Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bra2rWhgmA3bOnYk0ZdCdt4zGGI.roa
File: bra2rWhgmA3bOnYk0ZdCdt4zGGI.roa (raw, json)
Hash identifier: qKtj+0pW/BWRi8qk/X57Q3EZ0CW/m46gQe0lxZTE7/c=
Subject key identifier: 6E:B6:B6:AD:68:60:98:0D:DB:3A:76:24:D1:97:42:76:DE:33:18:62
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2118
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bra2rWhgmA3bOnYk0ZdCdt4zGGI.roa
Signing time: Fri 25 Nov 2022 04:39:30 +0000
ROA not before: Fri 25 Nov 2022 04:39:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 38841
IP address blocks: 180.177.56.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8472 (0x2118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Nov 25 04:39:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6EB6B6AD6860980DDB3A7624D1974276DE331862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2c:fa:24:8b:03:c9:3d:bb:90:14:e3:9c:04:
34:db:e8:47:85:e1:79:e9:2b:44:f8:e4:73:df:af:
85:4d:45:49:29:00:5d:42:3a:08:99:3f:ae:9f:a8:
34:66:a2:b2:fd:7c:0b:30:71:13:c4:ca:5a:32:4a:
12:ba:78:4f:e4:35:40:a0:79:f0:6b:12:02:17:6a:
27:e7:69:b6:8f:96:c2:a8:6f:c8:2d:bb:f1:a4:26:
29:3b:ac:32:a8:1e:77:4c:c6:40:25:c3:07:21:a9:
68:8f:e9:f8:ab:0a:a1:a3:1b:28:d5:a9:71:86:d8:
37:cb:fa:88:df:8c:c5:4a:a5:c7:48:b5:52:f1:43:
9e:3b:c0:2c:94:48:e5:69:d8:61:1f:0e:26:1d:21:
62:f3:e6:42:a4:45:e8:3c:7b:b4:58:b9:c6:5b:de:
52:3e:c5:a9:d3:d5:36:0e:92:0c:5e:e3:17:43:03:
f2:df:05:17:9a:cd:4f:0d:28:23:bf:81:2b:d1:19:
5e:9b:92:05:c4:3d:ab:6f:33:b5:9c:86:7f:1d:9c:
53:d0:5b:d0:29:c8:3b:36:43:bf:50:be:60:06:03:
ed:53:8a:d6:40:76:0f:99:bd:63:9c:b5:4d:90:e5:
2c:39:1e:47:7f:7b:ae:d1:b3:70:61:68:4f:65:7a:
dc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B6:B6:AD:68:60:98:0D:DB:3A:76:24:D1:97:42:76:DE:33:18:62
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bra2rWhgmA3bOnYk0ZdCdt4zGGI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.56.0/21
Signature Algorithm: sha256WithRSAEncryption
41:a1:fb:1f:b5:b8:40:92:db:01:dc:d6:d6:95:91:9a:ad:68:
5c:69:d1:c1:4f:a9:ce:19:47:22:67:ec:ca:79:63:d7:2d:75:
4e:f2:96:d5:77:be:bf:2e:d2:f3:7e:4f:4c:21:e6:aa:20:c0:
75:4b:7c:e4:14:bf:bb:2e:56:de:62:15:2d:1f:a0:22:ea:70:
e2:d6:a8:02:6f:45:63:18:10:01:7e:d2:3f:12:80:ed:af:ad:
7c:ed:fa:44:68:5b:e4:0e:77:1b:52:95:9e:da:97:9e:42:85:
51:8e:72:1e:6b:d2:1c:0d:1f:e6:bd:16:bb:09:a4:52:cf:c8:
5d:66:ea:ec:7e:df:dc:97:5c:03:d5:83:73:c6:1a:5c:91:a3:
ef:0c:b6:0e:ed:89:3b:c2:15:c4:4d:cb:ee:b4:09:ec:5c:a6:
dd:b8:cc:9b:5d:67:cb:f8:c5:92:c9:f2:68:c4:ec:4c:ed:a0:
6f:ae:a4:40:0e:eb:41:43:04:c3:7f:f6:99:34:81:85:7c:84:
48:1a:a9:5b:95:d4:c3:7e:3b:52:0c:b2:31:f0:10:37:2c:3d:
fb:f8:d3:fd:c4:de:84:b5:69:b4:50:61:99:e4:0e:08:94:69:
b6:79:75:0b:de:a7:5a:e7:0a:93:74:44:ee:24:4f:3d:e2:c6:
2a:5b:97:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 10:47:07 2023 by rpki-client on console-fra.rpki-client.org