Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bI4qPgtsx5Jf2YZBLGPVlZ54O54.roa
File: bI4qPgtsx5Jf2YZBLGPVlZ54O54.roa (raw, json)
Hash identifier: 2F86wYgwKBmwDnUm9217MdkJsEOdGvPOgIRGkC38gMA=
Subject key identifier: 6C:8E:2A:3E:0B:6C:C7:92:5F:D9:86:41:2C:63:D5:95:9E:78:3B:9E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1FA2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bI4qPgtsx5Jf2YZBLGPVlZ54O54.roa
Signing time: Thu 15 Sep 2022 02:52:36 +0000
ROA not before: Thu 15 Sep 2022 02:52:36 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.176.32.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8098 (0x1fa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 15 02:52:36 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6C8E2A3E0B6CC7925FD986412C63D5959E783B9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:0b:27:2a:fa:ab:5f:cd:d9:70:b2:c4:0d:
00:cb:10:9f:ec:cd:59:42:93:40:b0:a9:5d:12:d4:
58:35:20:da:5d:c3:c3:0d:6a:ae:8b:d8:a8:30:8b:
19:1c:bb:d6:ae:dd:b5:cf:d0:47:ba:e9:3a:1c:bc:
24:52:6e:22:b8:ec:2d:11:34:31:41:b0:70:6e:ba:
bb:4c:ef:5e:19:ed:c4:bb:4d:b7:a1:50:cf:d2:26:
6d:f4:a7:4a:69:1b:00:c4:28:ee:b5:99:be:2f:58:
b3:4b:a7:c7:7c:c1:69:f6:f5:35:de:c4:8e:1c:74:
50:59:3a:a6:82:78:a2:3c:f5:04:45:60:e1:b4:3a:
32:2a:a2:5b:a1:ff:84:3e:e9:dc:ce:c3:14:40:b3:
ac:7d:7d:6d:df:93:d9:e1:16:20:96:46:06:d9:a8:
89:54:98:c3:cf:37:9f:97:84:96:ae:7d:eb:6d:99:
7f:97:d2:fc:9b:ef:fe:fb:a6:23:37:94:f5:12:9e:
f0:d9:2b:c8:71:ae:06:32:a6:77:cd:8a:ec:ab:44:
df:eb:49:94:72:bd:5e:7f:aa:bf:4a:5b:4c:f7:0e:
a2:10:eb:c1:29:d4:be:8d:1e:dc:51:43:b8:82:3a:
c1:8e:ba:43:47:c5:f8:98:a7:76:99:6e:48:62:9a:
f8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8E:2A:3E:0B:6C:C7:92:5F:D9:86:41:2C:63:D5:95:9E:78:3B:9E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bI4qPgtsx5Jf2YZBLGPVlZ54O54.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.32.0/21
Signature Algorithm: sha256WithRSAEncryption
76:b8:be:bf:31:1d:cc:8e:54:dc:0c:56:2a:9a:41:ca:1a:5f:
ad:ef:4d:15:ce:c6:15:11:4e:b4:b9:6a:72:55:5e:55:88:c9:
fa:f3:25:24:36:1c:75:42:73:ca:c9:53:0b:10:bd:c7:d0:29:
e3:35:d1:cf:21:e5:5b:48:ec:f0:35:22:d9:90:93:41:bb:b7:
3b:fb:ed:6a:67:b7:ba:90:36:ce:5d:85:bb:69:25:31:f5:99:
2f:d6:b0:24:68:ac:ee:fd:39:e5:9a:73:99:33:6b:de:06:89:
59:58:c0:eb:ba:7d:3e:a0:ea:c6:92:c0:7f:5d:2d:78:77:fd:
99:3c:d9:58:17:92:e5:c6:7a:67:d8:57:98:1e:b8:c2:56:22:
e7:6e:41:1e:cd:89:23:e0:1a:0f:71:66:10:96:44:ec:1d:e9:
b1:52:74:5b:d8:99:8a:83:fc:66:15:1d:62:86:9f:8a:c7:5d:
26:66:d3:ee:42:ef:9c:f2:54:5c:43:22:22:b7:cd:ef:8c:3a:
39:cf:54:3a:59:a9:be:53:8b:a2:5a:69:0f:ab:66:c5:3e:2a:
99:35:09:53:5e:d6:bb:d3:1b:7a:3b:0b:3b:ec:d5:66:3b:4e:
dc:94:2b:cd:c5:8d:aa:a7:97:17:f2:b1:90:66:78:5a:92:b0:
bc:f1:5e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:23 2023 by rpki-client on console-ams.rpki-client.org