Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NKVb1RwrLZzid1FIR2emFfJ_3IU.roa
File: NKVb1RwrLZzid1FIR2emFfJ_3IU.roa (raw, json)
Hash identifier: cI4xERpGFXqmNsn9WH25ajEf/GUWf+2fJkFm4+P1B7U=
Subject key identifier: 34:A5:5B:D5:1C:2B:2D:9C:E2:77:51:48:47:67:A6:15:F2:7F:DC:85
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2039
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NKVb1RwrLZzid1FIR2emFfJ_3IU.roa
Signing time: Fri 25 Nov 2022 04:38:28 +0000
ROA not before: Fri 25 Nov 2022 04:38:28 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.16.0/20 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8249 (0x2039)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:28 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=34A55BD51C2B2D9CE27751484767A615F27FDC85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:11:b0:10:ca:df:d1:ad:76:6a:fa:48:8b:
5f:dc:b0:fc:ce:16:31:ee:4b:f8:1c:7e:2e:28:41:
ab:e6:2b:a0:7b:2e:50:38:6b:f7:dc:67:ca:20:30:
19:9f:f6:d1:28:3a:1b:da:0e:39:89:ad:5e:5c:30:
ec:81:3d:62:3f:5e:25:f1:4b:14:9e:d6:fb:f3:83:
47:2b:a0:41:e6:b9:4e:37:98:ab:1e:39:39:33:c6:
1c:53:b9:4f:a2:cd:f9:95:c1:ca:1d:a6:af:ce:91:
91:83:15:86:2d:37:ac:45:29:2a:67:a9:9f:86:a6:
e4:99:91:66:ce:fb:40:eb:e7:0f:c7:e4:4d:cc:48:
b7:c1:d1:86:bc:da:9e:73:2d:17:c9:cc:7b:76:82:
03:52:74:79:8b:54:0e:58:89:16:c4:c2:11:9f:95:
d1:c2:0f:19:95:cf:e5:84:17:55:8f:b1:c1:58:05:
32:1b:19:37:24:ed:05:89:82:e3:f1:82:41:53:21:
c0:e3:90:1e:a6:28:37:d5:3e:db:f8:2c:10:b9:d6:
84:ca:47:0f:6d:ca:29:97:0f:ea:dd:af:01:bb:f9:
04:70:87:15:df:31:5c:11:ee:a7:4e:ec:e7:70:cd:
00:87:11:e7:96:88:f1:99:eb:67:03:f3:13:59:37:
27:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A5:5B:D5:1C:2B:2D:9C:E2:77:51:48:47:67:A6:15:F2:7F:DC:85
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NKVb1RwrLZzid1FIR2emFfJ_3IU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.16.0/20
Signature Algorithm: sha256WithRSAEncryption
37:2c:26:1d:bb:95:3d:62:03:37:5e:54:24:d5:d8:78:9f:0a:
1d:b5:73:7a:7d:ce:a4:14:cf:6f:6b:38:1a:55:1d:84:dd:54:
66:91:60:09:9e:15:6d:33:7b:95:e5:b0:62:fb:f3:55:45:d3:
1e:17:c3:6b:bd:d4:4e:d5:5c:23:fd:08:d1:6b:18:b8:fe:4e:
e2:18:07:7b:9e:0d:fd:8d:e3:13:fe:60:74:63:de:7b:41:56:
c5:4f:f5:d6:4d:ed:3b:c6:0c:8f:64:ad:5f:8f:a8:f4:1d:b7:
4c:ca:e4:69:7f:34:46:0e:7c:2f:7d:89:ac:2d:87:c5:9e:16:
04:27:7a:ea:80:26:8d:34:c1:99:24:48:3c:1f:b9:39:b5:59:
62:2e:cd:c9:2e:5f:27:15:90:5e:33:97:5c:93:0b:51:57:5d:
1f:86:e6:19:99:68:60:77:1c:e1:63:63:4d:2f:73:81:50:b7:
e7:3d:37:d1:ef:4b:18:b2:1c:ad:21:9c:89:98:68:99:ac:d0:
f1:04:b9:2d:95:5f:91:e1:b7:37:6a:e9:f2:a2:42:bb:3b:0e:
39:dd:76:f0:0b:b7:c8:13:2f:79:e7:ad:7d:95:ab:f2:f7:c5:
1f:78:82:f6:5b:d5:18:4d:1b:b9:61:93:69:a6:d1:8c:de:2d:
32:3d:57:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:04 2023 by rpki-client on console-fra.rpki-client.org