:f5:
80:0a:91:95:b8:b9:20:cd:58:3b:3c:74:5f:f5:25:99:d3:27:
61:25:52:ef:3c:14:a4:e6:86:ca:34:42:78:91:5e:53:59:4c:
8d:82:69:87:a4:b2:dc:ca:c3:dd:bc:d4:0c:f4:df:7d:7d:55:
7e:4d:e6:6d:27:29:32:0a:7a:62:a5:b0:00:09:77:4e:be:56:
2e:40:43:38:29:ad:1a:3c:ea:96:c3:62:59:6b:56:17:19:36:
4e:6e:8b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:26 2023 by rpki-client on console-fra.rpki-client.org