Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RIgOVnufiv98l9F5WA007hknZx0.roa
File: RIgOVnufiv98l9F5WA007hknZx0.roa (raw, json)
Hash identifier: Duu8fs1ndH8vvBbTu17X39Bf/nfphQ7CwYqOeGZhk4w=
Subject key identifier: 44:88:0E:56:7B:9F:8A:FF:7C:97:D1:79:58:0D:34:EE:19:27:67:1D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2332
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RIgOVnufiv98l9F5WA007hknZx0.roa
Signing time: Fri 25 Nov 2022 04:42:11 +0000
ROA not before: Fri 25 Nov 2022 04:42:11 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.216.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9010 (0x2332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:11 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=44880E567B9F8AFF7C97D179580D34EE1927671D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:98:5c:a6:55:3b:cd:66:8e:97:2f:7e:56:ce:
d2:57:f0:cd:6a:bd:92:f5:34:e4:d0:20:37:b4:3a:
8d:de:28:32:1f:1c:90:07:06:4d:1a:87:e5:0a:50:
18:fe:ec:94:6b:05:07:ff:d1:95:f8:85:73:86:b1:
dc:9a:0e:b0:94:18:1b:8c:76:b1:7f:0a:ac:db:6a:
fa:90:af:95:7c:d5:5a:3c:91:a1:ff:c5:d5:ef:82:
43:79:49:ee:7d:01:2a:5d:f6:db:37:34:15:b1:ae:
fa:fb:c6:20:98:61:8a:cd:96:08:fd:53:a9:b4:0a:
5e:3f:64:1c:cb:c2:7b:16:10:8c:4b:1b:3f:15:91:
62:4c:96:b4:9a:a3:1e:87:30:52:20:67:a0:c8:1c:
81:7a:a6:60:0c:c7:29:ee:45:d1:e0:ed:b6:9e:cb:
29:38:a1:35:dd:95:bf:28:d4:72:dd:5c:67:b3:c6:
44:1d:ea:50:62:ae:30:f5:e5:40:29:13:3d:99:96:
58:98:7d:38:eb:0a:14:b3:fa:84:2e:91:a3:c5:41:
32:cb:51:1f:5f:02:97:8b:10:93:13:0c:35:ce:02:
9f:85:48:b2:7f:0c:29:f3:54:4e:fa:20:6c:3d:d3:
f7:2d:15:f5:6b:31:a4:56:56:91:14:70:bf:d9:24:
cb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:88:0E:56:7B:9F:8A:FF:7C:97:D1:79:58:0D:34:EE:19:27:67:1D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RIgOVnufiv98l9F5WA007hknZx0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.216.0/22
Signature Algorithm: sha256WithRSAEncryption
65:b0:26:a8:08:e4:63:be:97:e8:e2:17:ee:25:3d:75:b5:63:
ef:d7:fa:0f:f7:77:6e:7e:2e:7f:04:3e:72:4a:a5:2a:b3:53:
e1:48:95:a6:d2:42:a8:cc:e9:d1:08:a2:87:40:5d:70:42:34:
f2:18:db:e3:07:b1:05:b3:64:3f:51:fb:15:a2:07:65:99:21:
8b:68:81:78:48:02:2c:39:bf:98:ac:a9:cb:da:63:bb:ae:19:
72:78:b1:20:25:31:2c:35:13:31:50:ee:4f:b1:36:3b:03:f9:
24:ac:43:02:91:21:3a:43:ba:45:da:21:0f:74:73:8e:d5:59:
69:54:29:84:d0:10:90:50:79:f6:fd:fc:ca:1b:92:01:95:39:
84:94:8b:26:9a:92:d6:6a:4c:8d:9c:9b:17:fa:44:f4:9b:f6:
9e:cf:3c:12:9a:ac:39:9f:5f:87:c4:e5:59:44:9f:57:07:83:
d1:01:3c:3e:1c:93:a0:62:88:20:0a:a4:37:f7:30:53:37:5e:
02:d3:c9:46:60:81:5d:25:8c:fb:b8:ce:c4:86:41:d8:6d:d2:
84:10:10:85:98:20:8c:aa:9a:be:9c:02:b7:d3:b8:01:7a:29:
e0:14:91:36:b5:00:7e:a6:7e:e0:db:40:9e:08:aa:b4:12:89:
0b:8b:41:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:53:27 2023 by rpki-client on console-ams.rpki-client.org