Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O2cZA5L8syBuzaJnlU4tRPKoc5g.roa
File: O2cZA5L8syBuzaJnlU4tRPKoc5g.roa (raw, json)
Hash identifier: oc/dMUCQLh5Bo2yozuosnEw28bSpLTKG0T4E+cAkF/E=
Subject key identifier: 3B:67:19:03:92:FC:B3:20:6E:CD:A2:67:95:4E:2D:44:F2:A8:73:98
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O2cZA5L8syBuzaJnlU4tRPKoc5g.roa
Signing time: Thu 15 Sep 2022 02:52:31 +0000
ROA not before: Thu 15 Sep 2022 02:52:31 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.108.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:31 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=3B67190392FCB3206ECDA267954E2D44F2A87398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:1d:26:71:79:77:93:cc:2d:1c:a9:25:73:
b5:bc:5b:24:a2:72:d5:e1:61:27:7e:95:ce:88:fb:
09:f6:d9:e0:53:cd:20:03:2b:06:e0:77:5a:f1:ae:
2f:ae:65:ae:5d:ff:18:ff:15:75:66:0e:5e:41:72:
a4:e6:ee:96:b3:05:b7:40:b6:05:5b:eb:06:c9:2b:
44:a2:be:a6:b7:85:46:eb:a9:ec:26:af:4c:52:3a:
ae:b4:e7:22:6e:31:d7:38:e1:f8:cb:73:f7:a4:43:
30:dd:81:a6:b6:a8:91:00:bf:bb:e8:56:14:e9:b1:
d2:9c:50:ad:95:3e:75:a0:aa:25:85:51:e6:a0:d4:
7c:61:21:f0:fe:aa:f5:e9:58:40:95:d1:28:d7:1b:
43:23:a0:60:12:45:38:14:44:f2:f6:eb:44:14:d7:
e1:b8:3c:d8:8d:13:1a:c0:cf:37:80:9f:97:11:d8:
7c:2b:2f:71:7c:9b:e5:75:f2:3a:57:78:4d:d4:64:
3c:53:4c:0a:cb:41:80:ce:d1:f6:cf:78:6b:34:88:
f2:ef:35:31:58:20:63:6a:25:f1:b4:ea:6c:d1:ee:
2a:53:bf:80:83:82:a5:bb:e0:35:c0:91:41:49:82:
f3:f9:bd:00:7d:05:be:24:e7:59:25:3d:b8:51:c8:
97:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:67:19:03:92:FC:B3:20:6E:CD:A2:67:95:4E:2D:44:F2:A8:73:98
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O2cZA5L8syBuzaJnlU4tRPKoc5g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.108.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:fb:cc:45:35:2d:b6:8b:03:1c:5a:24:3a:ac:8e:5d:c6:f4:
e1:c3:c9:72:39:42:aa:f3:6d:1e:d2:c9:0b:dc:b7:70:ad:9f:
3f:08:da:db:0f:8f:79:a9:9e:0f:75:91:4a:58:75:01:a4:7c:
a2:c8:10:67:a8:19:f2:7e:6f:e3:35:da:ba:b7:e9:67:c3:68:
93:f9:ae:b4:34:20:e4:91:bf:2e:3b:ff:c6:fa:26:8d:20:ac:
05:70:c8:c7:a2:ae:a2:a2:45:d9:79:1b:0c:bd:84:59:21:a7:
c3:23:6e:54:12:a9:4c:62:8f:3e:a6:02:10:87:28:5a:e1:56:
d0:cf:06:af:05:d7:7f:97:70:67:f2:63:94:f8:2b:87:15:e5:
b3:ef:1c:e2:6a:9a:8d:b9:b5:80:83:93:0b:97:9d:55:a9:c7:
df:54:bc:0c:47:09:6c:22:bd:74:e8:dd:cd:b1:9b:7e:f1:34:
ed:b8:9d:7b:b6:2b:b9:0e:5c:b8:2a:d8:5d:3d:ea:2b:ea:e3:
cd:34:78:ee:6c:59:79:d9:14:fd:64:5d:68:1d:0d:2b:3b:ee:
9d:31:e6:c1:43:96:e8:73:4b:bd:48:f0:ca:52:eb:14:be:61:
7b:d8:39:d9:9f:06:1c:48:ad:dd:c2:45:a8:bd:79:d0:d8:a1:
04:f2:36:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:27 2023 by rpki-client on console-fra.rpki-client.org