Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WGGgb8JxG81bsFY7fx1gI1xMX9E.roa
File: WGGgb8JxG81bsFY7fx1gI1xMX9E.roa (raw, json)
Hash identifier: 3M/ug6y02lkD49MOvOOmvzFP4Q4h5dIs7S+BOht7XK4=
Subject key identifier: 58:61:A0:6F:C2:71:1B:CD:5B:B0:56:3B:7F:1D:60:23:5C:4C:5F:D1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WGGgb8JxG81bsFY7fx1gI1xMX9E.roa
Signing time: Thu 15 Sep 2022 02:53:19 +0000
ROA not before: Thu 15 Sep 2022 02:53:19 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9924
IP address blocks: 180.176.220.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:53:19 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=5861A06FC2711BCD5BB0563B7F1D60235C4C5FD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ea:1b:1a:49:34:75:bf:50:63:fd:3d:ba:64:
c4:5b:20:59:10:31:b9:90:43:73:c2:c7:29:e2:93:
bb:ba:d6:89:82:c4:30:aa:01:53:41:28:c0:9a:74:
82:e0:42:ed:57:36:a1:37:45:3a:e7:53:61:4c:5d:
e9:8c:1d:cd:3f:ef:d6:7f:c4:16:29:ae:c8:8f:a4:
cb:d4:c6:af:43:2b:3c:58:ef:ba:6b:48:4c:9a:5b:
2f:7f:a2:66:7e:b3:c5:d6:63:ca:4d:7f:a1:0b:21:
0c:8c:a9:7e:28:06:6d:1e:d1:e0:2e:01:18:f2:5e:
19:a5:e6:2c:f1:eb:55:8c:31:46:61:bd:37:52:b1:
85:dc:c2:f0:57:32:49:57:9c:33:78:ca:40:21:83:
29:d5:bc:f7:85:48:ce:df:ad:1f:c4:f5:3b:61:06:
ac:d7:82:0b:ce:3a:b5:8c:3d:c3:15:55:bd:03:9c:
b8:ae:e1:6a:82:a1:28:07:70:69:08:c9:2b:ef:f9:
7b:4a:b8:9c:87:d7:04:ff:45:bb:ab:11:da:e1:36:
9d:50:73:e4:52:77:5e:3b:17:e2:96:e5:d9:54:ba:
82:c2:3a:29:96:2d:db:4a:cc:19:e8:77:e1:ee:19:
3d:3d:a7:db:a6:4d:96:b7:b2:97:cc:25:88:c1:e6:
6c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:61:A0:6F:C2:71:1B:CD:5B:B0:56:3B:7F:1D:60:23:5C:4C:5F:D1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WGGgb8JxG81bsFY7fx1gI1xMX9E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.220.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:f4:3d:da:cf:06:9e:95:95:d2:be:1c:bc:2a:c8:21:71:be:
a7:45:b2:4f:da:3b:c9:27:e0:8e:1e:42:0b:f4:f4:3c:10:72:
78:fe:c9:0a:51:18:02:fc:34:26:21:a5:5a:2b:ca:71:f7:6d:
3f:58:fa:f0:d6:d3:54:78:f8:79:e2:d2:08:23:ee:c2:46:cd:
42:2f:56:b7:99:08:1f:a7:65:98:a4:c7:27:25:da:c3:37:de:
33:05:95:a4:18:6d:3c:7f:88:14:ef:03:76:85:4c:a8:c4:82:
62:f9:60:95:86:fc:21:0a:bd:a6:a0:58:34:15:fc:d2:76:91:
b0:36:34:fe:ae:e5:86:3d:94:57:03:fd:21:4f:cc:4e:38:16:
b6:54:91:5e:40:a7:52:2b:06:ea:09:85:36:2a:bb:e4:20:61:
b8:e4:3c:a0:81:12:e9:66:cb:ed:de:92:16:ef:f8:66:5b:45:
23:fa:4d:b0:6c:db:b2:ac:55:33:58:39:7b:bc:50:86:81:ae:
8c:1e:aa:b9:d5:31:d1:1f:7a:b7:53:f6:0e:e4:13:92:79:59:
d9:fb:53:20:ce:68:5a:87:d8:ac:06:6b:60:05:3e:4f:32:24:
8f:cd:a1:81:c7:8c:72:2a:5d:00:3d:e0:76:79:e1:9d:80:66:
23:a8:8d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:21 2023 by rpki-client on console-ams.rpki-client.org