Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WPxeq3Iv7_n7mpHLx2gfBQlNj7s.roa
File: WPxeq3Iv7_n7mpHLx2gfBQlNj7s.roa (raw, json)
Hash identifier: 47vBo4vyl0QHQClGO6fhJZf9jGUs+Geoliq+SYWvd+c=
Subject key identifier: 58:FC:5E:AB:72:2F:EF:F9:FB:9A:91:CB:C7:68:1F:05:09:4D:8F:BB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2236
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WPxeq3Iv7_n7mpHLx2gfBQlNj7s.roa
Signing time: Fri 25 Nov 2022 04:40:54 +0000
ROA not before: Fri 25 Nov 2022 04:40:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.44.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8758 (0x2236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:40:54 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=58FC5EAB722FEFF9FB9A91CBC7681F05094D8FBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:93:14:c8:30:bc:21:51:19:97:f5:a3:90:
e0:74:74:da:e1:9e:5c:22:a8:c4:72:a3:8d:bb:2a:
5b:24:d9:cc:3d:a0:a7:a6:0e:08:d7:d2:61:fd:cd:
26:a0:31:7d:f3:0b:b0:3b:5e:1d:96:5a:67:f2:12:
0b:26:4a:ad:c0:97:87:79:5e:29:d5:72:40:0d:d6:
8c:cf:32:08:ea:6c:7b:0d:15:6b:9f:96:06:9d:b0:
a3:55:0a:f0:b3:c6:6a:4d:4e:33:b6:4a:e6:8f:bc:
77:a4:f1:e9:4e:9d:08:1a:01:1a:c0:e7:45:7d:e4:
fc:a0:5b:cf:c5:40:ae:1c:12:6b:f1:d3:86:22:bf:
57:de:fa:d7:ae:7f:42:19:dc:dd:a2:5b:8d:43:11:
72:d0:98:e5:31:88:38:35:cf:e7:ea:11:8f:6c:f3:
14:74:d9:42:6e:c4:f9:c4:ba:aa:00:21:21:6a:bc:
c2:33:98:d3:12:6e:47:b0:ad:5e:9c:c8:ac:3d:11:
21:85:84:d6:23:81:25:e8:0d:34:2f:20:62:af:8f:
f2:da:55:4d:42:1d:06:2b:7c:de:11:41:de:53:47:
e8:c6:5c:31:77:28:9c:4f:52:fe:47:12:7f:b6:5d:
4f:1e:a6:7f:87:e7:d6:1a:e9:f9:cd:26:23:e3:4c:
b3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FC:5E:AB:72:2F:EF:F9:FB:9A:91:CB:C7:68:1F:05:09:4D:8F:BB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WPxeq3Iv7_n7mpHLx2gfBQlNj7s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.44.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:ea:c0:f0:8d:fb:4f:dd:88:a7:83:c8:75:f5:4b:85:4d:cc:
3c:54:88:67:f5:6e:28:d3:a6:64:94:0d:ce:fe:3c:60:3e:8b:
f3:e0:ff:d9:d6:92:51:7b:9e:cc:36:f6:63:77:70:0c:9d:9a:
12:76:d9:76:b1:fd:57:ab:dd:a5:03:88:29:52:05:94:f4:26:
f9:94:01:8f:40:cc:8d:b7:95:35:ce:ce:00:7d:db:01:9c:ec:
5d:18:a5:84:b7:e1:5e:06:07:d2:ae:ca:f8:63:c4:95:56:ae:
d1:6c:c7:bd:20:db:8d:f2:d8:2d:19:7b:4c:70:ba:a7:47:5a:
d8:22:42:80:fe:f0:6f:b0:b5:de:7c:92:c2:38:e7:81:87:94:
2d:fd:b3:bc:6f:3a:15:9a:75:a3:ce:1c:58:80:06:4b:bd:f8:
53:fe:31:51:d3:55:97:8b:00:88:21:24:25:db:ac:96:65:cb:
71:9f:e4:8e:59:8d:ed:f8:d2:f4:a5:5c:1c:7d:c7:bf:27:95:
ee:da:63:52:ac:0f:59:50:ec:7c:c0:13:de:65:de:8c:62:46:
ba:60:11:a0:a0:26:33:47:58:4c:d6:eb:da:96:54:6e:df:0e:
eb:a3:f2:b9:74:26:06:5c:f3:cb:ed:a1:36:cf:a6:e3:67:d8:
2c:95:2c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:06 2023 by rpki-client on console-fra.rpki-client.org