Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MwAb5nswIfwcNG8UK28Lszm4Iis.roa
File: MwAb5nswIfwcNG8UK28Lszm4Iis.roa (raw, json)
Hash identifier: IOQ78tpO/2V7Q6S4aj8yLjNNKOoKPIU2LnJK0itv9x0=
Subject key identifier: 33:00:1B:E6:7B:30:21:FC:1C:34:6F:14:2B:6F:0B:B3:39:B8:22:2B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MwAb5nswIfwcNG8UK28Lszm4Iis.roa
Signing time: Thu 15 Sep 2022 02:45:23 +0000
ROA not before: Thu 15 Sep 2022 02:45:23 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.118.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8096 (0x1fa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:45:23 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=33001BE67B3021FC1C346F142B6F0BB339B8222B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:49:13:1f:1b:93:2e:1c:4a:55:8d:a7:65:
0e:e6:bc:9a:0b:82:73:c8:07:7f:74:38:e9:2f:d9:
a4:83:03:3e:de:7a:22:b5:c3:13:f9:f1:e9:e8:08:
83:7d:6c:03:fc:8a:09:ab:50:b4:eb:f5:a5:fe:95:
ce:23:1a:20:36:ad:22:22:0e:30:03:e8:cc:e9:6d:
98:46:62:9c:dd:4e:15:7e:4a:74:2d:ed:ab:f6:69:
dd:19:ee:3a:f7:8c:79:b8:cc:76:01:32:4b:2d:ed:
68:11:50:8f:0f:1f:88:9e:11:d2:62:ca:d4:76:ec:
db:bf:a2:e3:37:ba:a4:3d:57:f4:e6:2d:5e:f4:24:
9d:1c:6a:36:4e:04:b4:0c:80:67:7e:63:13:67:e5:
12:c4:2b:a0:87:c8:ea:78:4c:08:70:cf:45:a4:af:
7b:d0:ac:e0:11:dd:45:f7:41:a5:f9:a5:a2:6e:9b:
87:12:c8:6c:e2:79:ed:a4:54:b9:23:5e:3e:26:9e:
bd:4e:d6:4e:3c:fb:1e:0a:3c:53:f8:d1:da:84:bd:
52:0f:2c:db:04:ee:ec:b4:2f:f7:8f:99:1f:ed:0d:
76:84:e5:5f:c9:ff:41:1a:40:ec:79:5a:9a:f0:3e:
02:fe:4e:7e:f2:6e:51:0b:94:09:a0:1b:7c:c2:24:
e7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:00:1B:E6:7B:30:21:FC:1C:34:6F:14:2B:6F:0B:B3:39:B8:22:2B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MwAb5nswIfwcNG8UK28Lszm4Iis.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.118.0/23
Signature Algorithm: sha256WithRSAEncryption
36:2f:8a:6f:c7:5c:da:71:3a:aa:92:12:4e:7b:ca:2a:ef:16:
a9:ce:c3:34:96:39:90:93:3d:fa:ab:50:60:b5:2a:4d:08:6a:
10:cc:69:74:8c:ad:e4:e0:af:e5:45:47:c3:80:fd:5c:bc:46:
70:a0:7c:88:ec:fa:38:f4:33:4c:80:a5:17:a3:8a:02:ad:e4:
49:ee:54:78:d6:bc:b8:16:1e:81:c1:bc:b9:4d:66:90:89:6a:
a9:0e:e9:be:df:9c:f5:b1:61:44:2a:ae:58:b4:1e:9b:ed:7a:
c5:5b:eb:b8:07:df:0c:38:09:b7:14:de:91:80:17:34:bc:0e:
5d:d1:e3:29:aa:58:43:b3:36:f4:42:87:cd:e0:d9:94:36:2a:
ee:41:b7:38:46:4c:97:69:2d:60:2e:4f:4c:1a:72:93:01:44:
40:77:92:89:74:0b:99:f5:7d:b1:85:b1:12:b6:c0:1d:17:57:
fc:b2:b7:05:76:9d:83:2c:1b:0e:3a:3b:d1:b0:93:a7:90:d8:
85:db:94:54:8e:af:46:1f:45:4b:97:59:08:81:85:df:f9:24:
22:f6:db:f6:03:ba:7e:4a:43:d2:70:cc:c8:78:91:45:26:e7:
c4:b0:3c:8a:9d:16:84:5f:76:52:71:5d:d2:ed:1d:dd:37:8c:
74:28:b9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:27 2023 by rpki-client on console-fra.rpki-client.org