Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/awaNpPmlSSxVb4XsVNfQpdAVfk4.roa
File: awaNpPmlSSxVb4XsVNfQpdAVfk4.roa (raw, json)
Hash identifier: G7ZjH8YIzaTkdVIX1/NnzQzNowRibYd/w4MqidEeC7A=
Subject key identifier: 6B:06:8D:A4:F9:A5:49:2C:55:6F:85:EC:54:D7:D0:A5:D0:15:7E:4E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 22E2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/awaNpPmlSSxVb4XsVNfQpdAVfk4.roa
Signing time: Fri 25 Nov 2022 04:41:45 +0000
ROA not before: Fri 25 Nov 2022 04:41:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.8.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8930 (0x22e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:41:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6B068DA4F9A5492C556F85EC54D7D0A5D0157E4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:9b:50:62:48:fe:e6:0f:be:8d:6c:87:56:
83:72:11:85:14:28:dd:cc:43:c5:ef:18:42:ba:31:
29:7a:4a:33:af:c6:37:2d:ed:53:db:fe:c9:f2:1a:
ea:b8:7c:19:fa:aa:74:8a:04:d3:0a:81:bb:71:18:
46:1c:ed:7f:f8:0a:a3:5a:f0:5e:25:15:68:43:19:
e5:66:bb:db:e1:5f:71:7d:7a:7f:ad:47:85:bc:e9:
62:86:32:ec:8c:7e:76:fd:73:27:38:fa:5a:0e:c0:
89:82:e0:da:47:47:63:9f:24:22:c0:4a:63:cb:0f:
cb:2f:06:14:08:e5:cf:84:52:f3:9c:ad:75:3c:f2:
a2:83:63:55:bc:21:c0:de:73:84:50:fb:ed:7f:d1:
41:bc:5b:c4:0f:8d:8f:01:7a:71:f4:48:f0:1c:a9:
29:2f:7c:37:15:42:dd:54:d1:96:eb:45:e1:d6:d6:
c7:aa:dd:84:df:02:0a:b4:b7:e9:32:30:e1:1a:42:
66:09:2a:0d:75:8d:f5:33:8a:63:db:76:2f:9e:d0:
b4:21:c8:a6:e9:a8:ca:98:a2:37:d1:bc:21:a7:39:
84:25:a3:62:f3:2d:13:9e:22:a3:62:51:48:c6:8d:
db:60:e6:8a:75:98:86:9c:9e:12:43:2b:be:65:6d:
32:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:06:8D:A4:F9:A5:49:2C:55:6F:85:EC:54:D7:D0:A5:D0:15:7E:4E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/awaNpPmlSSxVb4XsVNfQpdAVfk4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.8.0/21
Signature Algorithm: sha256WithRSAEncryption
89:c8:9c:18:af:f8:99:99:f1:8c:dc:d3:84:be:73:f8:75:ae:
67:b9:32:d6:77:46:35:42:18:e6:da:be:70:bb:9b:ef:58:60:
47:bb:68:18:fc:cd:04:58:a7:be:c4:83:f1:12:21:28:db:3e:
7d:0f:12:0b:e3:aa:aa:f6:65:a4:c1:ae:2f:10:fc:17:e1:2d:
d0:62:c4:d8:0f:25:a5:b0:4c:77:df:8c:f5:84:28:b4:c0:92:
ed:b8:d3:8a:fe:ba:47:92:5f:65:05:34:c3:c4:f6:2e:6a:4f:
04:26:3f:04:1a:7b:8b:e0:fc:c3:ca:f1:ee:d8:29:d8:ed:96:
1f:52:f1:56:4a:81:7d:2a:28:14:1a:4d:f9:45:a7:c4:fb:d9:
d0:07:2a:6a:d3:04:a1:43:4f:83:b6:d0:49:36:c6:70:ea:b3:
4f:f1:c5:9a:9f:66:99:1f:f4:f5:fe:92:4c:30:84:e6:be:65:
aa:65:d5:d5:4f:89:c2:ae:08:26:da:2f:59:50:36:7e:77:8c:
20:04:51:3c:c3:cb:46:17:8f:9c:6f:07:83:a7:1f:86:50:5f:
59:f9:99:bf:61:3d:0e:aa:07:f2:48:0f:b2:9e:e7:df:60:ed:
20:1c:d5:88:e3:ef:13:ee:0c:98:16:52:4f:55:42:3d:86:32:
3d:8f:ba:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:07 2023 by rpki-client on console-fra.rpki-client.org