Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_RFYDm4Re-nx2Ko5c03Ciw58zg4.roa
File: _RFYDm4Re-nx2Ko5c03Ciw58zg4.roa (raw, json)
Hash identifier: jjpHiQcuk8cDywvjzCwnb6A7hIIWGysEhbrVdDBxxns=
Subject key identifier: FD:11:58:0E:6E:11:7B:E9:F1:D8:AA:39:73:4D:C2:8B:0E:7C:CE:0E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2324
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_RFYDm4Re-nx2Ko5c03Ciw58zg4.roa
Signing time: Fri 25 Nov 2022 04:42:05 +0000
ROA not before: Fri 25 Nov 2022 04:42:05 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.72.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8996 (0x2324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:42:05 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FD11580E6E117BE9F1D8AA39734DC28B0E7CCE0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4d:08:cc:3c:04:91:02:ee:28:b4:26:c4:35:
ec:85:8c:d0:52:79:61:58:78:07:f7:49:3a:f6:21:
81:0b:a7:83:86:f5:ac:a9:61:6a:8f:8a:5b:cb:1f:
59:a1:98:25:27:06:dc:ab:99:42:55:0c:81:49:36:
ad:05:35:18:4a:ab:2c:73:8f:31:6d:0d:61:b0:7b:
2a:9d:6a:2f:26:fb:fc:ad:e2:5b:b8:ca:74:12:d5:
80:60:64:70:f9:84:54:52:e4:fc:8c:31:2c:0b:35:
e6:6c:40:48:f7:2d:91:0b:ef:10:cd:17:38:ef:8b:
50:e7:b9:f3:07:89:a5:17:c1:f8:28:d0:9b:21:0e:
5e:55:4f:e6:80:ad:1c:e0:05:3c:6b:26:2f:b8:05:
35:47:37:e3:78:9c:13:df:83:19:a0:20:b6:28:a4:
27:46:99:5e:a9:00:47:07:79:38:04:e3:27:07:6c:
c7:5a:88:56:1d:f6:fb:5b:d3:51:00:f5:02:b3:25:
ee:4d:5e:38:e8:88:73:d1:2a:5a:23:74:71:ac:21:
ab:b6:4d:76:ca:22:b2:76:15:d7:c9:ca:c7:18:00:
e6:e9:3e:20:aa:58:f6:48:19:e3:36:89:87:e8:41:
c9:63:b3:67:df:ec:bb:90:c5:f5:49:94:f8:a4:ec:
02:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:11:58:0E:6E:11:7B:E9:F1:D8:AA:39:73:4D:C2:8B:0E:7C:CE:0E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_RFYDm4Re-nx2Ko5c03Ciw58zg4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.72.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:fc:d3:b1:54:67:0b:7e:f5:fd:6e:05:1b:9e:37:a7:7a:b6:
2f:44:5c:cd:d9:1f:1e:a7:18:f4:bf:91:e8:b1:cb:19:a5:2a:
79:69:d0:5a:4f:48:46:a5:63:8e:a4:02:ae:4c:cc:fe:59:fa:
4d:d1:b4:6b:f8:44:00:a6:cb:65:86:83:a3:3d:44:73:dc:e7:
d1:a8:f2:43:c8:55:34:45:c4:9e:58:9d:55:f7:16:96:5c:fb:
9c:95:f1:b6:46:8b:c4:c1:f9:d1:ec:d9:2f:d6:fa:50:e1:4c:
f5:20:76:28:32:6b:0a:18:6b:d1:40:1f:cb:53:c9:00:f1:2d:
36:0b:d9:1c:47:91:13:19:c8:e4:2a:fb:15:38:89:f5:5b:13:
08:ef:64:09:2c:e1:01:93:06:79:2b:5c:90:44:4c:eb:55:81:
90:3d:60:d5:2c:61:a7:9a:f8:fe:2a:dc:11:98:2e:71:e8:b4:
54:27:ce:7e:58:9f:ef:a1:52:14:2e:3e:2e:7d:08:cd:a6:71:
10:5c:a6:66:c6:2f:71:ef:1f:98:c1:a6:a4:1d:68:d9:61:7f:
21:0f:6d:08:7e:8c:48:63:e4:3d:61:46:36:96:a5:25:4c:22:
d6:78:f5:2b:f5:c0:a5:9a:3b:6e:b6:b0:cd:78:09:e9:45:cd:
73:6e:21:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:06 2023 by rpki-client on console-fra.rpki-client.org