Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SzQbdT0cFSyY-m42hCxZRtCb0uM.roa
File: SzQbdT0cFSyY-m42hCxZRtCb0uM.roa (raw, json)
Hash identifier: AK7wTZ7UzMXA706hvAGMSeRu/cMavMaG3V3X0WLpozs=
Subject key identifier: 4B:34:1B:75:3D:1C:15:2C:98:FA:6E:36:84:2C:59:46:D0:9B:D2:E3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2010
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SzQbdT0cFSyY-m42hCxZRtCb0uM.roa
Signing time: Fri 25 Nov 2022 04:38:17 +0000
ROA not before: Fri 25 Nov 2022 04:38:17 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8208 (0x2010)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:38:17 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4B341B753D1C152C98FA6E36842C5946D09BD2E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:88:16:4c:41:13:ec:49:03:c3:cc:fc:79:
ad:7d:78:4f:85:c7:65:30:d2:ad:f0:9a:ab:6e:f2:
c7:f0:82:15:cc:41:39:0c:eb:66:59:9c:1d:e6:e8:
a4:00:7d:c1:44:7c:1e:93:e6:af:68:26:1f:f0:f3:
53:88:13:dc:06:22:c9:29:71:74:51:6d:18:b3:65:
33:22:1b:ab:4e:f1:ac:30:24:38:4e:1c:a9:f7:d7:
79:de:0d:98:8a:a1:f2:be:5d:53:fc:6e:7e:24:54:
08:87:43:b9:b4:ea:90:0f:5a:e1:ad:a0:64:d9:f4:
ac:22:2d:4c:cf:4b:99:8e:d0:15:eb:31:37:6d:d9:
e7:16:45:c6:e6:32:59:6f:2f:18:1a:81:3c:86:16:
d0:4e:3d:22:23:18:4a:fc:9a:76:6a:8e:09:0e:74:
5e:63:ec:ae:ae:37:fd:c7:af:c6:78:f5:59:41:7b:
1f:db:d8:07:8c:f0:f3:0c:dd:ad:cd:43:db:4e:9a:
67:1c:09:6a:09:e2:36:50:c1:05:62:16:82:a5:1a:
ab:b2:fc:66:51:73:d9:9f:4d:53:00:2c:c7:ae:ff:
fd:4c:39:e3:d5:a0:dc:44:27:da:0d:19:3c:76:0f:
a3:29:12:5d:fd:a6:8c:7a:0a:2b:0d:a5:31:8d:81:
ca:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:34:1B:75:3D:1C:15:2C:98:FA:6E:36:84:2C:59:46:D0:9B:D2:E3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SzQbdT0cFSyY-m42hCxZRtCb0uM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.84.0/24
Signature Algorithm: sha256WithRSAEncryption
88:22:e3:20:0f:4c:30:5e:78:29:ce:7e:44:c8:df:39:d7:d8:
a6:63:87:2a:45:7d:fa:6c:bb:e7:e6:c0:a5:d6:13:96:79:00:
37:8f:fe:e0:1d:8b:76:54:b7:1f:21:59:99:92:63:5c:53:d4:
41:41:f6:cc:99:e2:55:4f:ab:91:92:5c:02:61:27:83:db:d3:
3f:e6:79:e4:f8:e4:65:02:9f:ab:d4:66:07:5e:a9:ce:c9:37:
7d:d8:0f:97:7a:6f:6c:fd:42:6d:46:f0:0a:c5:a0:f3:17:1a:
9e:0d:51:09:ae:98:29:be:6e:b8:2b:92:b8:d0:7c:6b:b6:84:
51:e6:32:b7:0f:c5:df:01:09:23:a6:36:22:b4:56:e8:c0:e3:
ff:b3:ab:04:c7:e4:ad:86:50:e0:d7:78:d2:44:18:fd:f5:46:
e0:d7:a4:7c:bd:38:ad:9a:5d:d5:b3:fe:02:ef:5e:3f:38:29:
d7:18:a7:04:23:f8:95:a6:49:72:54:1e:bd:2f:30:8e:79:21:
b4:c2:77:a4:62:f3:b6:e3:e9:66:bf:df:cf:fc:d2:e6:4a:03:
03:b1:9b:a5:db:fe:1d:21:de:4d:56:b5:2e:62:5b:0f:02:0a:
30:f5:7b:9a:ad:9a:36:32:c4:64:1d:13:39:be:da:bd:68:29:
f6:1c:06:84
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICIBAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMjExMjUw
NDM4MTdaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDRCMzQxQjc1M0QxQzE1
MkM5OEZBNkUzNjg0MkM1OTQ2RDA5QkQyRTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC2IgWTEET7EkDw8z8ea19eE+Fx2Uw0q3wmqtu8sfwghXMQTkM
62ZZnB3m6KQAfcFEfB6T5q9oJh/w81OIE9wGIskpcXRRbRizZTMiG6tO8awwJDhO
HKn313neDZiKofK+XVP8bn4kVAiHQ7m06pAPWuGtoGTZ9KwiLUzPS5mO0BXrMTdt
2ecWRcbmMllvLxgagTyGFtBOPSIjGEr8mnZqjgkOdF5j7K6uN/3Hr8Z49VlBex/b
2AeM8PMM3a3NQ9tOmmccCWoJ4jZQwQViFoKlGquy/GZRc9mfTVMALMeu//1MOePV
oNxEJ9oNGTx2D6MpEl39pox6CisNpTGNgcrrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUSzQbdT0cFSyY+m42hCxZRtCb0uMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1N6UWJkVDBjRlN5WS1tNDJo
Q3haUnRDYjB1TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
sFQwDQYJKoZIhvcNAQELBQADggEBAIgi4yAPTDBeeCnOfkTI3znX2KZjhypFffps
u+fmwKXWE5Z5ADeP/uAdi3ZUtx8hWZmSY1xT1EFB9syZ4lVPq5GSXAJhJ4Pb0z/m
eeT45GUCn6vUZgdeqc7JN33YD5d6b2z9Qm1G8ArFoPMXGp4NUQmumCm+brgrkrjQ
fGu2hFHmMrcPxd8BCSOmNiK0VujA4/+zqwTH5K2GUODXeNJEGP31RuDXpHy9OK2a
XdWz/gLvXj84KdcYpwQj+JWmSXJUHr0vMI55IbTCd6Ri87bj6Wa/38/80uZKAwOx
m6Xb/h0h3k1WtS5iWw8CCjD1e5qtmjYyxGQdEzm+2r1oKfYcBoQ=
-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:05 2023 by rpki-client on console-fra.rpki-client.org